Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/323830343a373531383a3a2f33322d3438203d3e20323731303233.roa
File:                     323830343a373531383a3a2f33322d3438203d3e20323731303233.roa (raw, json)
Hash identifier:          cac8910A5zDsqFM0NmzRWfl6RkpnMhE+FqToDgb7rTs=
Subject key identifier:   B1:80:5C:1B:E2:AD:51:8C:BD:44:29:40:59:73:89:6B:6D:AC:7A:28
Certificate issuer:       /CN=83D0155F5069287D4AA91D06FC515095D8B510B8
Certificate serial:       75D2D31E82299BE5FB8A374CE9E1B53819DC73BB
Authority key identifier: 83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/323830343a373531383a3a2f33322d3438203d3e20323731303233.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     271023
IP address blocks:        2804:7518::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl
                          rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:d3:1e:82:29:9b:e5:fb:8a:37:4c:e9:e1:b5:38:19:dc:73:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D0155F5069287D4AA91D06FC515095D8B510B8
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=B1805C1BE2AD518CBD4429405973896B6DAC7A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:46:36:45:fc:ab:e2:2b:04:d3:62:d3:bd:
                    8b:b9:42:ab:42:3c:2e:4c:59:95:71:02:77:b3:83:
                    a3:7f:63:46:46:52:ca:67:78:25:1c:6e:e8:96:fb:
                    64:e2:27:bf:2b:e0:f1:49:da:03:b4:8b:8a:99:1c:
                    e0:fb:e7:82:72:f8:9b:2e:18:85:4b:02:23:51:52:
                    53:98:7b:f5:c6:a9:3e:73:40:3a:ec:6b:09:cf:9f:
                    ea:3f:4a:1b:f4:46:27:7e:2c:6b:fe:86:72:6b:08:
                    f9:32:35:4c:f2:7a:dc:c5:7a:36:e4:bf:7a:65:c6:
                    3f:d2:76:6e:df:4f:a6:dc:50:72:5a:0c:0e:7b:ea:
                    42:68:69:76:ef:75:04:d8:3c:e3:49:50:8e:af:7f:
                    3e:ec:e4:9f:f1:cb:6b:8b:0c:86:0c:68:07:98:6a:
                    3f:aa:b3:1a:00:42:d5:1b:83:6d:90:cb:83:c6:cc:
                    97:69:80:83:ec:fb:e8:9b:0b:e0:65:4f:af:7e:31:
                    63:78:f0:47:b0:34:df:19:18:d3:0d:11:31:a2:dd:
                    f1:f9:26:5b:dc:f9:39:75:64:c4:eb:21:5e:0e:08:
                    94:20:d4:a4:7b:07:55:af:5f:7a:cb:cf:b9:00:79:
                    fe:47:e3:b1:81:bc:ff:cf:eb:89:4a:5c:c5:56:d3:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:80:5C:1B:E2:AD:51:8C:BD:44:29:40:59:73:89:6B:6D:AC:7A:28
            X509v3 Authority Key Identifier:
                keyid:83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/323830343a373531383a3a2f33322d3438203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7518::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:75:10:f7:6a:9a:3d:a7:3b:16:18:09:2c:28:7d:7f:bf:
         51:42:54:d8:15:75:24:24:8a:2f:9c:b8:3b:86:24:f0:e5:d9:
         08:b4:6a:85:6c:c0:23:e9:ba:40:42:bd:69:35:53:b0:86:d8:
         aa:d1:eb:e6:7e:75:fd:a6:91:e1:88:37:4d:eb:e8:4d:ce:e2:
         4a:14:09:f6:9f:19:49:3c:ec:c5:d3:e5:5c:fb:7d:1a:78:a0:
         46:75:c5:33:56:7f:c4:62:f7:0b:9e:d5:8a:52:5a:c5:56:5d:
         59:24:4a:81:47:a1:9c:15:37:1e:76:c3:fb:d8:57:1b:d0:fa:
         7f:75:7b:62:ad:df:bf:61:0d:34:b7:50:e3:a6:c7:e0:39:60:
         7f:11:68:5d:15:73:d1:01:92:b9:44:6c:aa:34:f4:ca:47:cd:
         f5:e1:13:db:b5:de:ce:6b:62:d4:ee:aa:3e:91:13:6d:8c:d4:
         20:2b:90:1d:73:4c:d2:80:8b:45:03:05:27:52:d4:36:be:c3:
         50:d2:32:88:2d:21:38:bd:19:05:8f:71:25:65:ef:81:ba:f2:
         8d:ca:41:d5:8c:13:c0:db:3f:ac:ec:53:18:df:13:27:46:c3:
         f8:48:2e:e9:51:a3:95:e0:cf:aa:9b:ef:1a:87:13:ca:52:3c:
         ba:9f:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:23:44 2025 by rpki-client