Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
File:                     323830343a343266383a3a2f33322d3334203d3e20323637353430.roa (raw, json)
Hash identifier:          SWrtkHn47qyYJ5Toiy45xU0OYFg8ZX9CuAVaXdv6i84=
Subject key identifier:   41:DB:E3:1F:6E:2B:72:76:5A:04:96:12:6C:CA:EB:F5:F5:DF:97:8F
Certificate issuer:       /CN=E066B97193F54796970FC225B48A67CD25FD8932
Certificate serial:       14D3B9D47B726316DB36044B0333FE51860E0372
Authority key identifier: E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa
Signing time:             Fri 06 Sep 2024 01:52:42 +0000
ROA not before:           Fri 06 Sep 2024 01:47:42 +0000
ROA not after:            Fri 05 Sep 2025 01:52:42 +0000
asID:                     267540
IP address blocks:        2804:42f8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl
                          rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:b9:d4:7b:72:63:16:db:36:04:4b:03:33:fe:51:86:0e:03:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E066B97193F54796970FC225B48A67CD25FD8932
        Validity
            Not Before: Sep  6 01:47:42 2024 GMT
            Not After : Sep  5 01:52:42 2025 GMT
        Subject: CN=41DBE31F6E2B72765A0496126CCAEBF5F5DF978F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:e2:29:98:12:35:f6:41:3b:2c:57:c7:6b:
                    d7:4d:e5:0b:fa:60:1f:c5:f2:e9:68:bb:e4:9c:d9:
                    cf:7a:bb:84:a2:59:29:6c:a3:63:75:39:66:34:b6:
                    76:03:3e:16:cd:47:0a:6b:1f:7b:6a:dc:7f:fb:18:
                    d9:d6:25:e9:b0:9d:ea:9d:67:e7:ca:1b:3c:98:47:
                    6d:1a:f3:fe:52:be:28:1a:e9:15:38:b7:7a:2c:f2:
                    74:94:fc:91:53:74:29:ae:55:bc:99:1f:57:c1:90:
                    28:3c:cd:e5:06:8a:83:e0:af:a5:77:e0:92:59:33:
                    d8:fe:85:33:9e:91:57:10:9b:32:4e:f9:9e:de:e2:
                    64:07:17:14:ab:e6:67:9a:c7:54:bd:11:4b:2b:dc:
                    c5:33:4d:76:ab:e5:55:eb:72:06:02:7c:ef:18:9a:
                    db:1d:14:91:1c:9a:76:47:e6:7e:01:e9:a0:df:a4:
                    ae:d2:3c:54:93:a0:d3:e8:d2:f6:d5:29:42:6a:96:
                    91:b0:64:3f:94:dd:51:c7:91:74:02:c8:3a:ad:5a:
                    97:ea:dc:59:66:db:c6:4e:cc:d0:d0:7a:49:1b:5f:
                    30:e0:9c:70:69:24:56:23:6b:5e:05:f5:ac:3d:8f:
                    a2:b9:35:74:6d:5b:18:7a:ed:b3:ee:90:5e:d6:bf:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DB:E3:1F:6E:2B:72:76:5A:04:96:12:6C:CA:EB:F5:F5:DF:97:8F
            X509v3 Authority Key Identifier:
                keyid:E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/323830343a343266383a3a2f33322d3334203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:ac:f3:de:16:dc:33:3e:a8:fc:2f:2c:ab:63:71:a0:c1:
         c8:e0:d7:db:10:59:60:72:a3:ef:7a:6e:07:b8:d0:65:3d:a2:
         2e:22:1f:c5:22:34:41:47:e6:06:64:32:6e:d7:b7:ab:3e:34:
         fd:17:fc:63:46:a3:5d:b2:e8:5a:69:99:7b:41:e5:a5:77:af:
         cb:5a:78:35:5f:87:6a:b1:2c:1b:73:54:b6:12:2f:05:1b:12:
         11:89:84:06:c7:ed:ee:93:38:b9:ba:b8:09:df:a0:8c:fd:2c:
         1e:c6:b8:42:c7:93:de:5c:27:69:65:fc:ae:18:d1:48:4e:82:
         86:71:37:44:5a:a7:27:27:ce:fc:75:74:a1:7f:40:9c:41:35:
         ca:c4:3c:ec:01:19:b1:be:a4:ef:d8:37:51:25:e1:ef:f6:79:
         2f:35:d4:68:24:06:46:f7:1b:9e:4e:c6:7b:24:84:22:fd:3e:
         94:47:3b:b3:a2:9e:ae:66:1f:06:05:fb:72:f0:57:7e:e5:04:
         af:4b:9c:ea:58:d0:c8:4f:7c:1f:8f:53:75:fa:11:e9:32:9f:
         40:09:ff:bf:49:5c:37:8b:6a:0b:f8:eb:93:95:b5:86:9d:1f:
         6e:a1:74:92:1d:e8:84:c2:f5:2f:15:e0:0e:d7:00:e7:6c:36:
         ea:74:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:57 2025 by rpki-client