Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          GXBmtfeZe589AKYXYDIZmj8w5w7lB0A2LszXm8/A8E0=
Subject key identifier:   BE:E7:F3:B2:62:7B:4D:E2:37:41:26:73:1F:31:49:C1:A3:77:07:16
Certificate issuer:       /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Certificate serial:       764A8489B5B55C90B130D1B427837D712255678F
Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Fri 24 Jan 2025 23:57:24 +0000
ROA not before:           Fri 24 Jan 2025 23:52:24 +0000
ROA not after:            Fri 23 Jan 2026 23:57:24 +0000
asID:                     272677
IP address blocks:        2804:86f4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:84:89:b5:b5:5c:90:b1:30:d1:b4:27:83:7d:71:22:55:67:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
        Validity
            Not Before: Jan 24 23:52:24 2025 GMT
            Not After : Jan 23 23:57:24 2026 GMT
        Subject: CN=BEE7F3B2627B4DE2374126731F3149C1A3770716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:4c:08:4b:e2:72:c1:84:f5:04:4c:be:26:
                    48:db:dc:a6:bc:9e:0c:f0:a3:d8:f9:70:a6:8e:50:
                    d3:39:de:78:f4:54:a3:7e:1f:b3:8a:51:aa:8f:9f:
                    b4:81:9f:d9:06:60:07:53:c8:76:5f:e1:41:7b:43:
                    48:65:88:4b:2f:9d:9b:d8:d1:20:18:1f:83:a6:e7:
                    ad:75:f2:1d:9e:ac:83:04:06:fd:0f:97:09:1f:05:
                    3d:fc:5a:08:b3:9c:6d:1a:6a:71:1c:cc:3d:b1:c3:
                    07:48:55:9a:8b:59:ad:7a:6f:33:3d:70:5d:f6:09:
                    d6:39:5d:9e:11:73:b1:7e:db:88:b4:cd:10:47:1a:
                    14:b4:4e:0e:27:17:db:57:4b:72:7e:72:b6:60:f5:
                    b4:96:2b:52:67:3b:6e:8f:33:d8:fc:ff:38:7e:83:
                    d7:77:c1:67:58:28:95:70:ad:5f:2d:ec:a3:77:aa:
                    da:7e:9b:d6:ee:61:b0:9d:26:25:3c:7e:6e:dd:eb:
                    da:d0:72:cc:68:38:2c:a6:93:ef:e8:89:f9:5d:6b:
                    ea:9f:6f:e4:a7:a2:a3:4e:86:8b:14:71:09:d5:cd:
                    d8:63:ca:92:1e:70:5c:52:5a:6f:53:c1:3a:9d:d7:
                    db:a2:e5:c9:cc:8b:d0:0b:2f:d5:e2:84:90:ad:04:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E7:F3:B2:62:7B:4D:E2:37:41:26:73:1F:31:49:C1:A3:77:07:16
            X509v3 Authority Key Identifier:
                keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a633030303a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:eb:3d:ee:5f:39:ea:83:4e:49:79:eb:f3:43:db:c5:5f:97:
         60:99:21:58:ee:bd:38:8a:4a:bd:70:03:b8:7a:83:71:4a:cb:
         f1:7d:c7:8c:4d:a8:87:5a:8d:04:e6:8c:61:db:45:2f:6e:2b:
         3e:c7:ac:dd:01:dc:15:f8:ca:04:95:cb:21:e0:5a:ff:b5:08:
         c1:65:60:0a:93:31:db:02:6f:cd:e3:d8:e7:1f:2b:f8:6f:a2:
         44:5e:26:8d:da:ae:27:a0:97:2d:da:fd:19:f1:6f:57:63:fa:
         20:3d:05:cc:65:02:18:a2:1b:7e:39:47:57:a3:48:7a:e1:cf:
         15:3a:02:a2:2b:88:74:8a:96:24:67:e6:f0:a9:d6:57:05:2c:
         a3:12:45:84:f9:79:97:b9:47:02:18:e9:3a:51:ca:07:07:a5:
         57:0b:52:37:e4:37:0f:fa:0b:b2:1f:e6:75:c6:91:e1:cc:46:
         71:47:f1:67:c0:ae:58:f8:45:be:be:f2:ac:76:dc:da:66:8a:
         11:ef:bd:32:5f:b5:10:4f:16:90:1a:aa:43:90:cb:0c:66:cc:
         58:01:f0:1b:19:fb:e5:39:21:54:b8:e1:e8:3d:b3:8f:06:ee:
         83:8b:7b:36:6b:20:27:18:22:af:cc:cf:ed:5a:6a:a2:d7:94:
         3d:73:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:29 2025 by rpki-client