Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa
File:                     323830343a316135383a3a2f33322d3335203d3e203631383535.roa (raw, json)
Hash identifier:          gacJAWmxt9V0JluidGXGfCKOrBkP1/3hsyZaMA0Cgto=
Subject key identifier:   32:8D:05:AA:67:00:A2:5D:14:5D:8C:FA:88:A3:BC:A9:4A:BD:B2:B2
Certificate issuer:       /CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
Certificate serial:       3F7FFB702E2932CAF0D3A5C17D790F9C6B5BF829
Authority key identifier: B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     61855
IP address blocks:        2804:1a58::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl
                          rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7f:fb:70:2e:29:32:ca:f0:d3:a5:c1:7d:79:0f:9c:6b:5b:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45683C1BB4344BEACD72830DD6175D3188D8B0A
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:ef:05:65:0f:a9:d3:a2:f8:64:a3:af:c3:
                    73:e3:82:6b:6a:68:e6:64:98:4a:7f:4e:84:a4:d9:
                    1c:c6:da:78:0a:3b:6f:6a:76:b8:a1:7d:6e:e8:c9:
                    5b:7e:14:b6:f6:07:ba:28:dd:02:9a:cb:e9:72:e5:
                    ad:29:6c:32:9c:ef:a0:fd:a9:bb:c2:15:cc:7b:66:
                    bd:af:67:8f:59:30:5c:92:5a:56:44:3d:8b:10:f5:
                    e8:c9:df:dd:5a:51:fa:b7:a5:0f:b5:81:fb:d1:31:
                    f9:f5:dd:0e:e5:1f:9c:1c:79:83:4a:88:40:40:e9:
                    21:13:76:3e:95:c9:45:58:d0:4b:62:92:25:b1:01:
                    5e:61:5b:fb:99:ac:7b:a2:16:b7:1f:bb:6b:6d:1f:
                    d3:c6:3a:68:9e:ae:b0:e8:d4:99:2c:d0:85:08:5d:
                    94:ee:d7:55:18:b7:b4:5e:f9:01:ae:70:05:8a:23:
                    28:05:92:01:fe:76:b8:30:00:a3:c3:4b:5c:dd:6f:
                    7f:7a:8a:4f:fe:af:66:e3:bb:e2:58:bf:8d:58:5d:
                    02:3e:8b:b9:dc:9d:e6:56:d7:38:29:b5:ee:a4:9f:
                    a0:1a:2e:4d:44:85:97:28:17:91:c5:7d:70:29:df:
                    d5:eb:5d:98:a1:25:99:d6:3f:c5:1d:dd:06:ae:50:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:05:AA:67:00:A2:5D:14:5D:8C:FA:88:A3:BC:A9:4A:BD:B2:B2
            X509v3 Authority Key Identifier:
                keyid:B4:56:83:C1:BB:43:44:BE:AC:D7:28:30:DD:61:75:D3:18:8D:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45683C1BB4344BEACD72830DD6175D3188D8B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4SPKLu8vddUty4qs2nx1ba4DQ3hmjoeDi9xQmXcpgB8/1/323830343a316135383a3a2f33322d3335203d3e203631383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:2a:8b:3b:96:e0:23:96:f1:76:c4:18:9d:11:ea:f4:50:
         c4:aa:30:50:eb:ab:58:f9:15:50:4c:27:66:90:7b:fd:ad:02:
         fb:b2:1c:d6:bf:dd:2e:eb:2b:18:48:ab:b2:6f:49:5a:4f:6f:
         a2:b5:57:10:cb:b4:a6:72:b2:ae:1d:ee:00:39:e4:a0:81:04:
         df:7c:f5:e2:38:bc:1c:e5:a4:bf:b0:ae:a2:ad:67:63:b8:44:
         09:f3:a7:96:d7:93:27:37:c9:26:e5:8b:c0:90:83:a9:71:2c:
         22:1a:30:38:e0:21:0e:df:bf:3c:58:07:ca:ca:c5:84:ff:71:
         92:45:be:be:9d:be:f2:e4:32:48:78:f4:77:80:ef:2e:37:88:
         ad:4a:15:af:38:d4:d0:78:08:b0:50:35:ef:8e:e6:c5:25:28:
         48:e1:c2:ba:fc:6a:ba:e7:c8:a1:34:56:4d:7a:9d:83:d0:af:
         b0:68:fa:e7:59:35:6d:3c:63:c8:46:65:b0:1a:92:5c:3b:51:
         fb:35:fd:1a:65:36:e5:98:78:0a:d2:be:20:da:5d:4d:57:49:
         26:66:ba:6e:b9:11:a0:19:75:62:ac:b9:b6:3e:28:b2:82:a1:
         1b:16:c5:8f:dc:91:47:ea:c0:1e:0c:af:bc:d0:fa:de:bf:0a:
         fc:42:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:55:42 2025 by rpki-client