Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
File:                     323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (raw, json)
Hash identifier:          M5hBf8sBNi6/oq7AprV5Am9TiLrx3NpGRnhuqPlNE6E=
Subject key identifier:   BE:DF:26:3A:3D:19:9B:D4:9C:6A:67:70:ED:A3:F1:72:D2:8E:36:F2
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       057039CEDD97880B56878057AC9AF743C0FBDBD9
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
Signing time:             Thu 17 Oct 2024 19:53:09 +0000
ROA not before:           Thu 17 Oct 2024 19:48:09 +0000
ROA not after:            Thu 16 Oct 2025 19:53:09 +0000
asID:                     264517
IP address blocks:        2804:20dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:39:ce:dd:97:88:0b:56:87:80:57:ac:9a:f7:43:c0:fb:db:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Oct 17 19:48:09 2024 GMT
            Not After : Oct 16 19:53:09 2025 GMT
        Subject: CN=BEDF263A3D199BD49C6A6770EDA3F172D28E36F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:62:9f:f7:35:3b:19:2f:e4:35:a1:e3:c9:
                    f1:85:a5:7b:78:99:0d:eb:22:a7:4a:63:03:fd:5d:
                    43:dd:23:37:e7:72:86:fb:e9:f6:ed:8b:e1:a1:87:
                    3e:9f:cf:d8:4c:9b:29:b6:1d:eb:fb:b4:01:ca:6c:
                    03:ef:9e:90:16:5a:c1:1b:db:40:c3:a7:9a:85:64:
                    ca:4e:61:5c:44:24:53:96:f6:49:0d:a4:88:71:29:
                    4c:ac:66:d6:24:46:03:59:46:99:1b:e7:e1:d7:20:
                    a9:c9:2c:a3:58:64:21:03:d3:52:f8:d4:b7:da:d2:
                    fa:4c:87:c3:21:6c:d0:c7:61:72:38:7b:b3:eb:c8:
                    37:e6:53:0f:0e:c0:1f:62:5c:6a:11:f8:12:46:9e:
                    32:24:81:b3:ea:fa:74:d4:de:45:34:8c:fe:35:ec:
                    b9:69:f6:99:47:07:d2:b6:db:4a:1d:18:c8:c1:2b:
                    2c:af:ea:68:ca:7d:b8:f3:e4:7d:8c:7c:79:23:fd:
                    04:8a:ab:f5:be:5e:04:d5:ae:4c:89:b0:b9:34:19:
                    8a:a4:45:ac:4e:fc:a1:3b:83:80:9e:a1:fb:13:47:
                    d3:07:74:2c:51:be:27:33:09:58:03:b0:e6:bd:a6:
                    87:c2:e1:25:14:a5:0e:81:87:f9:f1:b0:4c:ef:f7:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:26:3A:3D:19:9B:D4:9C:6A:67:70:ED:A3:F1:72:D2:8E:36:F2
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:f7:8d:6b:08:4a:9c:e5:75:14:eb:be:7c:db:de:0f:16:
         21:08:2f:76:ac:b9:f5:d4:c0:b5:af:3e:ff:c0:da:89:12:10:
         71:30:ea:db:75:65:87:44:0a:3e:70:de:47:05:60:06:32:ad:
         e7:21:7e:80:36:c9:af:ce:89:f4:df:8e:71:36:2d:9e:c0:66:
         80:6b:83:d7:23:78:bf:ed:71:be:d3:cb:29:97:90:a0:df:ff:
         08:18:41:f6:f8:52:48:70:d1:3f:99:44:c1:2f:66:48:17:8a:
         94:33:f5:05:04:28:98:a6:68:18:c6:c0:82:59:ea:df:a0:ea:
         25:6e:fb:76:99:00:c5:27:f3:bd:02:ba:18:5c:ce:b9:ec:d7:
         71:ea:d5:2a:18:15:73:08:dd:1f:83:11:8c:76:0b:18:52:fe:
         91:b8:f7:19:b0:fd:a7:dd:95:a4:af:31:3b:01:18:d9:3d:d8:
         f9:43:b9:13:f1:4b:d0:b5:47:42:e5:74:56:1b:4f:0d:33:d4:
         5f:f0:22:61:25:a3:ec:98:ce:2b:76:c1:c5:79:8b:83:ec:52:
         35:a2:c3:26:b7:6a:fc:31:18:77:3c:f0:70:19:74:c8:f1:bc:
         e7:13:50:19:b4:f6:2e:67:4f:4c:74:dc:d2:cc:83:75:61:23:
         9f:89:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:48 2025 by rpki-client