Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          LZ3tc0N74k4IrXCU5YAoVQ06VINehoT73ZTkc22fOg8=
Subject key identifier:   3A:81:50:A9:98:AC:AF:BD:85:19:E4:48:DD:60:1A:03:79:A4:AF:9C
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       7DC0DA0EA1304BD6C431C34230674956336DA975
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Thu 06 Mar 2025 14:33:20 +0000
ROA not before:           Thu 06 Mar 2025 14:28:20 +0000
ROA not after:            Thu 05 Mar 2026 14:33:20 +0000
asID:                     53018
IP address blocks:        2804:354c:8600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 23:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c0:da:0e:a1:30:4b:d6:c4:31:c3:42:30:67:49:56:33:6d:a9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Mar  6 14:28:20 2025 GMT
            Not After : Mar  5 14:33:20 2026 GMT
        Subject: CN=3A8150A998ACAFBD8519E448DD601A0379A4AF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:9b:6c:cc:6e:6e:17:d1:09:ed:36:5f:18:
                    ae:23:9a:23:c1:86:60:2d:b5:ec:e9:5c:5e:6d:7e:
                    36:f3:95:01:f9:ff:ae:c5:a1:87:cf:ab:91:71:db:
                    07:0d:e5:8d:2f:7d:07:d9:52:f8:c7:5d:34:c1:4f:
                    6f:a1:ec:05:42:e1:33:af:b7:be:92:e1:54:61:2d:
                    44:d6:e5:76:59:8e:32:ab:ae:f9:ab:36:d9:98:35:
                    ed:19:e7:a0:09:22:0e:d1:d4:d3:f4:dc:0c:bb:48:
                    a5:36:42:75:36:59:36:39:47:47:d9:f8:49:09:eb:
                    31:dc:a3:62:9c:0c:53:8b:6e:ff:b2:9a:00:89:5f:
                    9f:08:7f:ec:8a:0d:3a:f1:5d:3b:51:fd:ae:8b:bd:
                    3f:58:f5:33:9a:6a:5a:49:d9:36:72:7b:81:cb:e9:
                    56:f9:d3:ee:de:d3:43:1f:55:dd:c3:f0:4d:db:b1:
                    d9:36:01:0e:83:a7:e5:60:d6:be:7d:d3:f0:0b:9b:
                    fb:5c:d2:21:47:22:68:b3:83:af:ba:b8:ca:65:72:
                    6c:58:be:83:2d:23:70:71:ba:97:55:44:0c:a0:3f:
                    33:07:b0:98:0e:e0:c6:20:a1:e6:07:d7:9a:be:4f:
                    66:5a:de:03:db:fd:87:30:c6:1c:7f:84:ae:7e:68:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:81:50:A9:98:AC:AF:BD:85:19:E4:48:DD:60:1A:03:79:A4:AF:9C
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:fa:a7:eb:57:97:44:29:91:c0:1c:87:87:49:52:7f:3f:
         20:cd:32:43:f7:d6:89:11:89:18:ca:c0:40:ab:df:33:a9:6b:
         28:eb:5a:5e:6c:16:74:cb:1e:9b:9e:a8:ca:bc:91:1f:7f:53:
         f8:b6:4b:94:a2:5d:cb:64:a1:2d:79:6f:f4:97:6a:a4:89:d0:
         6f:c7:dc:66:49:c1:59:a2:dc:30:9d:d7:e1:f6:55:da:c7:ae:
         5e:cb:0d:ba:0b:31:a6:dc:a2:05:ad:84:5f:88:15:6d:fc:35:
         b0:cd:b5:6d:db:f1:96:2b:d5:44:6c:d0:a7:28:df:aa:97:08:
         c0:94:4b:64:a0:2d:0a:db:87:4e:69:98:55:60:39:d7:1e:99:
         87:f7:16:f1:0f:c8:2e:08:16:82:28:df:8e:13:d5:50:29:f7:
         eb:ec:3e:e8:88:a8:93:43:04:d5:e0:25:14:7a:4a:f0:b3:34:
         73:38:77:2b:f2:c0:59:79:e0:48:15:99:fa:4c:a4:cf:55:18:
         84:93:c5:ce:44:6a:0d:37:3c:b5:48:1e:77:ad:1a:13:78:0b:
         1e:cc:84:9c:36:d1:5e:9d:c8:68:c2:2a:1e:04:c9:6f:dc:29:
         cd:1e:cc:29:c7:d9:52:5d:94:c1:c6:43:77:bf:5d:63:0f:d3:
         c9:e9:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:25 2025 by rpki-client