Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d313238203d3e20323637323139.roa
File:                     323830343a346131633a3a2f33322d313238203d3e20323637323139.roa (raw, json)
Hash identifier:          M2vIbB81D4wH4tnmRPBgG9RpKjfGIdaniNZ1trZi5e8=
Subject key identifier:   F1:01:C8:8A:39:8D:E6:ED:29:97:5E:1A:7A:D0:30:FC:E7:B6:F0:DD
Certificate issuer:       /CN=6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2
Certificate serial:       2B94F5DB08AEB008261D4E54722D0781B0287E89
Authority key identifier: 6A:D4:05:B2:BB:B8:74:5A:32:DC:0B:67:F3:44:AE:2E:A5:B8:A2:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d313238203d3e20323637323139.roa
Signing time:             Wed 04 Dec 2024 13:02:18 +0000
ROA not before:           Wed 04 Dec 2024 12:57:18 +0000
ROA not after:            Wed 03 Dec 2025 13:02:18 +0000
asID:                     267219
IP address blocks:        2804:4a1c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.crl
                          rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:94:f5:db:08:ae:b0:08:26:1d:4e:54:72:2d:07:81:b0:28:7e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2
        Validity
            Not Before: Dec  4 12:57:18 2024 GMT
            Not After : Dec  3 13:02:18 2025 GMT
        Subject: CN=F101C88A398DE6ED29975E1A7AD030FCE7B6F0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:4e:73:c5:27:0b:ab:ae:4b:b5:2a:06:99:
                    d2:de:86:39:c9:99:05:73:7d:06:39:b8:25:52:aa:
                    97:a3:9d:01:a7:14:25:16:c8:85:5c:2f:7c:de:99:
                    d3:87:af:46:25:b6:d8:1b:20:4d:f6:7c:1f:3c:15:
                    22:d1:a7:31:b1:c9:1e:82:30:2f:ac:b5:bb:9c:98:
                    59:02:79:62:16:02:c2:e0:82:8c:b1:4c:aa:11:f1:
                    5c:b4:e9:8c:70:46:4f:55:0d:36:6d:f0:7d:b1:79:
                    bd:72:b3:2b:11:e9:c4:52:c1:0b:78:53:9e:14:e9:
                    01:2f:86:4f:f2:85:77:b1:fe:82:87:06:02:c7:cc:
                    90:15:db:2d:f4:5a:c4:5a:f7:ac:c5:4d:6d:11:ec:
                    75:13:1f:8d:b0:df:3b:a1:ea:32:b1:c4:9e:a9:6c:
                    62:3b:10:28:f3:e3:b5:b5:2a:37:10:77:43:ea:41:
                    c9:59:45:6a:a7:72:77:5f:79:27:0b:f8:d4:53:1f:
                    af:de:ef:90:fc:2c:cc:97:2e:24:11:f3:b2:cb:9c:
                    f6:52:45:e6:a7:35:b0:96:3b:c8:8b:de:91:d1:c7:
                    0f:04:8d:ca:77:a3:98:30:ae:01:d2:a2:bb:76:df:
                    21:5e:ee:41:90:ad:c8:a0:df:08:39:a8:35:fa:cd:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:01:C8:8A:39:8D:E6:ED:29:97:5E:1A:7A:D0:30:FC:E7:B6:F0:DD
            X509v3 Authority Key Identifier:
                keyid:6A:D4:05:B2:BB:B8:74:5A:32:DC:0B:67:F3:44:AE:2E:A5:B8:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD405B2BBB8745A32DC0B67F344AE2EA5B8A2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/323830343a346131633a3a2f33322d313238203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:40:74:b5:de:f0:ed:59:85:98:53:5f:43:c6:55:46:f6:
         44:f1:0b:3c:df:c1:44:77:d8:ac:8c:62:4e:df:18:2e:da:2d:
         38:80:cb:23:1b:87:c7:2e:8f:70:e3:58:2f:3c:8e:69:7b:b2:
         8b:10:2e:e9:9a:68:d1:1b:db:ad:ac:25:05:03:91:3b:f8:5c:
         ad:12:76:9b:50:14:51:03:28:a6:a2:38:0c:1c:07:9b:12:85:
         0d:0e:15:19:1f:33:a3:c5:d4:07:d0:12:6c:6c:74:9a:3a:3f:
         06:e7:3c:59:c4:35:cb:65:d7:45:ab:81:60:63:f5:92:55:d6:
         ce:86:8b:7d:fa:bf:b7:a3:9b:0a:d3:a1:e0:b5:7d:25:cb:3f:
         93:9a:dd:6a:9e:1f:76:a0:36:86:5f:6d:6b:20:f5:7d:eb:41:
         70:9e:71:2d:a8:35:c7:3d:48:b7:d5:21:c3:93:06:e0:cd:69:
         48:d8:8d:d7:39:f5:fc:76:43:75:b8:70:7f:21:b8:9f:71:81:
         12:ae:69:9f:9e:10:24:1a:87:84:db:bd:1a:77:22:d1:8e:2e:
         6a:74:ab:4b:12:bb:2a:65:1c:2d:4f:4d:dc:5f:13:49:a0:dd:
         f5:a4:58:e4:ea:a9:02:0d:3a:65:78:70:54:3f:5e:e4:72:13:
         dc:64:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:22:35 2025 by rpki-client