Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/323830343a313832343a3a2f33322d3438203d3e20323632333031.roa
File:                     323830343a313832343a3a2f33322d3438203d3e20323632333031.roa (raw, json)
Hash identifier:          YDs4zPEQDnf1BgIK2RBHjcgCo/31EZaN5Q8yqVAAlkI=
Subject key identifier:   BC:38:5C:71:62:C1:CC:A0:EF:E9:18:8F:28:B1:36:ED:7D:70:49:76
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       73DF7D767B9612652170484EE0ED392E938DEED8
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/323830343a313832343a3a2f33322d3438203d3e20323632333031.roa
Signing time:             Thu 06 Mar 2025 07:33:13 +0000
ROA not before:           Thu 06 Mar 2025 07:28:13 +0000
ROA not after:            Thu 05 Mar 2026 07:33:13 +0000
asID:                     262301
IP address blocks:        2804:1824::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 22:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:df:7d:76:7b:96:12:65:21:70:48:4e:e0:ed:39:2e:93:8d:ee:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Mar  6 07:28:13 2025 GMT
            Not After : Mar  5 07:33:13 2026 GMT
        Subject: CN=BC385C7162C1CCA0EFE9188F28B136ED7D704976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:1f:a8:af:66:0c:42:82:d7:63:44:95:1b:
                    8d:3f:3f:a9:61:04:fe:a2:8f:64:cf:42:7e:82:1c:
                    30:3d:44:3a:4b:61:4b:e6:64:13:ad:48:6f:62:7b:
                    8d:4f:70:ad:82:37:c7:30:4e:ce:98:8e:42:9d:c2:
                    40:ca:f8:bf:47:fe:7c:56:e1:12:3e:d6:fd:31:69:
                    d9:66:5a:58:30:d4:73:e0:8e:3e:32:40:0a:ef:c7:
                    20:06:af:41:fb:31:bf:dc:e3:11:25:0d:23:23:bd:
                    90:2f:21:5b:c2:b2:86:91:87:c3:84:7c:fa:41:ed:
                    82:ee:f9:9a:ac:09:5e:d8:61:f5:08:f4:46:ad:a5:
                    4f:ce:54:ba:1e:fe:4b:8f:38:5d:da:84:86:91:5c:
                    e1:41:a4:d0:86:a3:e8:35:2f:66:4c:3c:f1:55:a2:
                    d8:36:bb:c4:c5:56:37:3b:36:93:47:4e:de:2d:72:
                    cd:9a:ac:c8:3c:d8:c0:d5:3e:14:53:10:ca:63:bd:
                    25:6e:16:05:51:31:54:1d:6f:29:8a:c8:13:e0:42:
                    b5:32:23:69:46:70:42:fe:1d:b2:c5:2f:aa:54:a2:
                    cc:22:92:9a:50:cc:7e:7a:60:83:86:dd:70:3f:86:
                    13:bd:b8:2d:32:6b:42:27:ef:d7:3d:b5:3e:21:68:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:5C:71:62:C1:CC:A0:EF:E9:18:8F:28:B1:36:ED:7D:70:49:76
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/323830343a313832343a3a2f33322d3438203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1824::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:dd:79:b1:6b:3f:cf:7e:83:54:e4:39:5c:c8:22:f7:18:
         63:c8:81:c7:13:f1:5d:c8:ad:e9:03:58:06:64:81:9d:33:83:
         98:9a:6b:30:a9:79:6b:27:c2:4e:66:a1:3e:fd:00:3d:9b:b6:
         cd:a5:f9:3a:b4:fe:9a:47:45:aa:b2:1f:e0:29:50:4e:31:4f:
         f4:ab:49:d5:5c:22:64:15:9c:96:a9:2d:75:32:fb:d9:6f:8e:
         fc:54:db:99:90:a3:5c:09:a4:0d:9c:68:ab:d4:26:99:64:6d:
         08:8b:73:b6:6c:4f:1b:f3:d0:57:8d:b7:7d:04:8f:5c:57:f1:
         7b:3f:8a:de:5b:57:9b:49:2b:93:0b:21:e9:b9:13:80:7d:8f:
         dc:47:55:b4:54:b7:5f:56:a5:b8:55:f8:08:f7:ab:98:13:58:
         85:3b:8d:e3:9f:9a:a8:37:20:cd:33:f8:aa:e9:c5:fc:3d:98:
         1a:ff:91:cc:7b:8a:66:31:48:8a:77:9d:76:04:cc:77:f9:4d:
         72:12:2c:69:f2:47:29:9e:79:91:e3:cd:aa:40:19:c2:ca:57:
         dd:25:cf:40:dc:42:77:41:bf:94:1a:cc:ef:78:46:59:9b:34:
         04:01:4d:72:4d:f9:d4:30:a7:60:25:2d:a4:63:f1:5d:6b:5e:
         b2:46:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:21:21 2025 by rpki-client