Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
File:                     323830343a336539343a3a2f33332d3338203d3e20323636363037.roa (raw, json)
Hash identifier:          2SsCq7z5hY7wGFxZGBMGx64quWuTdpnmFRYWVaORqFw=
Subject key identifier:   1C:AB:E1:A8:EA:BE:3D:50:A8:30:EA:EC:38:21:82:1C:AC:F7:1A:29
Certificate issuer:       /CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
Certificate serial:       67ACBF0D4F79CC9764BFC97D96E3E6B9C07C75AF
Authority key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa
Signing time:             Wed 05 Mar 2025 22:06:12 +0000
ROA not before:           Wed 05 Mar 2025 22:01:12 +0000
ROA not after:            Wed 04 Mar 2026 22:06:12 +0000
asID:                     266607
IP address blocks:        2804:3e94::/33 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl
                          rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ac:bf:0d:4f:79:cc:97:64:bf:c9:7d:96:e3:e6:b9:c0:7c:75:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51
        Validity
            Not Before: Mar  5 22:01:12 2025 GMT
            Not After : Mar  4 22:06:12 2026 GMT
        Subject: CN=1CABE1A8EABE3D50A830EAEC3821821CACF71A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:c9:9e:6e:a7:a2:63:4c:70:bc:a0:38:5f:
                    78:f1:51:54:fa:57:84:c1:9e:47:63:7a:9e:1d:09:
                    a8:89:56:24:40:d2:9a:0a:ce:e3:6e:ee:27:ce:38:
                    d3:61:07:43:83:a4:77:de:5e:d3:5d:a2:04:36:7a:
                    3c:51:e2:ab:0d:90:dd:24:bf:ed:7c:3a:b2:a7:20:
                    e3:27:e4:6f:ea:ea:27:be:5d:7d:f7:e5:dc:f6:88:
                    86:00:1e:06:a9:a2:04:ff:2b:56:83:27:5b:1e:ca:
                    15:b4:29:51:24:83:23:d9:b5:6d:d6:bf:6a:22:dc:
                    9a:d6:8b:74:b8:0a:d8:4d:a4:22:ae:69:4a:00:a5:
                    c9:15:6e:6c:45:73:dd:5b:b9:a8:77:77:c4:f3:b0:
                    59:71:5a:f3:ca:a0:a8:9c:00:e4:4c:13:9c:39:9a:
                    63:9d:79:c6:15:8b:54:8c:05:1e:2e:aa:41:cc:0e:
                    50:ac:a0:84:4e:ae:c8:90:0b:e3:0c:3d:44:46:ad:
                    a7:f6:9d:57:af:61:79:ad:b8:e6:a0:47:b0:76:63:
                    4f:f6:48:ad:1f:86:7c:30:1b:82:49:77:76:17:78:
                    af:e1:25:6c:d7:7f:b9:3f:77:09:34:92:d9:59:c9:
                    11:12:c8:9c:53:50:4a:9b:40:33:b7:b9:04:27:68:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:E1:A8:EA:BE:3D:50:A8:30:EA:EC:38:21:82:1C:AC:F7:1A:29
            X509v3 Authority Key Identifier:
                keyid:51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/323830343a336539343a3a2f33332d3338203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e94::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:05:60:a8:41:d0:99:53:f2:f8:21:74:0f:a4:43:cc:cd:
         b2:05:33:6c:1b:0b:26:78:e0:cb:6a:6f:96:61:f5:68:f8:b2:
         d7:78:28:f3:43:df:02:73:fa:40:cb:5f:25:69:64:ac:71:50:
         11:cc:fd:67:8b:c4:20:93:69:08:49:a2:05:8a:03:2b:ea:cd:
         50:58:b2:19:df:84:82:c2:52:62:75:ee:af:56:39:26:ad:7e:
         43:9d:26:25:55:f8:fc:fd:d7:d2:80:fd:16:77:22:12:9a:80:
         07:c3:b0:52:eb:05:f4:d5:fe:86:09:2c:c0:38:73:33:74:43:
         58:d0:44:eb:69:48:6b:23:29:17:94:fa:e7:6f:16:a9:48:07:
         54:ec:ad:fa:c0:a2:53:8e:d4:7a:41:f9:a3:49:12:57:f2:84:
         54:5a:f0:8c:7c:15:02:33:65:1d:3b:33:74:59:5f:63:0d:ee:
         f4:09:64:89:7e:41:32:f5:2e:6b:3e:09:19:ce:2b:dd:a3:44:
         f8:d2:53:15:6e:a6:f4:41:c4:30:38:b2:f9:66:92:81:30:4e:
         26:7b:be:c6:35:29:13:33:08:1c:9e:e3:a8:a8:7a:4b:7d:5f:
         69:79:f1:0e:62:15:b6:50:4a:a6:bd:cd:7d:53:80:29:4f:68:
         84:a9:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:11 2025 by rpki-client