Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa
File:                     323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier:          tW66RttNQQDZ0lTOuByjPWgYDa3rUCRkaSqPBwrFgxU=
Subject key identifier:   83:2E:48:57:0A:97:18:00:E7:7C:BF:F4:77:6F:15:CF:41:3B:10:59
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       2389811723D8D4A13F2E270F2B3C90C086FCCFAA
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa
Signing time:             Fri 07 Feb 2025 19:21:42 +0000
ROA not before:           Fri 07 Feb 2025 19:16:42 +0000
ROA not after:            Fri 06 Feb 2026 19:21:42 +0000
asID:                     271519
IP address blocks:        2804:7ccc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:89:81:17:23:d8:d4:a1:3f:2e:27:0f:2b:3c:90:c0:86:fc:cf:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Feb  7 19:16:42 2025 GMT
            Not After : Feb  6 19:21:42 2026 GMT
        Subject: CN=832E48570A971800E77CBFF4776F15CF413B1059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:1a:47:74:dc:a9:32:d2:5d:e9:b6:49:e9:
                    2d:4d:ed:3b:f5:ac:08:d3:2e:b4:53:ed:86:82:aa:
                    82:88:67:68:99:f9:9e:49:c9:8d:33:a4:e0:60:be:
                    8d:73:17:63:f8:b2:f8:87:70:4c:96:7b:1f:bb:c2:
                    0b:9d:c2:78:f0:0f:1c:9e:34:b4:0a:a2:82:d4:5b:
                    b3:13:da:ac:ad:8e:ab:ea:c5:0d:7b:f1:cd:39:a8:
                    ce:eb:63:a9:19:83:c3:f7:15:16:8b:f5:0d:25:96:
                    0a:c5:bf:06:f7:c4:c3:f3:98:85:9b:ae:5e:8a:96:
                    30:2f:87:a0:e0:ac:74:ba:80:0a:50:1c:a7:3a:a5:
                    51:e9:31:a0:f9:42:19:8a:54:41:5b:4d:a3:e4:63:
                    87:7e:3b:b6:37:67:c0:90:ac:9e:c6:12:5b:75:d2:
                    85:c8:bd:3b:a8:a6:5d:f2:76:1b:76:96:f8:a6:c4:
                    e6:d1:8b:ff:04:cc:ad:64:8a:38:e3:84:be:24:4a:
                    b3:63:ce:ce:3f:80:c6:5e:38:a6:cf:69:6c:b8:4a:
                    18:3e:b5:ce:2d:e0:a7:0f:a1:99:a7:e4:df:71:db:
                    c7:20:10:5f:e0:94:37:e3:ce:61:b0:a5:08:70:d5:
                    79:f2:44:bd:f6:49:7e:88:98:d4:b3:a9:a8:98:30:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:48:57:0A:97:18:00:E7:7C:BF:F4:77:6F:15:CF:41:3B:10:59
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ccc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:9b:2f:6a:e6:4f:6f:88:f8:ae:ad:74:7b:91:c9:3b:5b:
         48:6f:46:b1:c0:e8:20:2b:cb:55:75:b3:a4:55:a9:52:5f:9a:
         18:db:66:0c:3a:8a:cc:cb:8f:69:11:d1:89:65:ce:27:6c:92:
         a5:d4:89:13:64:75:4e:3e:ae:39:16:7f:51:29:94:d3:b4:8e:
         ed:45:3c:c2:1d:01:39:cc:98:35:1a:32:d6:b6:1d:65:93:9c:
         17:4d:a2:0e:a3:e2:f5:d5:23:86:e2:41:1e:fa:78:eb:d4:7b:
         fe:10:8c:44:14:b5:8d:3a:3d:ff:ee:c7:f1:26:a3:9b:0d:6b:
         43:b4:35:ab:50:2d:b9:c1:55:22:17:95:e2:02:7d:48:5a:ff:
         ee:35:be:5d:00:18:bf:63:da:e1:64:84:a3:00:81:e7:f5:73:
         d7:fc:4f:a9:09:f9:97:4f:6a:58:04:4b:3b:91:7c:9d:f8:14:
         ef:a1:8f:aa:6b:06:4d:92:60:90:d8:87:6d:a7:81:cb:57:57:
         56:5e:2e:0a:fa:9f:b9:a1:c1:1c:66:69:56:9d:29:03:15:97:
         18:cb:57:8b:b1:ca:01:11:d9:60:3d:89:81:e0:23:49:21:35:
         15:ed:64:7a:02:33:0c:81:0b:b2:a1:3f:c2:9e:f6:d0:a1:3c:
         39:f1:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:57:03 2025 by rpki-client