Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33362d3336203d3e203533313132.roa
File:                     323830343a6430633a3a2f33362d3336203d3e203533313132.roa (raw, json)
Hash identifier:          jIEu9g6xgVeUd5jFPrMAU04sA0EMZLrO+i0fR5W5KYE=
Subject key identifier:   E9:BE:C6:A8:7F:F6:D7:AF:B1:46:AF:A9:03:D4:EC:DC:74:F2:BF:98
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       2279A485E242DFF0882AF2570EF89067C5BD76F0
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33362d3336203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        2804:d0c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:a4:85:e2:42:df:f0:88:2a:f2:57:0e:f8:90:67:c5:bd:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=E9BEC6A87FF6D7AFB146AFA903D4ECDC74F2BF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bd:2f:89:fe:b7:5c:49:02:ba:bc:dd:6d:0c:
                    0d:a3:63:f1:a2:e3:84:63:81:7e:46:bf:54:06:22:
                    88:5f:34:61:40:bd:40:8a:30:9f:d6:f4:48:f4:89:
                    40:55:db:4d:11:04:94:2b:0a:c4:10:cf:48:be:c4:
                    5a:a3:52:38:f7:0e:64:de:57:a9:56:c9:c8:dc:a8:
                    77:78:ca:7b:0c:3e:3c:bf:e1:cb:27:e0:92:1a:b1:
                    41:9b:df:3b:22:1d:fb:ac:c2:7c:30:c3:44:df:dc:
                    3a:69:53:1f:e1:d6:c8:c3:da:d7:81:7e:9c:4a:c2:
                    cc:83:51:ca:61:05:5e:8e:d9:12:b0:cb:97:df:e1:
                    29:46:70:76:7a:74:29:13:a6:5d:46:3b:17:5b:8c:
                    e0:80:d8:e3:16:a9:42:36:f7:26:df:ef:93:a3:9f:
                    15:0c:9f:76:97:d8:41:55:00:6a:ad:71:ee:6f:c9:
                    a1:73:91:89:ee:8f:1c:94:57:8a:f8:47:eb:7c:43:
                    85:c0:32:f1:c5:b3:d1:97:f4:87:82:5c:c4:a1:40:
                    79:ae:10:ac:33:47:07:9c:0a:f3:db:f9:a1:38:bd:
                    cf:91:7d:6b:65:ea:4e:c7:40:7c:0e:39:08:73:1f:
                    35:b7:8f:bc:14:59:bb:6b:a2:60:9e:16:67:a1:9d:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:C6:A8:7F:F6:D7:AF:B1:46:AF:A9:03:D4:EC:DC:74:F2:BF:98
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33362d3336203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:25:fa:ab:9b:c8:0d:59:0f:9c:7e:7b:21:09:23:41:9d:
         63:3b:fd:03:38:01:1e:02:2f:81:d8:97:c1:c2:98:c1:a4:dc:
         8c:04:56:21:c1:e0:e6:9a:10:8b:59:09:72:bf:d4:1e:6e:b4:
         6f:91:b3:ac:4d:92:ed:50:b8:0e:cc:f3:02:9a:4f:0b:39:da:
         68:e0:c2:af:86:b2:8d:81:9b:fc:27:5a:20:50:6b:b4:1a:76:
         d6:c9:bb:d3:8d:64:9b:01:7b:12:f1:02:78:60:32:b6:cd:1c:
         ba:ef:16:77:3f:4f:a5:f2:68:27:bc:cc:33:f4:e7:0d:1a:95:
         3c:cb:4e:32:a4:c4:73:72:d0:59:40:10:4b:dd:d8:21:c0:8d:
         07:2b:5a:65:72:48:ae:12:12:0d:8d:cb:9e:d1:6d:15:52:17:
         c1:e8:4e:bd:48:d8:30:d7:5f:be:56:94:72:f8:c6:c9:db:bb:
         ba:b7:17:27:07:4e:70:da:80:fb:bf:dc:69:2a:3d:86:93:da:
         41:6e:95:22:80:2e:4c:da:50:ab:13:5f:aa:e0:b0:12:e0:9f:
         cf:3a:51:08:bd:90:c5:54:89:16:2d:3e:40:cb:f4:80:00:13:
         ee:5c:56:9c:f6:f7:bb:52:32:68:35:83:d5:75:20:29:37:1d:
         1c:c0:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:42:28 2025 by rpki-client