Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33332d3333203d3e20323639323435.roa
File:                     323830343a363139633a3a2f33332d3333203d3e20323639323435.roa (raw, json)
Hash identifier:          tCN0b8ObySmntTA4qo+mMGmBYvdlwNYos/Vd9R4MbgA=
Subject key identifier:   E6:B3:20:D7:34:6D:63:CF:40:12:B0:4A:EC:C4:21:3F:2F:0C:D6:AA
Certificate issuer:       /CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
Certificate serial:       6E0C35A88C59731780B78B1DD21855287AC6BC55
Authority key identifier: A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33332d3333203d3e20323639323435.roa
Signing time:             Wed 05 Feb 2025 11:54:55 +0000
ROA not before:           Wed 05 Feb 2025 11:49:55 +0000
ROA not after:            Wed 04 Feb 2026 11:54:55 +0000
asID:                     269245
IP address blocks:        2804:619c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 12:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:35:a8:8c:59:73:17:80:b7:8b:1d:d2:18:55:28:7a:c6:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12962D917F7F6F2BE3A3E746A8863360ABEB089
        Validity
            Not Before: Feb  5 11:49:55 2025 GMT
            Not After : Feb  4 11:54:55 2026 GMT
        Subject: CN=E6B320D7346D63CF4012B04AECC4213F2F0CD6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:3f:9a:f0:8f:19:4d:db:c3:4d:78:c0:d2:
                    9f:5a:20:4a:b6:0d:6e:20:64:83:cc:d7:c8:db:47:
                    14:2a:2e:67:73:ca:78:a7:18:01:19:35:a2:5b:08:
                    36:cc:19:84:2f:cf:f5:57:c9:07:42:23:4e:b3:50:
                    8d:6d:ed:94:b9:1c:b1:8f:c6:a8:e7:63:9b:10:48:
                    fc:1d:3c:82:25:c7:e7:ea:02:c0:7f:01:be:3b:e4:
                    0c:79:ae:70:b5:04:1a:c0:82:a3:ee:1d:ec:8a:bf:
                    e5:38:ff:9d:8d:23:a4:d7:4e:ef:fc:d0:4e:d3:b7:
                    cd:5f:4d:ea:2a:d3:0d:86:2e:26:34:4d:ce:9a:50:
                    e5:e6:92:e9:ee:37:66:cc:c1:99:d0:25:b2:a9:71:
                    33:f2:b1:2d:ba:2f:b8:51:eb:fc:bb:14:7e:74:c2:
                    ea:46:2e:1b:3f:73:47:32:4b:f4:e1:ad:16:22:99:
                    24:2b:5d:ad:0f:18:c2:61:94:9f:4f:68:ed:11:98:
                    ba:aa:f5:d5:f0:53:c8:f0:3f:dc:af:aa:e0:24:cf:
                    31:8d:df:c0:9c:77:27:45:74:6d:a6:17:13:d9:dc:
                    a2:0a:a9:67:7f:47:aa:9b:11:a5:51:40:1c:78:f3:
                    e6:46:bd:4c:69:3c:29:21:50:03:f4:18:76:2e:f9:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:20:D7:34:6D:63:CF:40:12:B0:4A:EC:C4:21:3F:2F:0C:D6:AA
            X509v3 Authority Key Identifier:
                keyid:A1:29:62:D9:17:F7:F6:F2:BE:3A:3E:74:6A:88:63:36:0A:BE:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/A12962D917F7F6F2BE3A3E746A8863360ABEB089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A12962D917F7F6F2BE3A3E746A8863360ABEB089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33332d3333203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:619c::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:63:9b:0e:28:0b:31:88:f5:44:10:0d:fb:e7:76:da:15:
         0f:78:83:1d:d9:43:8f:bf:69:99:83:67:72:7e:82:10:66:0c:
         ff:45:d2:dd:a1:d3:98:fb:db:be:43:81:d5:47:22:c7:95:68:
         eb:11:9e:00:d1:b5:1b:eb:7b:ef:bc:66:39:dd:d6:12:27:f8:
         52:eb:ce:1e:25:0d:e0:ab:cc:f1:3a:88:cb:b7:57:4e:15:e5:
         24:a7:18:3c:02:16:70:5c:55:d1:fb:dc:e8:5a:fc:44:a8:78:
         10:17:5c:65:be:ea:5c:4b:24:15:05:ea:13:ff:09:de:9a:8a:
         cf:fb:5a:ef:01:5d:13:09:8b:8d:9c:39:12:b9:8e:25:38:61:
         34:06:e7:ee:23:6c:c4:2d:a7:25:0d:31:a0:c6:5e:bc:72:1b:
         f4:a7:84:7d:05:26:49:b0:a3:e7:ec:31:c3:b5:fd:bb:b6:d5:
         4b:fe:93:64:c0:41:3a:68:62:c6:6b:58:f1:63:84:49:06:4c:
         f8:15:64:1c:ee:00:3e:8d:ac:50:1a:b8:17:9f:f6:e3:e9:a5:
         b2:5e:5a:c6:22:58:ef:e7:d2:b3:b5:17:d1:14:c9:0d:b2:72:
         31:27:65:dd:cf:fb:cf:84:64:7f:66:c8:18:f7:0d:40:01:61:
         d0:a5:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:53:52 2025 by rpki-client