Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa
File:                     323830343a376139633a3a2f33322d3438203d3e203533313431.roa (raw, json)
Hash identifier:          540VLEQHiVe+P+QsWOwpriRZ9luJVIv9XQErtCpUZz4=
Subject key identifier:   57:5B:8E:3F:99:69:F1:79:33:6E:D8:E1:F6:9E:9F:47:B6:25:33:7E
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       53B99F07962DA8D106E4790913DCF0ABAD97A24B
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa
Signing time:             Fri 18 Apr 2025 14:30:51 +0000
ROA not before:           Fri 18 Apr 2025 14:25:51 +0000
ROA not after:            Fri 17 Apr 2026 14:30:51 +0000
asID:                     53141
IP address blocks:        2804:7a9c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 19:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b9:9f:07:96:2d:a8:d1:06:e4:79:09:13:dc:f0:ab:ad:97:a2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Apr 18 14:25:51 2025 GMT
            Not After : Apr 17 14:30:51 2026 GMT
        Subject: CN=575B8E3F9969F179336ED8E1F69E9F47B625337E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a9:de:8d:c9:20:16:3e:c9:71:15:15:7c:50:
                    83:ab:7c:46:57:62:92:72:85:33:f4:e1:c3:f6:76:
                    34:a1:06:2e:fc:5d:df:ea:e1:2d:71:94:18:2c:53:
                    4a:12:eb:d2:d5:f1:97:57:a5:fc:12:e9:3a:6e:3e:
                    a1:e2:77:5a:a4:65:6f:ec:b6:6c:5c:95:5f:f5:29:
                    1b:9d:00:9c:7a:91:18:b1:dc:72:e7:da:0c:05:56:
                    38:35:4e:fe:44:c2:3d:e1:31:6c:ed:75:87:e8:f5:
                    9c:bd:1e:f0:69:af:bd:97:96:f5:6e:58:c2:24:d2:
                    fe:e5:33:af:14:1b:51:89:61:aa:28:e2:1a:56:55:
                    89:b2:fd:5b:48:2f:00:ff:73:2c:14:6a:a3:38:a9:
                    e5:d1:34:19:0b:7a:be:65:c2:99:f9:58:89:33:25:
                    40:34:3a:3b:5d:9d:2a:03:db:86:59:f8:0e:b9:4d:
                    f1:7f:0d:83:82:da:e6:63:8d:09:34:5a:51:cc:8f:
                    e6:2e:ef:ae:4c:5c:4e:2b:b4:fd:4b:43:27:72:a4:
                    52:e3:a7:39:f9:d6:ef:07:3a:19:f9:72:56:82:50:
                    22:d7:00:9f:e6:66:77:dd:31:d6:7b:3a:52:51:52:
                    bb:28:74:89:1e:a8:18:28:3f:ec:e5:42:eb:d0:f4:
                    89:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:8E:3F:99:69:F1:79:33:6E:D8:E1:F6:9E:9F:47:B6:25:33:7E
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a376139633a3a2f33322d3438203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:09:1a:63:b8:ab:7f:e3:f0:9c:23:57:5f:4b:f5:3a:24:75:
         c9:90:51:bb:7c:8c:19:cb:1a:98:20:84:17:31:a3:8f:e2:87:
         04:58:97:46:3c:48:19:09:ab:d7:5e:36:7d:92:99:f0:12:40:
         07:65:38:55:c4:23:09:31:93:1b:7e:95:08:e8:62:06:d7:0c:
         58:4d:bf:d5:28:55:2c:39:05:e1:f5:3b:fd:4c:24:00:1b:b7:
         1d:3b:d6:cc:bc:4e:dd:ea:e9:29:03:9d:b6:93:ff:c6:3c:89:
         cd:00:e9:64:a5:a0:d2:3e:66:35:56:bf:e5:7a:c3:c7:6c:21:
         ea:72:3c:25:67:1b:4d:c4:c2:2e:42:a3:13:f1:39:a9:79:53:
         df:96:05:80:a4:cf:3e:b1:12:a5:77:dc:68:2c:93:48:bd:32:
         bc:9b:c2:d0:66:06:0c:cf:4f:7b:87:76:dc:0b:41:8f:14:21:
         79:e7:a2:f2:b5:18:be:4b:01:40:b5:08:9a:6e:fe:28:21:21:
         61:15:5a:54:d9:9f:6b:38:7c:24:ab:fa:b5:eb:d0:c6:bd:3b:
         23:20:3d:44:cf:1f:b8:c6:07:f1:ed:25:b1:e2:f4:e2:dc:1e:
         a5:33:9f:8e:b6:64:a8:4e:3e:0d:97:a5:ef:d1:54:9c:06:3c:
         8f:ce:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:34 2025 by rpki-client