Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33322d3438203d3e20323634313132.roa
File:                     323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (raw, json)
Hash identifier:          xjN6sHaV4vO2I0ogT4RW4ELkCzroQkdpCfyvnk2SDZM=
Subject key identifier:   0D:AF:DA:AE:F5:A6:21:1B:FC:5F:2D:CD:BC:4A:C6:EB:AF:AA:39:50
Certificate issuer:       /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
Certificate serial:       6015AF118221291E2AEB67B5B25C4C6E02D655CB
Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33322d3438203d3e20323634313132.roa
Signing time:             Wed 07 Aug 2024 14:58:01 +0000
ROA not before:           Wed 07 Aug 2024 14:53:01 +0000
ROA not after:            Wed 06 Aug 2025 14:58:01 +0000
asID:                     264112
IP address blocks:        2804:22a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:15:af:11:82:21:29:1e:2a:eb:67:b5:b2:5c:4c:6e:02:d6:55:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
        Validity
            Not Before: Aug  7 14:53:01 2024 GMT
            Not After : Aug  6 14:58:01 2025 GMT
        Subject: CN=0DAFDAAEF5A6211BFC5F2DCDBC4AC6EBAFAA3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:d5:ec:90:ad:53:06:4e:fe:1f:bc:de:13:
                    77:25:fd:b4:69:c2:7f:9a:b5:b9:f0:f9:8e:ba:72:
                    59:21:87:fb:b7:72:6a:a1:a0:1b:c1:ad:7a:07:72:
                    ff:54:1a:e5:a7:9e:14:35:72:5c:31:07:8e:ae:b1:
                    6e:6c:19:b2:15:e3:dc:eb:47:05:4d:0f:c4:2a:ea:
                    e7:07:b6:de:57:e3:23:6e:4e:33:bc:47:79:d3:b9:
                    6e:4d:42:ee:a7:7c:29:dc:62:04:92:da:17:26:ec:
                    3e:35:f4:a5:82:63:77:70:76:4e:11:c2:36:89:16:
                    1f:d9:79:bb:50:d9:ed:65:5e:c7:a9:3e:b5:23:4a:
                    e0:37:af:b9:72:2b:1c:47:27:7c:88:93:fb:a9:7c:
                    74:0e:f1:0c:17:2c:f9:e6:6c:6e:12:30:f5:4c:9a:
                    7b:0e:9e:46:7a:8a:f9:ab:5b:6c:18:55:ac:15:a7:
                    68:5c:76:50:c3:54:5e:19:1e:d4:84:87:3d:2a:bc:
                    60:0b:d8:13:44:a2:c6:29:c5:fd:fb:7c:22:d4:90:
                    4d:46:9f:3c:f8:d5:0e:12:b4:46:09:28:82:f2:22:
                    bc:e5:36:f9:49:8f:7a:59:3f:8f:34:57:f8:5f:aa:
                    1d:3b:06:d1:a8:4f:73:2f:ca:00:b4:be:f5:6c:ec:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:DA:AE:F5:A6:21:1B:FC:5F:2D:CD:BC:4A:C6:EB:AF:AA:39:50
            X509v3 Authority Key Identifier:
                keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/323830343a323261303a3a2f33322d3438203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:27:07:19:15:5a:73:82:d7:18:7c:af:22:98:a0:15:34:
         a8:8b:28:6f:6f:7b:59:f9:9a:70:9b:1d:e7:1c:18:34:e4:2b:
         c6:12:b3:4a:b5:18:14:51:c2:f4:86:b7:22:64:c1:32:7a:92:
         6a:42:d2:77:95:c8:23:47:53:15:38:51:f5:5e:c1:04:f6:fa:
         42:74:01:c5:2c:6e:06:1e:69:ca:7c:a6:98:85:15:94:5d:5d:
         81:16:6d:47:da:08:17:c9:ef:7a:e1:d2:26:8c:e6:63:e8:31:
         ae:1a:a8:ba:4e:0b:7a:6b:0e:f4:84:e2:69:65:53:71:ef:8e:
         c0:96:26:24:4b:20:be:b7:7e:9a:f4:e1:d5:ab:3b:7d:c8:b2:
         53:b4:26:a0:9e:f2:5e:0c:1d:e6:66:ea:7c:bb:49:2b:2f:59:
         cb:e3:2f:87:0a:0e:1b:14:52:c4:c4:e6:13:fc:43:99:c7:f2:
         fd:2e:f7:d1:07:31:03:a9:f5:dc:0b:a8:5f:b3:b3:2e:80:ab:
         71:1b:af:2e:02:89:d5:f7:62:f2:ff:0a:89:32:93:85:9a:09:
         fa:47:25:fd:e6:1d:c4:1d:65:04:dd:a1:b7:f9:dd:d3:dd:f4:
         15:ea:b8:db:da:af:c0:2f:72:f6:5b:c8:54:e4:10:67:bd:0a:
         7a:e2:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:22:05 2025 by rpki-client