Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          POHv5XBzj3m2BDvt3cuKFyka+8VXC1pdbq3IYRYoZ4E=
Subject key identifier:   6A:98:0D:FD:49:CC:6C:4C:E7:67:51:5B:E8:31:ED:79:F7:21:D3:20
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       34C4A9E9289CCE22600AD905103CE4D0BF5E2F67
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Thu 06 Mar 2025 03:13:47 +0000
ROA not before:           Thu 06 Mar 2025 03:08:47 +0000
ROA not after:            Thu 05 Mar 2026 03:13:47 +0000
asID:                     267455
IP address blocks:        2804:41c4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c4:a9:e9:28:9c:ce:22:60:0a:d9:05:10:3c:e4:d0:bf:5e:2f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Mar  6 03:08:47 2025 GMT
            Not After : Mar  5 03:13:47 2026 GMT
        Subject: CN=6A980DFD49CC6C4CE767515BE831ED79F721D320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:70:27:ac:7c:3f:36:7c:0f:09:1c:8d:bf:
                    b9:1c:4a:29:fe:50:c0:7f:43:4e:42:a6:4b:36:89:
                    2a:7a:51:93:49:5a:fa:54:c7:d8:cd:f2:3b:86:7f:
                    0a:16:d0:6b:5f:b6:05:b0:bd:d7:75:03:2a:4f:66:
                    2c:50:9c:01:1d:7b:23:66:bb:81:de:29:ab:da:c6:
                    e1:bc:1f:2a:d3:30:7b:84:a0:c4:3f:ec:f0:20:16:
                    d6:ac:46:71:ee:68:63:86:01:64:48:82:63:47:52:
                    cf:07:6a:9c:4b:0a:f3:85:12:a3:7f:3f:e0:81:d9:
                    94:24:28:4d:ce:4e:15:59:b0:c7:99:66:e7:3e:45:
                    bc:3b:d9:b3:cd:c3:cb:32:21:db:6e:29:70:f4:5f:
                    cf:32:19:55:63:2f:42:66:24:f2:b9:67:88:e7:a3:
                    1d:ca:8d:c6:83:32:eb:53:4f:62:35:1f:a7:22:7d:
                    cd:54:76:a1:f0:74:a3:cc:e1:f2:42:6c:ed:d3:d9:
                    a9:6e:da:22:32:3e:65:e1:96:43:1b:5a:4d:25:90:
                    20:e1:e4:90:66:6a:b2:bd:ff:7d:1e:b6:b6:61:e0:
                    41:f6:71:d3:18:e1:18:76:c7:e1:b3:73:f3:12:f8:
                    53:d8:b7:54:3e:57:87:57:e6:1c:96:87:19:93:e7:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:0D:FD:49:CC:6C:4C:E7:67:51:5B:E8:31:ED:79:F7:21:D3:20
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:07:e6:d5:ea:28:77:6f:5e:68:dc:36:85:ed:49:9c:26:31:
         25:d5:f4:2c:43:a3:ef:26:bd:3f:73:3e:33:f5:1d:92:65:1c:
         68:8f:ff:2f:3c:1c:e9:60:2b:d2:98:24:31:fd:95:63:ea:de:
         3d:f6:03:83:93:0a:e5:93:a3:ac:bc:8c:1e:98:84:b2:a2:f1:
         b3:25:85:8e:cf:8f:b7:cf:5f:e9:cd:6c:ba:3d:cd:58:41:14:
         ad:08:22:bb:4c:16:89:dc:cf:2d:0c:3c:7a:e3:f9:0a:6d:f4:
         a3:ad:64:c5:37:27:9b:89:be:4d:e8:b3:f8:c7:8e:03:bc:eb:
         df:d5:8b:3c:ec:09:b2:c2:72:ec:50:89:d5:1b:5a:95:5c:1d:
         29:5a:6c:db:44:93:54:05:cd:8c:26:8a:df:14:52:b5:d4:06:
         cf:7c:11:5d:ba:6b:e1:82:58:d7:4f:09:e6:c2:43:cb:fd:33:
         ea:dc:57:57:6c:93:72:43:d6:79:20:1a:56:91:a5:f8:a4:58:
         45:a6:8e:f4:49:0a:11:65:05:19:09:90:81:30:51:4e:52:e9:
         47:8e:10:f8:07:84:80:db:c2:cc:0a:a7:2e:49:bf:36:8f:02:
         98:f7:7d:a0:49:63:e9:dd:60:25:a5:1f:e4:78:b1:14:6f:90:
         9c:87:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:03:56 2025 by rpki-client