Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/323830343a393038383a3a2f33322d313238203d3e20323733353538.roa
File:                     323830343a393038383a3a2f33322d313238203d3e20323733353538.roa (raw, json)
Hash identifier:          7SsgFVf4qilP6riElw0Dsp1S7JCn5aQdOBEBP0daWuw=
Subject key identifier:   70:A1:92:0A:A6:31:97:52:6F:1F:4A:CE:3B:8C:08:E4:C5:C7:3D:15
Certificate issuer:       /CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
Certificate serial:       3406D44FE8CD501DFF5B7F1B8E71532DF6508EE9
Authority key identifier: 58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/323830343a393038383a3a2f33322d313238203d3e20323733353538.roa
Signing time:             Wed 12 Feb 2025 17:09:48 +0000
ROA not before:           Wed 12 Feb 2025 17:04:48 +0000
ROA not after:            Wed 11 Feb 2026 17:09:48 +0000
asID:                     273558
IP address blocks:        2804:9088::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl
                          rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 00:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:d4:4f:e8:cd:50:1d:ff:5b:7f:1b:8e:71:53:2d:f6:50:8e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581F7F0DADFA0E16F4D2FF9A84883BC6706989C4
        Validity
            Not Before: Feb 12 17:04:48 2025 GMT
            Not After : Feb 11 17:09:48 2026 GMT
        Subject: CN=70A1920AA63197526F1F4ACE3B8C08E4C5C73D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:11:c9:8b:62:56:b9:3a:41:60:a6:9b:39:
                    1e:05:11:c1:a5:7b:86:7a:35:2c:75:50:e4:ef:19:
                    9e:ee:7f:f2:84:3c:42:ea:4b:31:09:28:14:9d:e3:
                    7b:bb:a6:f9:9d:df:82:0c:c4:21:cb:af:58:6d:66:
                    8e:85:94:cb:22:93:4c:50:32:3d:d8:91:85:b4:dc:
                    7a:12:30:83:39:fc:c0:c6:d4:85:7f:3c:bf:c8:80:
                    64:51:80:17:4e:15:98:2c:f4:72:8e:b4:86:ee:48:
                    a4:54:b5:cc:b3:25:93:b2:c8:02:f1:02:f2:54:e4:
                    0a:44:57:fc:dd:fb:68:06:05:bb:e7:50:4e:14:0d:
                    03:0b:9f:f6:21:39:d5:67:ae:a2:8a:85:4c:2a:c0:
                    10:16:f4:61:89:8c:1a:6e:e5:c8:ee:88:00:34:b8:
                    2d:cb:36:1c:38:ba:f1:52:38:49:c1:e0:68:d8:fe:
                    49:a8:a1:52:c1:33:71:58:d1:b6:a6:35:ed:02:d5:
                    93:4c:3c:9f:dd:47:45:04:95:63:e4:3d:ce:dd:00:
                    fd:81:78:ba:c4:1b:02:8b:d3:97:47:87:7b:79:06:
                    f1:ed:44:b6:a4:66:77:b1:20:db:c7:9c:5b:f8:fc:
                    bd:c9:ef:15:54:aa:d3:04:a0:29:9a:28:d3:fa:1a:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:92:0A:A6:31:97:52:6F:1F:4A:CE:3B:8C:08:E4:C5:C7:3D:15
            X509v3 Authority Key Identifier:
                keyid:58:1F:7F:0D:AD:FA:0E:16:F4:D2:FF:9A:84:88:3B:C6:70:69:89:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/581F7F0DADFA0E16F4D2FF9A84883BC6706989C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrVC3dfLaNFSMUG4YudSJ7wcaS1F8DFq2SZYJpGwnE3/0/323830343a393038383a3a2f33322d313238203d3e20323733353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9088::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:38:e6:c8:69:bf:50:88:28:91:e7:ef:2a:5c:63:1a:17:69:
         2a:c8:ab:53:0b:73:cc:49:4d:85:fb:c5:b3:eb:e0:25:4c:b7:
         77:cf:cf:76:d6:bb:8f:84:af:5e:c6:ec:72:fe:c2:c7:b5:6f:
         f6:05:cd:88:06:f2:93:3d:0e:dc:ed:03:4c:56:62:05:09:30:
         7b:fa:5d:9d:27:9b:ca:06:88:61:f9:04:c5:0b:3f:77:1d:de:
         1d:fd:db:a4:b7:d0:34:18:ca:23:12:7a:1d:3b:23:84:5e:22:
         ec:91:be:c4:bb:30:0c:00:75:e5:90:c7:81:43:cd:2f:7b:d3:
         95:de:fc:fa:90:c1:eb:38:31:05:81:ac:a3:02:43:7d:35:f4:
         bb:61:7b:40:ac:d8:1a:81:f8:08:64:58:73:93:ae:7e:f6:51:
         59:26:ea:d9:0c:4e:b7:67:11:bd:ec:16:f5:22:b8:85:94:83:
         1e:fc:70:57:76:82:b3:46:dd:3b:28:1a:aa:96:00:77:c8:69:
         ee:a6:c2:90:84:39:1f:1d:52:4c:b5:cb:e4:c7:31:6d:af:ac:
         23:be:70:15:9c:3a:eb:3a:0d:40:65:e5:ad:c4:22:26:19:69:
         1f:c8:97:c0:74:7a:de:5e:71:26:67:55:d3:4d:b0:f4:ae:b3:
         25:c5:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:20:05 2025 by rpki-client