Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa
File:                     323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (raw, json)
Hash identifier:          nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=
Subject key identifier:   4E:FB:62:DB:42:E9:D8:35:6C:DC:5D:13:52:28:5C:B1:0F:FA:CB:35
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       4A0C0277B2565C13AF601ECA896809A8B561610E
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa
Signing time:             Thu 06 Mar 2025 06:49:07 +0000
ROA not before:           Thu 06 Mar 2025 06:44:07 +0000
ROA not after:            Thu 05 Mar 2026 06:49:07 +0000
asID:                     263945
IP address blocks:        2804:282c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0c:02:77:b2:56:5c:13:af:60:1e:ca:89:68:09:a8:b5:61:61:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Mar  6 06:44:07 2025 GMT
            Not After : Mar  5 06:49:07 2026 GMT
        Subject: CN=4EFB62DB42E9D8356CDC5D1352285CB10FFACB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:ef:fb:5f:ab:ad:9b:31:2c:f7:fa:f3:ae:
                    e5:60:0c:2e:b7:77:74:33:da:c3:ea:99:c8:a6:59:
                    51:53:e6:29:73:bf:54:97:8f:1e:cf:52:32:f3:05:
                    77:46:71:81:c5:0c:6a:84:c7:a3:10:40:86:41:74:
                    a2:45:57:3d:bd:97:14:65:2f:61:ae:0b:51:72:72:
                    0d:89:e3:43:85:0a:cc:03:d7:d5:d5:36:8b:1f:16:
                    c8:23:79:c9:ad:50:f9:40:6a:51:00:f5:29:a3:2b:
                    97:cd:d8:38:68:79:68:a4:84:84:9f:c6:d8:32:75:
                    35:e8:0e:20:ca:a1:d1:d0:85:db:11:db:21:ef:11:
                    09:c2:cf:25:37:4e:80:3c:b9:f7:6a:03:d9:d0:ba:
                    d4:d7:a3:7a:95:9b:ad:d7:98:32:b7:12:7b:a7:e0:
                    e7:49:07:8a:c5:6b:c8:6b:94:ab:91:db:84:4d:06:
                    64:c1:8b:00:2a:d2:d8:92:93:da:df:37:7f:cf:8f:
                    3c:17:f8:e9:10:f4:d5:9b:a1:16:07:82:8a:70:21:
                    9e:f9:ef:1b:9d:7e:fc:1b:13:a4:55:b5:1e:a1:30:
                    eb:3f:87:a9:58:07:bc:0c:45:87:ff:3c:13:f6:3c:
                    f2:67:1d:67:ab:92:19:ab:a9:00:e0:95:aa:4c:8a:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:62:DB:42:E9:D8:35:6C:DC:5D:13:52:28:5C:B1:0F:FA:CB:35
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:282c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:96:9a:fb:3b:75:e2:c8:05:f2:9c:93:c3:e7:4e:8c:36:b6:
         27:5d:ed:9a:a8:19:e5:e8:f1:30:ba:2e:97:6b:8a:05:98:38:
         d0:a8:5d:50:73:3c:03:87:15:29:a4:7f:0e:41:ef:f8:c9:c9:
         9e:84:5c:7a:d8:40:0a:ff:0b:9b:70:b5:b6:19:ee:9e:5e:df:
         57:79:03:95:78:fe:97:a1:fc:c4:db:80:06:dd:c1:98:f6:36:
         98:a5:3f:15:13:ef:35:6f:3d:e7:10:73:75:13:ba:77:d3:29:
         5b:41:38:1e:ee:9d:f2:24:42:7b:e4:fb:4f:9e:3b:de:9e:3b:
         48:5b:12:2d:3b:4b:52:9c:6f:eb:cb:b2:49:50:e7:8c:5f:1d:
         b0:2c:ab:d3:e0:9b:1a:33:9e:95:da:34:ec:87:54:1f:87:c9:
         27:f9:1a:21:85:29:2a:39:55:dd:c0:d6:f4:57:94:6a:16:56:
         cc:8e:cd:a8:17:7a:cc:be:75:92:96:8c:0b:8a:30:f8:fc:8b:
         2c:74:3b:60:0a:91:2b:6b:58:03:4c:53:d4:97:4a:60:e8:74:
         6a:25:17:1b:ff:9a:42:df:dc:e2:92:f5:b4:ff:6d:f6:4f:8f:
         98:32:7e:41:64:f8:75:d9:ff:69:a9:0d:03:61:fc:11:1e:e8:
         6d:66:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:25 2025 by rpki-client