Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
File:                     323830343a313537633a3a2f33322d3336203d3e20323633333930.roa (raw, json)
Hash identifier:          y+sq4VJUxR3bqFPpU1lDX0HPdfZZHiK6tbjBF4A+7s0=
Subject key identifier:   AF:FC:E0:7F:37:8C:0A:6E:66:1F:BD:B7:09:74:2F:85:D8:8F:11:A1
Certificate issuer:       /CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
Certificate serial:       0D5DB07B4632CC3590BF3C2B516AECF14FBE43FD
Authority key identifier: 81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa
Signing time:             Wed 08 Jan 2025 20:42:21 +0000
ROA not before:           Wed 08 Jan 2025 20:37:21 +0000
ROA not after:            Wed 07 Jan 2026 20:42:21 +0000
asID:                     263390
IP address blocks:        2804:157c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl
                          rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5d:b0:7b:46:32:cc:35:90:bf:3c:2b:51:6a:ec:f1:4f:be:43:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815CD92DD5F19C6193766831C396FE65A0CF9E73
        Validity
            Not Before: Jan  8 20:37:21 2025 GMT
            Not After : Jan  7 20:42:21 2026 GMT
        Subject: CN=AFFCE07F378C0A6E661FBDB709742F85D88F11A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:56:ad:8a:7a:55:50:86:dd:17:82:5c:97:
                    6b:e6:6c:84:17:d3:2e:7b:88:73:1f:60:57:52:c7:
                    15:de:e9:ba:67:f2:22:d2:bb:f6:2d:65:cc:b6:e5:
                    d4:7b:39:c1:09:3e:7d:22:2a:99:b0:9d:cd:15:ca:
                    6c:4c:12:94:b8:e9:cb:71:8e:ab:25:39:93:77:a5:
                    ed:b3:be:67:6e:77:ca:a2:28:ae:4e:6f:db:2e:37:
                    87:f0:27:ad:39:1a:1a:2b:13:25:48:0f:ff:8a:ea:
                    53:57:df:20:1d:8f:fb:fd:67:31:1b:6a:88:18:d4:
                    f6:14:5d:db:c0:e5:0e:f9:cc:a2:b8:aa:aa:c0:48:
                    ac:04:13:96:67:bb:f5:ea:d4:4a:0d:d2:ad:94:3c:
                    a8:0c:64:ad:74:30:94:77:aa:fb:a6:29:24:3d:aa:
                    5f:2f:59:54:5f:86:22:89:04:19:35:be:25:b5:f3:
                    57:72:51:c1:25:27:84:e1:8a:9c:08:9e:6f:32:0f:
                    14:4d:84:29:05:8e:fe:d2:3d:b8:92:46:51:b2:16:
                    55:89:6f:12:b6:1b:78:85:40:18:5c:58:72:0a:c3:
                    be:9d:07:01:d0:4d:30:ba:c8:dd:58:7a:ea:5b:e5:
                    01:14:f7:0f:2a:6a:54:bd:c2:b9:43:76:c7:76:3f:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FC:E0:7F:37:8C:0A:6E:66:1F:BD:B7:09:74:2F:85:D8:8F:11:A1
            X509v3 Authority Key Identifier:
                keyid:81:5C:D9:2D:D5:F1:9C:61:93:76:68:31:C3:96:FE:65:A0:CF:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/815CD92DD5F19C6193766831C396FE65A0CF9E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815CD92DD5F19C6193766831C396FE65A0CF9E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/323830343a313537633a3a2f33322d3336203d3e20323633333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:157c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:41:ee:41:3e:7e:74:18:f8:1d:f7:80:da:8c:94:1a:28:
         20:48:a1:c1:ec:74:03:c5:a3:9c:ad:df:69:cf:d7:d9:50:8b:
         83:46:75:95:44:d7:92:8e:b9:12:9e:4c:35:c0:06:0a:f8:d3:
         a3:63:70:2b:98:0e:dd:9f:86:59:b8:e4:ed:34:d7:16:ee:d7:
         2e:89:4f:c5:a4:b5:7a:72:83:ef:63:eb:6d:9e:a9:90:2c:39:
         37:b8:c6:e7:df:17:59:83:e8:d1:38:fa:75:67:81:2f:03:ea:
         bd:a4:1f:06:e7:f1:59:13:b9:05:67:04:25:1d:50:a3:13:3a:
         d1:bd:ef:61:4d:87:00:e2:9d:e4:93:a4:0d:fd:0b:23:17:82:
         13:9c:2e:28:98:b9:c8:f3:e6:c9:97:e0:c8:97:bb:f5:f8:9a:
         4a:58:c9:a5:33:88:66:97:5b:08:25:6a:98:dd:12:ec:ec:51:
         ea:4b:08:0c:72:86:75:bf:d3:32:c0:a1:0c:fa:64:89:75:d5:
         87:e3:12:5a:7a:26:e1:6c:56:9d:2e:81:fc:25:f2:a7:1a:09:
         c5:94:a7:15:30:6b:c0:08:4d:84:47:33:ed:56:0c:b1:17:5d:
         76:a6:80:09:74:e1:4a:ff:57:ac:16:f8:45:cc:67:ca:68:59:
         fe:9d:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:26:43 2025 by rpki-client