Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
File:                     323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (raw, json)
Hash identifier:          O7OKqbtQ0TyZq5COvHRvntx3Ce6+68TCpDpbUQYWbLY=
Subject key identifier:   65:F5:FE:8E:10:14:75:E4:D0:6F:CA:E7:CC:DB:72:2B:1D:23:F0:64
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       0BE827A78A6139C3E8BA268A211B5846AD588D39
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271330
IP address blocks:        2804:79d4::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e8:27:a7:8a:61:39:c3:e8:ba:26:8a:21:1b:58:46:ad:58:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A02820101009B2D6EC2F9854296697D6780C651AE298699674C237083C01C4FA80B35FD2B1466CB63F237C8D59F0049ACA6344C640506B7F6467D9AA030C50BBA512C49D254FD5D0A1A409820D9C9ABCADEE340B6302D0C839527461F941A226A856EEEE4D607156AF21A6A5B488A2226646FE0E31D5387AE164F5514B28EED51B03F0FFC562C2CCE35A9CECD224CF152FF0BAE934F1104B84C3E7EDC220185BB2C78FA7D96D14A79B8DBF89F9E2B533E8A2B5468F4E0E0DE03135E36050EF45D084D3486670CE09CD8A16311AB33857637079BC8A4349EC1F9D706C0C799C39C37531E943DA11D94F89B097C6E24014A890658A8164B95B3AA4BBC15197676882A9939BF790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:6e:c2:f9:85:42:96:69:7d:67:80:c6:51:
                    ae:29:86:99:67:4c:23:70:83:c0:1c:4f:a8:0b:35:
                    fd:2b:14:66:cb:63:f2:37:c8:d5:9f:00:49:ac:a6:
                    34:4c:64:05:06:b7:f6:46:7d:9a:a0:30:c5:0b:ba:
                    51:2c:49:d2:54:fd:5d:0a:1a:40:98:20:d9:c9:ab:
                    ca:de:e3:40:b6:30:2d:0c:83:95:27:46:1f:94:1a:
                    22:6a:85:6e:ee:e4:d6:07:15:6a:f2:1a:6a:5b:48:
                    8a:22:26:64:6f:e0:e3:1d:53:87:ae:16:4f:55:14:
                    b2:8e:ed:51:b0:3f:0f:fc:56:2c:2c:ce:35:a9:ce:
                    cd:22:4c:f1:52:ff:0b:ae:93:4f:11:04:b8:4c:3e:
                    7e:dc:22:01:85:bb:2c:78:fa:7d:96:d1:4a:79:b8:
                    db:f8:9f:9e:2b:53:3e:8a:2b:54:68:f4:e0:e0:de:
                    03:13:5e:36:05:0e:f4:5d:08:4d:34:86:67:0c:e0:
                    9c:d8:a1:63:11:ab:33:85:76:37:07:9b:c8:a4:34:
                    9e:c1:f9:d7:06:c0:c7:99:c3:9c:37:53:1e:94:3d:
                    a1:1d:94:f8:9b:09:7c:6e:24:01:4a:89:06:58:a8:
                    16:4b:95:b3:aa:4b:bc:15:19:76:76:88:2a:99:39:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:FE:8E:10:14:75:E4:D0:6F:CA:E7:CC:DB:72:2B:1D:23:F0:64
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/323830343a373964343a3a2f33322d3336203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:74:ac:6b:9d:99:34:ae:28:41:ff:71:ba:c6:0d:3d:d4:2d:
         90:aa:04:7b:64:ee:80:46:63:10:35:4e:8a:6f:34:f8:f0:d8:
         a0:8e:ee:d9:76:07:76:94:70:94:e7:ca:0f:51:98:30:37:9e:
         36:1d:30:0f:ef:e6:09:dd:de:4f:d4:ba:bd:96:05:37:df:68:
         d3:42:b5:d3:46:15:e5:1f:4f:a0:85:1c:bf:7c:3d:18:0a:51:
         f0:ec:3c:ba:b6:79:1d:d1:73:a1:45:74:dc:24:7b:5a:ac:59:
         39:9f:e0:db:06:08:91:c4:37:8c:0e:81:ea:be:8a:39:dc:d1:
         1b:19:38:b3:ac:41:27:72:52:35:d4:38:b9:3a:95:20:7c:9e:
         43:31:dc:aa:3b:42:92:8f:6c:85:33:e0:33:7d:2c:e4:a1:ac:
         26:bb:52:22:90:df:68:b0:68:72:79:b0:a7:5a:64:ef:35:aa:
         98:24:d3:d5:08:69:0d:50:da:df:7b:7d:96:3f:01:90:d3:c2:
         51:fc:b4:b7:4a:f1:e7:7d:a6:1b:cd:b2:ae:67:06:c0:fd:e8:
         3c:b5:62:e6:51:f5:35:21:99:08:b8:0b:ec:0b:c2:34:ad:0e:
         28:dd:b6:be:13:6f:e3:b5:d0:6e:1f:51:85:77:ed:77:f9:c3:
         4c:42:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:33:09 2025 by rpki-client