Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa
File:                     323830343a383437383a3a2f33322d3332203d3e20323732323632.roa (raw, json)
Hash identifier:          tf6u9gBcfWA9Pxwvsyb3KtVWbYRqghe6D2nSndZ6Jio=
Subject key identifier:   18:D8:FD:6E:9F:CA:2F:8A:87:66:3E:34:DB:AD:65:98:10:93:29:23
Certificate issuer:       /CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1
Certificate serial:       160A36B82FD1607D1FE33E6A53003F4D1B1E1EA0
Authority key identifier: EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     272262
IP address blocks:        2804:8478::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.crl
                          rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:36:b8:2f:d1:60:7d:1f:e3:3e:6a:53:00:3f:4d:1b:1e:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:59:7b:65:ec:49:d7:b1:05:dd:03:98:6c:20:
                    17:8f:f5:70:9b:13:f3:b1:9c:96:43:5b:29:fa:7e:
                    f2:e5:98:8b:85:c9:de:1f:0b:a7:d0:41:99:2f:e3:
                    80:c8:14:e2:9f:22:96:77:48:54:ce:52:98:58:52:
                    db:2c:f5:2e:18:33:5a:ea:a2:c8:01:91:1a:05:fc:
                    ec:5f:77:de:16:fd:bd:97:d2:13:f5:5f:f1:99:08:
                    1e:8e:f5:98:a8:45:8b:93:03:a7:8a:17:7f:4b:11:
                    60:13:26:21:85:e6:42:f1:bc:2d:0a:18:08:aa:dd:
                    a8:19:98:ae:b1:99:9a:b3:b5:17:fc:e6:54:61:eb:
                    63:71:50:ea:39:e4:07:8d:04:41:11:38:11:e0:a0:
                    ab:00:ba:0e:4f:08:7f:2a:93:d0:8d:a2:99:6d:8f:
                    33:98:05:4d:72:c5:c5:c6:5f:2f:99:bd:90:14:31:
                    ec:2f:9f:ba:48:91:e4:d7:6c:f6:40:2f:8b:73:d9:
                    f7:6f:a4:2a:7d:55:26:42:94:de:e4:c0:a0:a9:93:
                    08:db:e6:b5:27:30:88:30:e9:04:c6:38:2e:17:a7:
                    fb:3e:52:08:ef:36:4b:54:c9:08:1c:d2:48:11:cb:
                    8d:e2:cb:fa:80:20:20:ab:e8:0a:6e:94:ff:dc:79:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D8:FD:6E:9F:CA:2F:8A:87:66:3E:34:DB:AD:65:98:10:93:29:23
            X509v3 Authority Key Identifier:
                keyid:EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/323830343a383437383a3a2f33322d3332203d3e20323732323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8478::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:53:e0:d2:ff:80:30:6b:61:31:20:7c:ae:03:7b:fd:41:
         f8:00:ab:0a:6b:76:e4:df:bf:cc:b1:79:88:ae:aa:a1:a8:ee:
         09:53:dd:4c:1b:2d:7e:c4:ea:18:2a:0d:e6:7e:16:45:b2:c4:
         4a:07:37:89:04:af:5b:6d:da:c4:34:04:44:66:f2:da:8b:33:
         20:b4:b7:e6:63:5f:34:d5:fe:0a:8b:8c:aa:f6:85:17:c1:6e:
         65:2c:3f:e1:3e:00:dc:41:ed:49:b8:6c:82:0f:05:9b:0e:a3:
         e4:64:bb:86:cb:fb:fb:07:f1:06:8d:2e:04:e9:1f:c1:98:ce:
         96:1a:01:3c:af:9b:56:3d:44:24:35:c9:78:3f:e2:49:db:f3:
         88:70:e6:91:45:a6:e5:fa:ff:6a:6c:db:a0:a7:5f:78:a4:6d:
         87:76:ba:2b:5e:d0:ed:19:fd:67:0c:0f:57:6c:0b:ac:95:20:
         63:08:87:3b:b3:19:25:e2:48:75:e2:5c:ff:b8:bd:6d:10:d7:
         d3:53:08:10:66:88:05:69:cc:d4:e9:87:23:ba:5f:a3:a3:22:
         20:dc:83:36:f8:63:78:54:f9:ce:32:fd:7b:ae:7a:c3:e2:31:
         44:17:03:6d:6e:15:66:4e:38:da:a4:ce:52:30:05:4a:49:db:
         34:03:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:01:50 2025 by rpki-client