Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
File:                     323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (raw, json)
Hash identifier:          NJXPg3F1laW5ItIIp22QI+IxMXIBDhivnZwY6ZphBEk=
Subject key identifier:   B4:F3:FF:B6:F3:4D:4B:90:2C:7B:E3:55:2F:44:A6:16:37:AC:ED:F1
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       673DC04F6671024255B270034C1ABD13DE6F44B6
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264126
IP address blocks:        2804:22d8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3d:c0:4f:66:71:02:42:55:b2:70:03:4c:1a:bd:13:de:6f:44:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=B4F3FFB6F34D4B902C7BE3552F44A61637ACEDF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:ac:56:0d:e2:b6:47:3e:08:a7:c5:f7:f2:
                    0e:44:f3:fd:09:10:fc:be:1d:a4:7b:56:0f:5f:2a:
                    67:60:75:61:05:84:bf:ec:98:e4:e3:96:96:17:f4:
                    0b:34:09:4e:b0:8b:7c:73:90:64:7c:76:aa:ed:3c:
                    ba:49:2f:01:21:61:f9:96:04:e0:31:a8:70:e2:2e:
                    99:15:67:f0:1c:a2:b6:11:c3:02:14:1f:72:c8:74:
                    34:27:43:57:2f:76:98:e7:c1:d2:66:f1:aa:49:5a:
                    1e:d4:e2:1c:70:cb:98:fe:af:e1:84:83:cb:d2:73:
                    c1:e6:e4:90:5d:ec:bb:48:65:1a:96:9f:06:f1:ca:
                    f9:e4:c2:a5:f4:19:c3:8d:61:55:23:83:22:4c:a0:
                    4c:d3:cf:98:53:38:db:44:aa:69:d0:1e:d8:15:1d:
                    c7:f2:b9:e4:af:4f:f9:23:1a:0f:b7:87:31:8a:2f:
                    14:0b:3a:93:da:8f:bf:73:6e:bf:e0:1c:41:5d:4f:
                    8c:2d:5e:84:26:46:e2:0a:00:bc:81:ce:62:98:71:
                    f8:1b:36:57:5c:aa:9c:a1:e0:0e:41:53:36:82:8a:
                    55:5c:79:77:5e:dd:11:a3:7d:53:b3:74:14:52:af:
                    0e:db:d4:2b:27:c4:20:1b:c7:64:e5:a2:02:27:74:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:FF:B6:F3:4D:4B:90:2C:7B:E3:55:2F:44:A6:16:37:AC:ED:F1
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:93:fc:7f:64:5f:f2:7f:b1:c2:e7:8f:14:d9:f4:ac:e8:23:
         98:cd:e2:5e:6a:19:2f:19:bd:41:75:81:4f:de:d0:6c:72:cd:
         9b:f3:f4:ec:97:e6:2a:96:48:e9:f1:ca:3c:65:63:88:90:63:
         ae:e6:f9:c4:62:d5:8d:de:b2:c5:91:bc:f7:a5:8a:b2:b0:53:
         e1:3e:6c:43:cb:8e:9a:c5:ab:b2:2a:23:b7:61:be:7f:b2:8f:
         0b:21:b7:4f:77:d2:0f:44:41:5a:8f:f9:08:4c:ef:03:ec:e1:
         f3:7a:4a:38:7b:53:96:54:88:5f:cc:e3:b6:af:8a:9d:c7:3b:
         81:06:ae:bc:d5:59:d6:2d:89:fc:87:3a:18:72:06:ba:0a:33:
         63:5c:a2:d0:42:c7:80:76:ae:b4:97:cb:27:6a:20:b5:e0:02:
         80:91:75:7b:bf:9b:6d:ce:49:f5:7d:9e:5f:6a:8e:06:03:a7:
         71:44:db:74:68:2e:45:3b:95:fd:c1:73:40:b8:32:67:8c:3a:
         8e:65:73:98:ca:be:1d:4a:31:66:b2:d4:0d:1c:68:a8:cf:59:
         66:4a:0e:5d:3b:c4:cb:59:eb:a2:88:08:16:b2:72:25:e2:e6:
         15:64:ea:00:04:84:11:3f:96:18:cd:c2:67:83:9c:cc:ca:5c:
         16:4c:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:59:37 2025 by rpki-client