Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa
File:                     323830343a336461633a3a2f34302d3430203d3e20323636353436.roa (raw, json)
Hash identifier:          WZ+a2zrF8pWa6gpGZk7pXVOqwA2xYwdeadzMPtmSiV8=
Subject key identifier:   18:DD:4D:1F:B4:DF:7F:36:39:95:6B:AC:A5:57:92:99:F9:6A:40:B2
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       5303F40065B8006D43D5DC042D74F6CD737B451C
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa
Signing time:             Tue 18 Mar 2025 20:06:35 +0000
ROA not before:           Tue 18 Mar 2025 20:01:35 +0000
ROA not after:            Tue 17 Mar 2026 20:06:35 +0000
asID:                     266546
IP address blocks:        2804:3dac::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:f4:00:65:b8:00:6d:43:d5:dc:04:2d:74:f6:cd:73:7b:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Mar 18 20:01:35 2025 GMT
            Not After : Mar 17 20:06:35 2026 GMT
        Subject: CN=18DD4D1FB4DF7F3639956BACA5579299F96A40B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:f9:e3:ba:16:f5:53:e8:bc:87:46:6a:e5:
                    66:fd:da:36:ac:d6:c2:52:13:57:73:1e:7f:1a:f6:
                    76:44:67:0c:b7:77:4d:b3:ef:cd:64:59:c0:06:3a:
                    87:94:87:24:8f:c9:07:bc:e2:8f:70:ad:2f:f5:87:
                    05:ef:fd:7e:23:26:c9:51:d4:ac:7b:27:c9:de:b6:
                    21:7b:43:c4:38:bb:6e:17:be:a3:d5:d1:f5:7f:1b:
                    18:03:fb:a9:fd:d3:35:12:43:fd:f4:97:ec:03:f1:
                    b3:06:56:38:46:eb:2b:68:e5:88:e5:26:56:73:f1:
                    cb:38:60:b3:53:69:38:89:55:2b:32:d3:72:21:67:
                    52:40:a6:e9:8f:41:37:a2:0b:4a:1e:27:14:b0:b2:
                    26:d2:2f:63:3b:1e:3b:50:f2:a6:b4:55:47:74:e3:
                    45:0e:a6:6a:9e:fd:45:2f:8d:65:59:99:2d:5c:d9:
                    db:b4:da:4f:68:f7:f7:66:41:c4:b7:cd:bf:14:84:
                    98:59:1a:62:1e:b2:41:41:5f:7e:ec:0d:88:83:b3:
                    58:08:79:2d:9e:90:66:26:75:65:85:4e:46:29:6b:
                    8b:75:d0:1f:69:1d:06:63:78:52:ff:74:c1:9e:00:
                    a5:53:41:02:62:ca:5e:d8:69:45:31:93:06:bb:87:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:4D:1F:B4:DF:7F:36:39:95:6B:AC:A5:57:92:99:F9:6A:40:B2
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dac::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:97:3e:b9:9e:71:ce:84:16:8d:eb:2c:54:13:c9:b1:9f:
         ed:d8:3b:47:71:5e:b2:8d:01:1b:ea:ef:01:35:ff:20:38:79:
         57:dd:0c:81:56:cb:8d:49:c5:36:48:b8:65:47:9b:9e:d4:8e:
         ea:f2:89:95:85:38:bd:5c:c3:0d:6a:14:fc:98:83:21:85:a9:
         05:72:ef:59:21:31:01:f1:6f:d6:37:4d:a7:f3:19:33:1a:03:
         6c:ef:ea:19:5e:50:b6:40:e9:cb:05:a5:bc:e1:12:0f:bc:02:
         0b:3a:fc:82:8b:29:6b:25:60:cc:d8:c4:26:12:18:3e:18:be:
         7e:fe:59:da:9c:51:45:5d:8d:a8:b3:a7:3d:e1:7c:07:c6:85:
         0e:ff:dd:f3:4c:2a:f8:24:96:ea:c7:a8:cf:67:5a:3b:5d:81:
         84:dc:17:b0:b3:78:a2:98:75:b3:a4:0e:47:a8:51:9f:0d:e4:
         49:3d:3f:80:c6:c4:b2:84:86:67:5b:7b:14:64:59:ff:67:05:
         bf:9e:2f:fb:f0:15:71:a3:4e:0f:10:f8:99:53:e6:68:fc:77:
         4a:5d:0c:f5:6b:b1:f5:81:9f:c0:83:85:7b:35:00:43:39:de:
         22:bd:58:e8:ec:be:56:1e:36:fd:29:b8:68:35:2e:ba:e3:31:
         9f:c5:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:52 2025 by rpki-client