Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
File:                     323830343a323833383a3a2f33322d3438203d3e20323633393438.roa (raw, json)
Hash identifier:          2kMN7hgtBl9IQb16h9NUNSAs9ctXhLXv/jfoEu4ZU/o=
Subject key identifier:   E3:80:85:AA:41:3D:74:3D:5A:B6:12:39:EE:6A:0E:87:E5:46:45:72
Certificate issuer:       /CN=9C7F75A4B29AA7ECE436A69A356827489DE646F7
Certificate serial:       40911B9683502BEC1BA154812357183A68AA72C6
Authority key identifier: 9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa
Signing time:             Mon 17 Mar 2025 20:58:31 +0000
ROA not before:           Mon 17 Mar 2025 20:53:31 +0000
ROA not after:            Mon 16 Mar 2026 20:58:31 +0000
asID:                     263948
IP address blocks:        2804:2838::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:91:1b:96:83:50:2b:ec:1b:a1:54:81:23:57:18:3a:68:aa:72:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C7F75A4B29AA7ECE436A69A356827489DE646F7
        Validity
            Not Before: Mar 17 20:53:31 2025 GMT
            Not After : Mar 16 20:58:31 2026 GMT
        Subject: CN=E38085AA413D743D5AB61239EE6A0E87E5464572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:a2:ff:04:c6:7c:9b:fb:2e:1f:90:ad:84:
                    a5:77:ec:5f:52:7d:af:88:98:eb:ed:7a:24:e0:e7:
                    97:2a:15:db:05:52:00:9d:96:c5:50:3f:5e:16:38:
                    db:23:d8:1e:a5:f3:ca:ee:bc:ff:a0:b7:e8:ff:56:
                    74:b3:95:ea:b9:4b:cf:65:35:7a:5d:b0:6f:bf:dc:
                    4c:1e:e7:dc:4c:eb:2a:d2:47:b8:f3:41:26:87:8b:
                    af:61:4e:f1:f0:c3:a3:dd:56:c4:74:ff:69:de:ea:
                    9c:70:4d:a4:dd:7e:15:97:de:91:b4:32:3a:00:0e:
                    e3:c4:71:22:65:ac:06:f0:04:67:b8:85:a6:37:9b:
                    fd:e7:e3:07:80:bf:06:3b:ac:61:79:6e:2f:0a:6b:
                    a1:7f:67:30:66:51:78:8f:e5:ba:bf:10:c7:4d:95:
                    75:3d:43:9d:89:13:8e:44:1e:17:ce:70:e0:dc:a8:
                    b9:91:25:95:8d:e0:7d:fb:f9:58:50:eb:43:e6:ac:
                    bb:32:48:16:b0:74:34:8c:ca:bd:14:03:72:26:c2:
                    51:d7:77:94:bd:ac:e8:c2:c5:87:de:ce:4b:38:3b:
                    51:16:49:10:e2:49:5d:fc:da:e5:0b:95:e9:5d:5e:
                    cb:53:64:bc:1c:c3:fd:b3:49:d0:99:29:cb:69:af:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:80:85:AA:41:3D:74:3D:5A:B6:12:39:EE:6A:0E:87:E5:46:45:72
            X509v3 Authority Key Identifier:
                keyid:9C:7F:75:A4:B2:9A:A7:EC:E4:36:A6:9A:35:68:27:48:9D:E6:46:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/9C7F75A4B29AA7ECE436A69A356827489DE646F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7F75A4B29AA7ECE436A69A356827489DE646F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/323830343a323833383a3a2f33322d3438203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2838::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:53:72:20:68:ba:19:c8:93:16:46:76:a7:d3:ae:c9:8d:
         bb:a0:97:45:96:a7:0e:9c:bd:ba:63:6c:67:79:d1:d0:2e:9a:
         8d:03:51:6b:6f:92:bd:3c:fc:04:ce:b9:20:a8:b1:7b:a0:c5:
         a2:d0:13:21:dd:fc:ce:4a:37:94:aa:6a:c4:03:b8:c9:69:5b:
         2b:2c:f9:80:bd:4c:df:fc:70:f2:8c:37:a0:d3:7f:b1:9a:79:
         de:a8:94:96:6e:4a:07:eb:89:0a:c0:54:5e:3c:9e:35:8c:8a:
         51:4b:e6:fc:64:25:8a:20:e3:a0:07:e6:33:55:f5:ed:48:58:
         90:c7:21:12:fe:9b:42:e5:70:36:af:35:70:46:a4:4d:47:bb:
         44:60:9c:e3:e3:bf:ab:05:f0:88:c8:31:04:25:2e:9f:eb:f8:
         90:bd:e6:ae:69:5a:76:e8:4b:1f:71:68:7b:81:06:a5:67:af:
         8f:e0:64:05:12:7e:68:b4:2a:c9:f9:58:2b:51:29:1e:7c:97:
         1f:cd:5a:85:39:26:3e:06:47:d3:1a:29:fd:ce:95:83:57:42:
         e9:a8:d7:40:5d:d3:ec:4f:6e:20:58:d9:ef:bd:d5:e7:50:17:
         52:de:37:b4:33:c2:dd:40:22:de:8c:37:76:c4:a7:e6:1e:34:
         f0:8b:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:21:28 2025 by rpki-client