Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa
File:                     323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa (raw, json)
Hash identifier:          pkKMYrAw6tU3UkEg+pCsbnvIXZuI0TxStCB/e0JiUNY=
Subject key identifier:   65:23:DA:15:3A:6E:24:ED:74:68:FC:1A:9A:76:0C:4B:F8:DD:E5:35
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       4E43A3AD565F344EB16E5759B2BA0D9958632B2D
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:45:31 +0000
ROA not before:           Wed 30 Oct 2024 14:40:31 +0000
ROA not after:            Wed 29 Oct 2025 14:45:31 +0000
asID:                     267214
IP address blocks:        2804:4a08:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:43:a3:ad:56:5f:34:4e:b1:6e:57:59:b2:ba:0d:99:58:63:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:40:31 2024 GMT
            Not After : Oct 29 14:45:31 2025 GMT
        Subject: CN=6523DA153A6E24ED7468FC1A9A760C4BF8DDE535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c0:06:44:7e:1d:29:d6:c2:8c:a7:aa:67:56:
                    e7:91:44:65:d5:78:2f:a3:1f:28:13:4e:4b:e4:c4:
                    e8:77:19:f7:04:80:65:8d:4e:db:eb:d9:4e:f8:12:
                    59:84:3b:80:a9:41:9c:79:be:5c:4f:f9:df:2c:6c:
                    1d:1e:00:d5:9d:f1:10:fb:a8:12:a7:cc:b8:62:fa:
                    d1:b2:5a:81:d5:ac:4f:9e:2d:78:11:27:7a:d5:36:
                    18:ab:be:fb:57:cb:c6:9b:4e:bd:7c:aa:a8:98:0d:
                    6a:9f:af:55:be:c4:93:66:18:e4:44:9f:82:a7:7a:
                    8a:c7:1b:03:27:77:b5:68:8f:35:78:f5:af:b2:fe:
                    e3:fb:a6:4a:ac:29:41:43:32:c7:a3:9a:d9:31:d1:
                    87:e9:95:0a:13:58:53:17:66:c5:b7:1d:64:70:4a:
                    3d:46:35:33:d7:80:6b:a8:05:a5:cc:3e:ca:52:6d:
                    38:cb:31:f1:d0:10:60:ce:7b:ef:b0:e9:af:d2:e9:
                    48:4e:75:58:10:42:84:59:b1:7e:d9:c7:c2:17:35:
                    59:0d:b6:38:19:ff:fa:6a:ca:c8:c4:b2:a0:93:96:
                    cb:34:79:2b:a1:37:85:d4:86:4b:4c:95:59:bf:de:
                    7b:fc:b4:3d:f2:3b:81:72:7b:b3:db:f5:30:cb:d6:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:DA:15:3A:6E:24:ED:74:68:FC:1A:9A:76:0C:4B:F8:DD:E5:35
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a383030303a3a2f33332d3333203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:78:b7:84:61:08:f6:e5:fc:e4:86:a7:5a:17:ff:de:2e:9e:
         5d:09:1b:09:a4:de:c4:64:7b:98:88:ac:04:42:72:cd:15:ad:
         02:d0:11:0b:7c:9e:1e:28:10:fe:9e:d5:25:28:e7:bc:77:9d:
         4e:ba:9f:31:24:d9:73:d9:a1:6d:71:b7:80:11:e3:45:b9:7a:
         f1:8c:68:25:40:20:df:6b:7e:e1:83:d1:a8:2e:8f:a3:ac:d8:
         f9:50:c3:4f:56:96:16:1e:67:6e:9e:5c:64:3c:ad:8a:f8:9b:
         27:1d:84:ad:ce:8b:11:49:49:1f:9e:5f:5b:d1:57:85:6e:c9:
         2c:af:56:7a:1f:a9:fc:a1:f1:b9:0f:73:8e:5f:53:6e:16:23:
         53:cc:d9:26:2b:b6:7c:ca:cb:c9:26:26:cf:a0:f9:22:3f:bc:
         ae:bb:17:42:af:9b:d3:e4:e6:59:6d:a3:2c:49:d1:0f:a2:cd:
         83:31:fb:cf:16:4a:87:33:ca:c5:40:7e:e8:64:5e:db:58:6b:
         a9:0e:9c:a6:c5:19:7e:d9:dc:06:84:45:48:4d:b1:12:39:8c:
         05:63:54:ad:4a:da:37:27:6e:5d:b6:c6:e9:e6:28:02:3c:eb:
         15:38:ca:7a:87:35:8e:77:92:82:e8:50:80:32:86:96:85:e7:
         de:80:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:24 2025 by rpki-client