Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File:                     323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier:          RVZUYCkr4aXiOVbIVB1dM9Vpes1YTIvca0ELzcj2vVs=
Subject key identifier:   AF:69:5D:D4:59:D3:5E:2D:C3:A5:67:D7:85:59:28:BB:A6:E6:48:90
Certificate issuer:       /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial:       62CB177641FB8CD42800CDAB37F0B025F083762D
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time:             Mon 07 Apr 2025 18:10:07 +0000
ROA not before:           Mon 07 Apr 2025 18:05:07 +0000
ROA not after:            Mon 06 Apr 2026 18:10:07 +0000
asID:                     53062
IP address blocks:        2804:3b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 23:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cb:17:76:41:fb:8c:d4:28:00:cd:ab:37:f0:b0:25:f0:83:76:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
        Validity
            Not Before: Apr  7 18:05:07 2025 GMT
            Not After : Apr  6 18:10:07 2026 GMT
        Subject: CN=AF695DD459D35E2DC3A567D7855928BBA6E64890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:1c:f8:26:7d:18:75:1c:b5:ea:6e:00:f2:
                    cc:15:43:25:85:fe:c3:a4:f1:87:c0:5d:ae:77:52:
                    21:2d:d4:01:28:d7:83:e1:42:0b:86:0d:27:bc:70:
                    f3:8f:31:ed:a2:b8:c7:48:15:44:69:18:1a:86:af:
                    18:e4:1f:c9:5a:73:fc:c6:3b:12:be:59:fc:2c:d9:
                    2b:84:9d:05:f1:54:bf:0c:07:91:b5:0b:6f:cd:a4:
                    88:b7:a5:7f:1a:de:b7:04:fd:ee:ef:a7:30:25:77:
                    73:3d:e1:03:ea:0b:11:b8:58:97:98:f7:42:8b:fe:
                    96:d2:bb:ca:7b:0c:9b:72:b1:76:7d:7b:5f:dc:b0:
                    30:9a:0a:eb:fd:dc:16:a3:cd:18:75:d6:39:ae:82:
                    d8:d5:95:ca:eb:95:7e:35:3a:4e:cb:71:4d:eb:cd:
                    76:e3:28:67:83:7f:c8:d0:6e:6b:db:c5:e5:29:b0:
                    70:b7:30:2b:1a:8e:be:a9:fa:d5:9d:9b:35:12:3c:
                    b0:91:8d:6e:78:cb:00:c7:44:e6:87:ba:33:1a:1d:
                    4d:16:b3:e4:1f:00:e3:b1:38:2a:c7:9c:e3:35:93:
                    53:77:ef:7d:05:9d:a0:b4:7c:17:d1:99:06:3d:3f:
                    0e:6c:89:91:4d:a7:ca:23:28:47:48:04:18:b4:75:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:5D:D4:59:D3:5E:2D:C3:A5:67:D7:85:59:28:BB:A6:E6:48:90
            X509v3 Authority Key Identifier:
                keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/323830343a3362303a3a2f33322d3438203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:0f:22:7e:02:03:a0:5a:0e:49:04:ab:1a:0f:7e:6e:dd:
         6c:ac:64:84:04:82:dc:d8:21:a3:43:b5:9a:40:72:57:c9:53:
         2f:3e:5b:64:b6:11:d0:a8:b6:93:34:02:a2:a5:b5:c9:b5:df:
         17:15:94:14:16:2f:9f:9d:ec:5f:00:80:5a:81:63:66:12:64:
         bf:26:4c:74:4b:b0:47:55:35:30:fe:29:ea:4a:39:49:f9:08:
         ce:b6:53:79:4a:90:25:c5:58:26:40:b2:d1:68:3e:a0:68:9d:
         60:46:d2:9d:9e:ed:de:ed:65:53:9f:d6:b6:55:d4:46:ea:5e:
         d2:fe:99:ec:c2:f9:39:74:fc:69:fe:48:79:45:6f:1b:f8:c0:
         6b:8c:6d:36:aa:cb:e8:27:6b:bb:55:00:71:98:a2:33:a4:71:
         fd:7f:14:ba:16:b7:ed:ac:5d:8b:ec:61:4a:b4:4c:1b:73:65:
         8f:c7:65:9b:4d:ca:57:da:33:8f:fe:13:58:d3:8b:c8:90:27:
         42:fd:6d:e2:1c:9e:1a:07:cf:b8:20:0f:59:fc:de:20:5f:c6:
         66:d3:a3:ec:a9:c0:1d:91:79:ae:b1:9c:ea:4c:43:90:67:8c:
         bd:65:44:93:4c:22:ad:42:51:66:d4:0c:98:7e:0d:16:59:fb:
         ec:d0:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:21 2025 by rpki-client