Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a666530303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a666530303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          oyR5ascwp+frO5vr2c+7LJ4kF0gXtjuysxi2Rr1KI7U=
Subject key identifier:   D2:96:E7:F0:58:BA:22:9D:19:25:FA:8E:55:9E:FD:96:66:6D:C4:9A
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       4AAA15B28780A9C2C2A68C0E2AF8B442EEDC6AB1
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a666530303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Sat 22 Mar 2025 11:36:50 +0000
ROA not before:           Sat 22 Mar 2025 11:31:50 +0000
ROA not after:            Sat 21 Mar 2026 11:36:50 +0000
asID:                     263612
IP address blocks:        2804:ffc:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:aa:15:b2:87:80:a9:c2:c2:a6:8c:0e:2a:f8:b4:42:ee:dc:6a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Mar 22 11:31:50 2025 GMT
            Not After : Mar 21 11:36:50 2026 GMT
        Subject: CN=D296E7F058BA229D1925FA8E559EFD96666DC49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:54:5b:9a:24:63:f4:c4:7a:65:df:09:ac:
                    df:ea:ad:55:93:a1:d4:04:99:02:8e:5d:f0:4f:a9:
                    06:1f:6e:e0:9e:17:c0:76:6e:fd:a5:cd:8d:af:23:
                    0e:ec:40:4d:96:7c:ae:cf:e6:c7:91:d9:5e:37:39:
                    63:16:1c:ea:d3:9e:2e:7d:27:42:d3:ec:e7:d2:2a:
                    af:ac:db:31:80:78:53:48:f0:c2:41:03:6b:64:20:
                    7d:6d:4d:b9:83:23:43:38:bc:ad:d7:6d:fd:67:cb:
                    a4:67:e1:5b:9a:f9:92:c6:b5:68:99:35:e0:38:ec:
                    49:0c:19:fe:5a:2a:97:f5:26:6b:91:e4:be:62:a6:
                    8f:53:47:ff:81:ab:2a:ce:f4:75:e5:91:05:1a:e7:
                    e9:5d:92:e1:21:37:e9:5f:f9:f1:7e:76:ea:04:c0:
                    29:7e:b4:9c:55:11:e8:7d:da:60:02:fa:a9:f1:a9:
                    7c:cf:66:18:a6:17:35:ef:c1:f7:67:97:c7:e3:70:
                    a8:a7:f9:47:0c:e9:7a:e3:e4:c0:3c:45:68:a2:f1:
                    f3:e7:cd:7e:cf:79:a3:3f:a0:09:88:70:f1:08:2c:
                    2e:ef:bf:32:9c:f2:03:3b:72:6e:7f:3f:84:48:e1:
                    0b:3f:cc:f5:17:7e:b2:2b:12:c2:e8:36:b5:40:2e:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:96:E7:F0:58:BA:22:9D:19:25:FA:8E:55:9E:FD:96:66:6D:C4:9A
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a666530303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:29:d6:04:73:0e:64:70:8d:9f:0e:83:7c:ce:ba:e2:40:f6:
         92:be:f7:38:47:24:28:3f:b9:d3:b0:84:f4:3e:34:8b:94:e8:
         43:39:e1:44:0e:10:51:cd:d9:ed:c1:3c:94:8f:d0:53:4c:08:
         cc:bd:d7:8f:6b:de:2c:17:67:a5:f3:0c:c7:a2:ec:ba:69:d6:
         7c:d5:8b:c3:00:2d:65:18:e8:eb:63:b0:c9:95:06:9a:a5:c1:
         7e:e9:92:8c:ff:40:69:86:92:fb:11:6f:29:a5:4c:e3:50:37:
         3c:30:c1:9d:05:fb:30:ad:c3:f7:c0:3a:17:73:a0:42:03:d7:
         92:49:0f:72:2d:d8:0b:08:87:51:c8:51:21:17:e3:76:94:e8:
         8d:41:50:0c:c5:10:59:79:4f:1d:78:90:2b:fd:b0:89:83:1c:
         9e:77:da:6e:72:3e:ac:3f:6b:61:3a:5f:9e:f4:52:90:0c:52:
         d0:67:8d:fe:cd:c1:e5:77:11:c6:33:dc:f4:d4:80:9d:cb:93:
         73:f6:f5:40:df:71:0e:ca:f8:6f:da:90:23:e6:d4:e9:12:76:
         ce:97:14:bf:3e:5f:30:c8:3f:32:5f:ed:4a:38:1e:a1:49:d3:
         24:73:13:fc:c2:59:46:35:e4:bc:d3:5a:f7:f4:92:36:8e:ee:
         f8:cb:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:53 2025 by rpki-client