Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa
File:                     323830343a383563633a3a2f33322d3438203d3e20323732363031.roa (raw, json)
Hash identifier:          XK8gG2MoZUzZDNRypc0/+NDptZEJBoOxLDViPs/6X7M=
Subject key identifier:   8B:30:32:31:4A:D8:E2:E0:84:F8:F2:22:43:8B:E7:C7:6B:E9:B6:8B
Certificate issuer:       /CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
Certificate serial:       6A079886599C2C0C2868F21827406661EE5377E1
Authority key identifier: AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa
Signing time:             Mon 06 Jan 2025 18:56:50 +0000
ROA not before:           Mon 06 Jan 2025 18:51:50 +0000
ROA not after:            Mon 05 Jan 2026 18:56:50 +0000
asID:                     272601
IP address blocks:        2804:85cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.crl
                          rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:07:98:86:59:9c:2c:0c:28:68:f2:18:27:40:66:61:ee:53:77:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
        Validity
            Not Before: Jan  6 18:51:50 2025 GMT
            Not After : Jan  5 18:56:50 2026 GMT
        Subject: CN=8B3032314AD8E2E084F8F222438BE7C76BE9B68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:25:2c:bc:a3:ac:d3:a3:00:ee:7b:ac:3d:
                    ae:24:8e:96:fe:47:94:38:fc:bc:c1:63:9f:67:6a:
                    04:91:d1:3d:58:c8:ff:0f:3d:af:43:61:bb:32:b9:
                    4c:21:d1:ae:a6:95:93:26:b3:80:a2:f3:ee:1b:6d:
                    64:0d:5e:f0:b6:52:4b:6b:88:f9:07:d6:3d:73:7a:
                    3c:5f:18:36:e7:ae:53:0f:35:a6:82:b0:14:f9:de:
                    60:ea:7c:61:36:bc:c2:1c:cb:67:70:fb:98:90:a1:
                    49:35:40:ed:80:51:2e:26:1b:63:0e:1c:c8:ba:b4:
                    82:cf:08:f5:2f:2c:ed:71:e7:5d:29:ae:e4:9b:24:
                    74:70:55:21:7b:55:7a:86:0e:4a:60:03:86:3a:82:
                    bb:ac:9a:ca:3f:1d:71:2d:fc:03:78:3a:41:59:ec:
                    78:79:be:ac:2b:c0:91:ee:f5:1a:32:0e:c3:41:0b:
                    a1:83:8d:ad:33:a2:11:c7:ed:25:a5:38:ed:97:f9:
                    e0:d2:5d:49:fa:ef:9d:41:6b:c3:3e:e4:3d:84:8c:
                    02:ae:e1:bb:a9:ec:c6:4b:c8:9a:e4:3c:c4:1a:1a:
                    47:51:e0:10:6c:b0:42:f4:60:d5:60:c6:4c:e5:8c:
                    93:e2:7f:08:e5:f1:be:10:cc:05:d2:f9:03:7d:11:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:30:32:31:4A:D8:E2:E0:84:F8:F2:22:43:8B:E7:C7:6B:E9:B6:8B
            X509v3 Authority Key Identifier:
                keyid:AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:96:1f:c4:d7:45:06:b1:eb:88:8d:b3:73:ac:82:05:f2:
         d4:ac:4e:dd:3a:41:20:2a:92:1b:7a:09:f8:71:eb:b1:e9:05:
         39:14:38:95:aa:e6:55:27:6e:f3:4b:40:4a:a6:5b:ec:e2:93:
         9a:e8:ee:5a:44:8d:97:fb:ad:23:a0:17:a7:f5:2a:1e:b4:c5:
         42:20:43:f2:6a:82:86:d5:61:2a:f4:c3:3d:04:0f:3c:da:f1:
         dd:d3:85:10:77:82:73:e7:8b:66:bd:b3:ee:cf:f5:ae:d3:3f:
         d2:c4:04:1a:f4:a5:5c:43:94:ec:c9:98:3c:43:6f:dc:7d:da:
         11:d9:a8:e4:8a:6c:81:68:d1:25:02:82:36:44:38:a8:ff:6f:
         a9:2c:ce:f2:ea:0b:db:ce:50:28:3b:57:ca:17:43:40:32:17:
         7a:28:07:84:7c:35:57:90:d3:d5:2d:f2:ad:aa:74:d7:a9:e4:
         ac:bf:2b:94:51:eb:b1:99:10:ef:51:fc:39:c7:ec:7f:50:fb:
         8d:eb:f9:60:49:d6:a4:03:52:79:f6:17:b7:19:68:41:c0:bf:
         8a:fd:6a:76:98:3a:23:7a:27:1b:a6:84:09:ad:1c:34:99:75:
         21:e6:25:72:f3:fc:f9:ac:d9:90:b2:a7:4e:d4:82:49:d3:92:
         d9:bb:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:57:32 2025 by rpki-client