Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa
File:                     323830343a346363303a3a2f33322d3438203d3e20323637333839.roa (raw, json)
Hash identifier:          uwrWbsPhiahC3q8y1u9h3R8yNsJaXzijtEfhFfeFK1Q=
Subject key identifier:   D8:CA:0E:5C:0D:8C:4B:DA:8E:27:EA:25:C1:35:4B:03:F3:0E:AE:AB
Certificate issuer:       /CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
Certificate serial:       774FE291573AB7BF9AE6235ED4C1A3799C1B9D3E
Authority key identifier: 63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa
Signing time:             Thu 06 Mar 2025 17:06:02 +0000
ROA not before:           Thu 06 Mar 2025 17:01:02 +0000
ROA not after:            Thu 05 Mar 2026 17:06:02 +0000
asID:                     267389
IP address blocks:        2804:4cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl
                          rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:e2:91:57:3a:b7:bf:9a:e6:23:5e:d4:c1:a3:79:9c:1b:9d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638087ED81E6ABF3705A6FE4584C399C4C56720F
        Validity
            Not Before: Mar  6 17:01:02 2025 GMT
            Not After : Mar  5 17:06:02 2026 GMT
        Subject: CN=D8CA0E5C0D8C4BDA8E27EA25C1354B03F30EAEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:ba:ac:b7:6e:58:ee:cb:8d:b4:17:a4:d1:
                    05:1e:1a:2a:d4:51:dd:ea:18:97:06:33:54:e0:00:
                    3f:15:43:85:f6:99:71:95:0d:66:dd:1a:d9:37:9a:
                    0b:92:f2:88:d3:f7:a5:7f:d5:af:6f:f8:61:91:c3:
                    b3:7c:fa:aa:63:f9:39:31:52:02:8e:8c:5d:1f:8d:
                    75:fa:f0:f1:d8:b1:46:45:4c:e7:1f:80:95:1a:ca:
                    8c:f3:1e:94:2d:3f:64:81:1b:90:e3:0b:91:ef:e7:
                    35:14:34:aa:17:08:4b:b8:b5:23:8d:c0:76:cf:4f:
                    21:7e:5a:26:26:71:54:10:42:26:1a:47:b0:20:db:
                    b2:b6:ca:c2:1a:5c:7e:cc:b7:2a:1a:6d:b0:b6:e3:
                    bf:55:1d:94:e5:b2:5e:6a:d0:ca:d2:59:dc:45:8a:
                    b7:7f:fe:3e:cd:06:ad:23:ae:46:f8:d1:47:62:fc:
                    ed:63:1b:ec:01:e5:ec:35:af:e3:ed:b6:24:58:fe:
                    a2:08:dc:36:a5:6b:5b:8d:21:a9:93:2e:97:b0:25:
                    fe:82:c3:52:37:04:d9:47:cf:93:f1:5f:aa:0f:57:
                    48:f1:4f:32:30:73:87:86:e7:ea:c5:74:ee:f2:de:
                    85:9d:87:94:36:0c:56:e9:ff:a3:fc:a7:d4:a4:d7:
                    e5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:0E:5C:0D:8C:4B:DA:8E:27:EA:25:C1:35:4B:03:F3:0E:AE:AB
            X509v3 Authority Key Identifier:
                keyid:63:80:87:ED:81:E6:AB:F3:70:5A:6F:E4:58:4C:39:9C:4C:56:72:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/638087ED81E6ABF3705A6FE4584C399C4C56720F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/1/323830343a346363303a3a2f33322d3438203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:1c:c6:9d:a2:ae:61:45:9d:4d:ab:55:57:ce:fe:11:96:
         56:ce:90:67:b4:bd:df:00:02:35:34:b2:14:3e:d4:b1:a8:9c:
         1f:70:cd:80:68:ed:10:04:5d:d0:73:83:bb:c8:3f:eb:81:f8:
         46:8e:d7:b5:4b:f8:9c:4d:52:4d:59:2b:35:1b:6b:d0:49:cb:
         48:0c:b3:9c:bb:0b:14:ea:4a:43:a8:be:6c:12:e5:71:5f:c5:
         9f:a3:93:fc:1e:91:eb:29:67:6a:97:50:3d:45:d9:af:52:0e:
         3c:71:fa:0a:3f:6c:2f:69:7e:91:9b:ad:9d:f6:bc:0c:b8:65:
         8e:76:c1:b5:74:08:bf:86:27:96:30:3d:f0:44:47:13:20:ed:
         b0:18:a4:b5:47:0a:f7:a7:ff:71:88:35:b2:2a:92:c6:e3:bb:
         03:df:50:00:7e:3d:19:a8:39:aa:1e:d9:97:f1:ab:1a:48:e4:
         48:92:e9:29:09:98:56:90:cc:0c:1a:d4:ac:d3:ca:8e:81:ea:
         dd:25:b1:3d:2a:5d:6e:12:b3:9b:96:84:fb:72:10:6a:9d:25:
         48:f0:e6:19:7f:81:e2:9e:55:ee:e5:19:e5:2f:a9:77:83:66:
         dd:f9:c4:5c:be:22:69:cb:16:5f:94:64:4c:4c:4e:fd:42:c4:
         af:f4:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:59 2025 by rpki-client