Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3332203d3e20323636393234.roa
File:                     323830343a343536383a3a2f33322d3332203d3e20323636393234.roa (raw, json)
Hash identifier:          LqNikUH+FQPHvRTTyL/8nWto6W6PpPIqR1tG/K6xvvk=
Subject key identifier:   A9:D2:45:69:F7:F1:23:29:C8:A2:B3:E0:70:2E:70:8E:67:25:D3:A0
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       1BA1532B4231594108149D9C3C410B5E9D13D937
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3332203d3e20323636393234.roa
Signing time:             Mon 13 Jan 2025 00:25:44 +0000
ROA not before:           Mon 13 Jan 2025 00:20:44 +0000
ROA not after:            Mon 12 Jan 2026 00:25:44 +0000
asID:                     266924
IP address blocks:        2804:4568::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a1:53:2b:42:31:59:41:08:14:9d:9c:3c:41:0b:5e:9d:13:d9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Jan 13 00:20:44 2025 GMT
            Not After : Jan 12 00:25:44 2026 GMT
        Subject: CN=A9D24569F7F12329C8A2B3E0702E708E6725D3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:6e:62:1a:7f:f3:93:f2:cd:cb:f1:a9:f4:
                    3c:83:e8:86:ea:ee:b9:03:e6:3c:c0:1a:c9:2b:f9:
                    45:dc:da:56:da:ad:97:44:5e:9c:60:a6:da:c9:8a:
                    0c:f4:6c:a7:46:fe:a5:61:1b:95:c1:24:59:64:04:
                    67:df:4d:17:84:1b:ee:45:14:49:1f:6c:c8:68:d1:
                    d4:df:5f:02:1a:9c:26:0a:0e:b3:8d:54:e2:fb:1d:
                    0a:5c:7a:b5:ac:a6:d3:a5:35:e1:e5:f8:50:b8:af:
                    2a:73:dc:e4:59:dd:98:26:af:c6:50:f3:84:97:b6:
                    12:d9:25:a9:c3:81:b0:f1:0a:b5:09:c6:6e:9e:f0:
                    28:0c:6f:5b:22:49:85:2e:ba:75:2e:d7:d0:0b:c9:
                    c9:2c:4b:ef:73:26:28:ff:c8:32:b7:2c:64:fb:ca:
                    41:5a:55:58:ef:1c:3e:92:d9:e7:2c:84:6f:ba:6c:
                    5f:e0:5e:d8:fc:48:4d:5a:ce:6b:65:0d:5e:8f:02:
                    ad:16:0c:41:1c:e3:63:4f:29:db:70:5a:86:61:74:
                    f6:1b:7e:bd:d0:6b:6b:01:3f:37:61:27:5e:04:7b:
                    7b:84:db:4a:0b:57:d3:dc:90:f2:4f:4d:b9:2b:13:
                    03:d7:00:8b:bc:29:29:0f:2a:5e:0d:2d:8b:f1:18:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D2:45:69:F7:F1:23:29:C8:A2:B3:E0:70:2E:70:8E:67:25:D3:A0
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/323830343a343536383a3a2f33322d3332203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4568::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:53:e9:b5:2b:cc:c0:12:af:35:69:28:8e:f2:47:e5:30:
         01:cd:77:fa:93:5d:e6:20:97:08:42:96:c0:c2:dd:35:ab:83:
         5b:01:24:8a:4d:29:42:6a:2d:76:34:f8:e1:08:7d:81:97:f9:
         ab:38:1d:8e:7c:6a:f2:80:48:a4:9d:ae:f2:74:15:92:9d:0c:
         a3:6f:d8:d7:74:ce:ee:17:9b:0e:4f:f3:d9:f0:3a:24:eb:14:
         5b:a9:ac:ce:5c:f2:f1:f8:41:b8:70:0f:6b:6c:76:74:f5:4c:
         a3:06:e2:fe:de:dc:b1:e0:21:8f:46:84:30:5a:ce:c3:4d:d5:
         86:3d:43:92:d0:fe:1d:7c:4d:6d:b1:d5:3d:35:8e:bc:4b:d8:
         63:be:48:93:52:b4:03:20:09:ff:6b:dd:6a:7e:47:a2:6c:86:
         90:2e:64:98:10:2b:7c:59:2c:fa:46:3a:31:c8:84:3b:70:1a:
         33:48:80:5e:e0:69:01:51:8d:06:98:90:1b:6a:f4:dc:8a:2d:
         20:42:46:99:69:2b:a7:d0:f4:2c:18:79:35:79:74:2c:5b:d9:
         69:f9:95:b6:ce:c9:b5:38:d7:83:1a:27:94:5e:b8:ab:23:45:
         e9:28:89:ec:21:78:5a:c8:32:38:ed:0f:e0:3b:5d:f7:cf:d7:
         e3:78:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:56 2025 by rpki-client