Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa
File:                     323830343a373337383a3a2f33322d3332203d3e20323730393137.roa (raw, json)
Hash identifier:          fTeP6eMiUq/4CFwfzbw9XYY0i6tkBX93/vP5a+bk3Q4=
Subject key identifier:   79:C6:31:37:EB:6E:10:01:0B:70:4E:D4:7A:F6:F0:BD:97:95:C8:E1
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       62305D871D39B46C721F1E4624A92F275BA41EE3
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa
Signing time:             Tue 05 Nov 2024 14:15:06 +0000
ROA not before:           Tue 05 Nov 2024 14:10:06 +0000
ROA not after:            Tue 04 Nov 2025 14:15:06 +0000
asID:                     270917
IP address blocks:        2804:7378::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:30:5d:87:1d:39:b4:6c:72:1f:1e:46:24:a9:2f:27:5b:a4:1e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Nov  5 14:10:06 2024 GMT
            Not After : Nov  4 14:15:06 2025 GMT
        Subject: CN=79C63137EB6E10010B704ED47AF6F0BD9795C8E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:de:78:17:26:40:03:1e:85:f0:c5:50:69:
                    b3:5e:49:ed:4e:79:5b:4f:5d:8f:fc:25:4f:d8:db:
                    e0:1a:e5:45:36:79:55:51:28:8e:98:22:c9:a9:46:
                    88:c8:f7:07:c4:8c:8f:fe:9e:83:61:2e:c1:3e:37:
                    1d:d8:d3:0a:21:60:3d:bb:b3:cc:37:f1:a8:69:90:
                    df:9f:df:6b:09:ff:0a:08:53:fb:fe:bd:4a:e4:95:
                    63:0d:cb:6d:0f:43:09:7d:28:6c:27:6a:3e:e3:42:
                    66:14:03:9e:d6:13:dd:7a:43:af:c9:27:09:20:83:
                    64:b2:51:01:50:e7:53:01:a4:e8:b3:32:92:3c:d1:
                    6d:c3:cc:39:2c:a1:8d:26:a7:95:fc:1f:b4:67:7f:
                    cb:8c:31:fb:0b:f0:d8:59:fa:02:63:46:4a:39:a0:
                    be:bd:36:3d:dc:8d:3f:28:c6:11:ed:dc:b7:75:61:
                    ca:d7:20:76:d3:8e:b8:4b:09:56:84:7b:11:f3:00:
                    9d:6c:80:4a:ff:4b:67:b5:d6:7d:c6:e7:5e:cf:35:
                    1f:0c:13:da:a5:4c:45:ec:b7:cb:fb:0c:d4:40:cc:
                    28:98:a5:7d:c8:46:5b:d7:d5:23:95:24:99:0c:a2:
                    24:da:0e:18:b2:0c:50:30:2d:48:51:a7:06:4d:3b:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:31:37:EB:6E:10:01:0B:70:4E:D4:7A:F6:F0:BD:97:95:C8:E1
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/323830343a373337383a3a2f33322d3332203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7378::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:57:41:e1:01:62:05:f6:6b:f2:4e:f3:0f:c6:d0:94:7d:
         55:94:70:1f:30:65:e7:3b:81:75:b5:4e:16:fb:7c:a9:08:67:
         1d:cc:b0:86:75:fd:0f:ea:9d:30:54:52:16:98:09:df:3a:9c:
         18:b5:32:9c:8e:d3:4d:d1:30:0a:68:32:41:54:02:fb:66:22:
         4c:91:9f:e8:a7:44:bd:79:68:37:74:f4:a2:29:75:df:97:fd:
         a9:0b:42:8d:05:83:d9:ac:de:c3:19:6d:2e:00:75:34:08:42:
         a5:59:6b:9e:28:fe:e3:59:33:9c:72:2e:25:3b:e1:d6:e7:67:
         d2:46:f1:64:83:15:59:90:00:10:9e:76:8d:ed:bb:a5:72:bb:
         12:88:f4:f1:e0:3f:6d:af:c1:ab:73:cb:c5:1b:80:62:5b:d1:
         ca:6c:64:fe:82:45:e1:41:bc:e7:7c:fd:77:f1:0b:04:c0:77:
         b7:71:0e:b9:c0:ea:40:5c:f2:02:f4:9d:f5:1f:13:b1:f1:a4:
         99:57:cd:e5:9c:49:eb:5c:ed:f0:eb:d7:34:ae:10:52:f0:06:
         bb:56:17:bd:b1:74:07:96:01:c6:79:58:79:04:b0:85:c7:c4:
         1d:19:42:6e:0a:c2:52:15:8a:ba:f5:80:85:8d:dd:fb:23:54:
         e4:a2:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:33:19 2025 by rpki-client