Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa
File:                     323830343a373839383a3a2f33322d3438203d3e20323731323533.roa (raw, json)
Hash identifier:          C01SI5hnEx4TIubKHW9ni+cJmSHtDNKFCFRkRxAg8Kg=
Subject key identifier:   E4:B7:86:C8:EC:AC:CE:2C:4C:50:AF:A7:C5:41:E1:F5:DE:B5:E1:1E
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       412D538DC14455D910350200B6F2B67F3C102320
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa
Signing time:             Thu 08 May 2025 13:17:31 +0000
ROA not before:           Thu 08 May 2025 13:12:31 +0000
ROA not after:            Thu 07 May 2026 13:17:31 +0000
asID:                     271253
IP address blocks:        2804:7898::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2d:53:8d:c1:44:55:d9:10:35:02:00:b6:f2:b6:7f:3c:10:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: May  8 13:12:31 2025 GMT
            Not After : May  7 13:17:31 2026 GMT
        Subject: CN=E4B786C8ECACCE2C4C50AFA7C541E1F5DEB5E11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:ae:93:80:c4:e7:a7:06:42:5c:b1:1f:13:
                    47:a2:f9:8c:ee:ea:74:99:db:a6:38:00:8c:da:9f:
                    de:6f:33:25:84:8d:62:e7:49:50:02:a4:56:2b:85:
                    3e:28:ef:59:a5:f9:f4:1c:a6:97:06:4b:d7:06:02:
                    6c:18:38:b7:80:0e:d2:9f:d5:49:a7:23:a3:3b:39:
                    e4:dd:d5:c4:81:6b:e2:dc:ad:08:15:ae:be:43:b7:
                    53:e8:51:49:78:f8:09:39:b1:57:f7:64:54:3c:6b:
                    37:05:2c:24:dd:de:5f:59:45:91:73:53:b7:74:63:
                    28:71:4c:44:87:43:aa:e6:6c:29:1e:55:6a:24:5f:
                    0f:68:f6:e5:48:b8:8f:7f:c5:20:e4:90:ca:f7:b7:
                    65:d5:94:f1:1a:37:a1:20:b9:14:1b:89:b7:34:51:
                    56:e2:04:63:49:02:e0:88:36:a6:cb:b7:c0:e2:98:
                    3c:4d:f4:72:fb:19:02:cc:5e:9b:01:5c:2d:bb:eb:
                    b6:10:e0:18:69:93:63:4f:cb:30:f8:57:0c:28:df:
                    0a:18:52:64:78:33:f4:69:7b:d4:a6:71:8e:a7:7e:
                    3c:fb:a4:6c:12:9d:d2:c6:0d:4a:b8:19:20:ed:1f:
                    96:14:96:16:e0:90:5b:68:f4:9f:e7:cf:36:18:04:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:86:C8:EC:AC:CE:2C:4C:50:AF:A7:C5:41:E1:F5:DE:B5:E1:1E
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/323830343a373839383a3a2f33322d3438203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7898::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:31:57:29:60:20:6e:91:f5:79:62:f1:51:0c:68:4f:c0:f7:
         0c:f7:80:96:1f:c6:bd:55:03:31:03:4c:ef:aa:09:b7:82:84:
         2f:8f:0b:ae:19:f1:94:08:f5:16:b2:5d:22:76:b8:e3:d1:39:
         bf:06:74:0c:28:86:12:f8:aa:9b:f1:8e:8d:1b:c8:5a:c4:89:
         f5:14:fb:64:28:6c:c0:2f:f9:54:df:27:5b:87:10:91:0a:2b:
         7f:4a:a2:0e:14:78:3a:87:ef:00:9a:38:df:20:79:e1:f6:87:
         52:4f:7c:bb:fa:6c:1a:ba:ac:92:99:c7:65:b9:fa:b1:5f:df:
         8a:bf:17:32:34:31:ee:f3:74:b9:6c:7e:5f:d9:da:b0:98:b8:
         12:ba:e8:a2:d1:b4:61:a3:62:24:28:22:da:9f:60:8d:39:fd:
         4d:c8:0d:01:2a:91:25:c3:6f:c3:e3:4d:80:b6:8a:14:3e:32:
         a2:b2:08:f1:55:d9:c2:0e:97:a6:e1:12:75:0e:4c:64:68:3c:
         f8:f7:7c:8a:ec:63:f0:85:5c:35:7c:84:37:52:58:d4:2f:59:
         39:e1:f6:01:0a:89:38:36:f3:da:ae:fe:fa:55:93:95:e3:87:
         21:1e:ef:8f:95:a0:93:26:0e:98:6a:98:90:bf:b4:c2:27:c8:
         54:1f:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:19:56 2025 by rpki-client