Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa
File:                     323830343a373736343a3a2f33322d3332203d3e20323731313735.roa (raw, json)
Hash identifier:          RAWpZvChAy0tbJhIk+XjKYxahZ+wXtcgwmfWe67xQBg=
Subject key identifier:   17:EF:61:71:4B:88:22:F1:B9:69:F6:4C:52:06:C2:59:B9:44:80:7E
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       0519FB1FDB387E94107B1762E5A46308D7F7DC96
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa
Signing time:             Fri 25 Apr 2025 11:13:59 +0000
ROA not before:           Fri 25 Apr 2025 11:08:59 +0000
ROA not after:            Fri 24 Apr 2026 11:13:59 +0000
asID:                     271175
IP address blocks:        2804:7764::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 17:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:19:fb:1f:db:38:7e:94:10:7b:17:62:e5:a4:63:08:d7:f7:dc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Apr 25 11:08:59 2025 GMT
            Not After : Apr 24 11:13:59 2026 GMT
        Subject: CN=17EF61714B8822F1B969F64C5206C259B944807E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:9e:87:9e:c3:cf:a4:32:c6:16:b4:5b:c2:
                    19:26:b8:76:79:9f:68:e0:81:a2:67:86:6f:18:71:
                    3b:78:3a:b6:eb:e9:f6:a0:22:5e:ce:1c:ba:9b:9c:
                    7d:ac:ef:4b:16:b6:d5:02:f9:3f:f1:be:86:c6:1a:
                    8a:ad:aa:a9:08:6a:6f:d6:43:f5:4e:f9:3c:86:15:
                    b0:6b:a7:d8:34:48:e0:ab:8f:d2:ac:f0:d4:03:28:
                    f6:5a:41:91:c1:1f:29:1d:f8:02:1b:af:6f:31:76:
                    0a:fd:5f:ea:a0:5d:ba:5d:cb:b5:03:c5:e8:a5:cc:
                    06:dc:64:49:13:85:3f:12:fe:ad:27:2c:ce:7e:8b:
                    e4:7c:1e:e9:05:48:6b:84:3f:3c:3d:ab:75:3f:1f:
                    e7:e0:12:0b:33:47:ba:b2:c1:a0:76:b9:28:06:73:
                    42:ec:8a:f8:42:61:97:19:42:9c:92:9f:ea:c6:8d:
                    b7:40:25:bf:fe:89:12:b6:1f:82:24:7f:d9:6d:5f:
                    99:82:8f:21:2b:37:09:44:d6:4b:eb:ff:83:34:ba:
                    f7:b1:1a:6d:a4:35:cc:33:4a:16:a3:6c:09:e3:80:
                    ab:bd:4d:52:b1:0f:49:e0:4b:aa:a2:a0:07:b8:03:
                    27:2f:8a:96:8e:41:55:de:b9:4b:0c:3b:ff:3a:af:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EF:61:71:4B:88:22:F1:B9:69:F6:4C:52:06:C2:59:B9:44:80:7E
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33322d3332203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:2a:f5:1c:21:35:e2:d2:c5:c6:1a:01:2c:0e:d4:ae:de:
         41:1c:c9:49:55:94:5d:64:cd:ca:fd:8b:10:48:93:c0:96:97:
         03:41:be:1e:a8:e9:a4:c9:1a:7b:36:f4:bc:c6:44:08:e6:ee:
         90:8d:fb:35:96:1e:c6:d2:5b:c9:98:88:6c:5c:72:c6:a2:7a:
         e1:92:4a:e3:9c:40:12:a2:a9:a9:bb:85:50:ea:b9:43:31:25:
         ee:39:4a:02:b2:5c:8c:72:e6:aa:51:3c:d9:ec:67:e4:00:da:
         fa:d7:fe:af:a7:df:b8:61:cc:47:f2:d3:aa:a2:c2:4d:84:01:
         03:ca:17:e7:4b:64:2d:18:5f:3c:d4:d1:47:48:03:fb:e7:f8:
         8c:f9:7a:1f:b5:01:1e:35:d5:50:26:f3:08:a4:a7:dd:21:08:
         09:c6:a6:e4:05:07:1e:d8:d8:a3:4c:23:bc:e4:4d:58:2e:26:
         fa:44:e5:f6:97:f3:91:96:5d:66:5f:1a:ef:00:cf:fd:d0:e0:
         ba:07:2f:9d:da:dd:d7:75:69:83:af:52:21:bc:a5:48:45:73:
         7a:0a:13:6c:d0:be:9a:5f:ba:ce:48:4e:bc:31:2b:8d:fc:f6:
         2e:75:73:cb:9b:90:f7:10:f6:1e:75:c8:f4:9f:f2:fe:47:6d:
         3a:2c:54:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:33:22 2025 by rpki-client