Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
File:                     323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (raw, json)
Hash identifier:          z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=
Subject key identifier:   67:F7:23:5A:45:36:DE:AA:E8:28:A2:D5:58:ED:85:84:2D:FA:8E:1A
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       7965F2160C51312D4F6F826F88D5BE6A8D32A4E7
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa
Signing time:             Thu 19 Dec 2024 23:08:18 +0000
ROA not before:           Thu 19 Dec 2024 23:03:18 +0000
ROA not after:            Thu 18 Dec 2025 23:08:18 +0000
asID:                     269707
IP address blocks:        2804:68a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
                          rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:f2:16:0c:51:31:2d:4f:6f:82:6f:88:d5:be:6a:8d:32:a4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Dec 19 23:03:18 2024 GMT
            Not After : Dec 18 23:08:18 2025 GMT
        Subject: CN=67F7235A4536DEAAE828A2D558ED85842DFA8E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:d9:10:42:d5:d2:7d:64:e2:46:1a:9e:eb:
                    04:1a:cb:79:8a:c5:65:03:2d:6f:37:25:6c:15:cd:
                    69:c9:1a:22:b4:7e:08:11:29:e0:b0:3b:b0:8f:60:
                    3e:37:f9:c9:9d:78:a7:73:6c:32:3b:93:d7:10:4d:
                    3c:63:23:cf:d4:d7:b6:90:cc:a2:e8:cc:1c:57:c9:
                    14:97:41:4f:64:b1:7b:2a:d5:64:d3:f6:aa:ee:de:
                    da:25:5c:91:01:5d:5e:93:11:95:9a:18:53:ae:ea:
                    6b:61:dc:40:cd:a4:9b:7b:5b:e8:f8:2d:09:57:ce:
                    41:4c:87:df:7c:30:cf:cb:a6:2b:24:f8:4d:12:a5:
                    06:1a:c6:ce:39:68:2f:48:42:6d:3c:d7:ce:8a:88:
                    75:8c:6c:bf:f4:60:51:b0:be:44:3e:50:a4:42:59:
                    34:38:c0:4d:79:a5:03:5f:00:9e:7f:f0:25:7b:7e:
                    40:1f:35:dd:66:b0:54:a2:0b:14:4f:7e:a0:f7:ba:
                    b8:69:6c:c0:b8:79:89:2d:d0:89:1c:f3:82:ca:2d:
                    02:54:93:b8:bb:31:ac:ce:c0:6b:16:fd:6b:4e:21:
                    2c:5b:82:e3:a2:d5:a8:01:14:0d:76:82:f3:75:82:
                    88:7c:0f:c3:6a:05:bb:ac:e6:17:b5:f1:f0:05:06:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:23:5A:45:36:DE:AA:E8:28:A2:D5:58:ED:85:84:2D:FA:8E:1A
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/323830343a363861383a3a2f33322d313238203d3e20323639373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:63:70:a5:50:0b:3c:a2:af:e8:88:f8:6a:3f:1d:3d:96:6d:
         ca:9b:9f:a3:6a:f4:5d:8a:00:67:04:9c:91:0e:be:86:65:c4:
         33:a5:7c:79:9d:bd:7d:b6:c7:6b:8c:fd:83:b2:e0:d2:95:3f:
         e5:69:dc:09:c8:f8:ad:45:95:2f:19:f4:e4:09:3f:a5:c0:1f:
         4f:6a:89:3d:8d:9e:15:e2:0a:16:60:bf:e6:76:4d:58:6e:9f:
         62:72:94:4c:9c:83:82:33:c5:9e:d6:65:6d:80:e0:9c:a5:67:
         b6:fe:22:ef:fe:84:bd:e5:65:6f:0d:66:22:c9:fa:93:22:ed:
         06:40:e5:53:5e:12:a9:ab:f1:ef:61:f8:e0:bd:c2:61:c9:3e:
         fb:b6:73:15:0c:ac:d1:65:9c:5a:ab:3c:45:f5:33:7f:72:a1:
         bb:b6:4e:1e:51:61:fe:90:6b:d7:c9:d2:0c:57:eb:c8:c1:7f:
         bd:2f:fc:9d:d2:d8:fc:ba:e2:7c:ba:3b:5f:11:0a:8c:07:82:
         d1:9a:0c:27:b3:ce:71:e7:c1:c5:81:4a:ff:28:45:e7:7c:2c:
         79:91:ab:e8:f7:d0:f4:64:e8:1f:52:2b:9f:8a:36:8f:73:f7:
         a0:d5:0c:d0:10:b3:fe:ff:7d:46:73:57:3b:e6:10:0a:69:0d:
         d8:63:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:37 2025 by rpki-client