Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/323830343a346434383a3a2f33322d313238203d3e203533313135.roa
File:                     323830343a346434383a3a2f33322d313238203d3e203533313135.roa (raw, json)
Hash identifier:          NsqfA1cm2Mr4ExKmzOQ0rIy+kX/qCmm9bdGogjKFsHA=
Subject key identifier:   D1:5F:C0:44:B9:5B:82:C1:F5:13:79:2A:43:F2:40:7F:04:62:27:B1
Certificate issuer:       /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
Certificate serial:       0B4DF5BFB06CCD83B4E7D1B5C504509226F038FA
Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/323830343a346434383a3a2f33322d313238203d3e203533313135.roa
Signing time:             Thu 24 Apr 2025 22:27:56 +0000
ROA not before:           Thu 24 Apr 2025 22:22:56 +0000
ROA not after:            Thu 23 Apr 2026 22:27:56 +0000
asID:                     53115
IP address blocks:        2804:4d48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl
                          rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:f5:bf:b0:6c:cd:83:b4:e7:d1:b5:c5:04:50:92:26:f0:38:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2
        Validity
            Not Before: Apr 24 22:22:56 2025 GMT
            Not After : Apr 23 22:27:56 2026 GMT
        Subject: CN=D15FC044B95B82C1F513792A43F2407F046227B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:13:58:66:2b:23:e8:3d:9a:25:43:c4:54:
                    2d:e8:91:e1:64:01:63:f3:4a:e4:70:62:b6:d8:dd:
                    e5:8a:f8:5c:30:89:87:a1:93:aa:ee:07:61:8a:79:
                    73:b6:68:c7:0c:d8:ca:00:8f:8c:ab:f1:c0:f3:f1:
                    ea:b9:dc:16:63:15:ce:f4:ff:56:06:1f:63:30:ef:
                    21:d2:4e:0b:c6:e4:7a:1e:e6:e1:4b:84:4c:09:d4:
                    c4:d7:c8:1e:c3:08:e2:23:ae:e1:41:d9:05:2a:ae:
                    d8:75:98:68:1f:86:44:cf:30:3f:23:de:02:f1:b8:
                    50:0a:e8:56:1e:02:1c:a2:5a:84:47:bc:54:e3:da:
                    36:cf:36:f5:9f:b3:a6:42:ec:4d:97:06:5e:40:50:
                    9d:76:92:ec:7c:9c:67:ca:7d:8d:48:24:12:e6:96:
                    89:6b:c0:6f:e8:df:b1:67:5a:a0:a6:de:b7:0e:ca:
                    23:c6:65:e2:4d:e0:aa:23:af:7c:41:9f:12:99:fe:
                    dc:72:db:b1:0a:24:93:50:01:1e:ab:38:1a:f5:f9:
                    58:cf:37:69:9e:f8:88:a2:59:0f:8c:ed:b4:28:f9:
                    2c:ee:3f:ea:f9:72:e7:a5:12:a0:d9:8c:b6:58:59:
                    06:71:e1:90:99:7c:60:2f:42:11:c2:98:85:b6:62:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:C0:44:B9:5B:82:C1:F5:13:79:2A:43:F2:40:7F:04:62:27:B1
            X509v3 Authority Key Identifier:
                keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/323830343a346434383a3a2f33322d313238203d3e203533313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d48::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:31:fa:d2:0f:65:2c:1a:8c:34:b2:b3:c8:66:c5:f8:64:
         9e:31:3e:a7:66:d8:df:96:93:0c:f4:f5:b7:40:ce:55:37:b4:
         9e:ba:62:31:2c:c5:b4:d0:57:52:bd:ac:56:36:f5:6f:99:4c:
         70:3f:5a:fb:5b:33:3f:9a:7c:a4:dc:0e:78:02:88:97:fe:b2:
         b7:c8:5e:3e:2c:77:a0:3f:e6:b4:63:3e:26:5a:fa:63:c5:d2:
         a5:74:39:72:ef:76:db:f5:fd:78:3e:98:ea:38:df:d2:52:ce:
         3e:54:30:83:e7:5d:03:04:83:3c:93:61:fb:6a:ed:81:47:0f:
         26:95:32:3d:25:1c:51:3b:0b:79:f2:99:bb:16:72:ef:d3:fb:
         e2:73:1b:5d:a9:80:f3:1c:0a:e3:5c:94:b7:9f:94:50:d7:15:
         8e:4b:c7:bd:7e:3e:88:c9:21:7c:04:f2:f6:b8:df:72:57:18:
         ea:4f:ef:8c:27:31:88:8a:93:7b:aa:3f:52:7c:db:75:b3:e0:
         6d:e7:96:25:c1:74:64:b9:47:cc:77:97:01:6d:a9:26:9b:93:
         04:52:2b:46:e0:97:90:fd:1e:b9:3c:77:9b:e4:a2:9b:e6:d6:
         9d:d3:42:d8:87:bc:f2:62:86:3f:c0:39:04:58:07:27:6d:f8:
         0e:7d:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:27:00 2025 by rpki-client