Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a383030303a3a2f33332d3333203d3e20323639303735.roa
File:                     323830343a356631343a383030303a3a2f33332d3333203d3e20323639303735.roa (raw, json)
Hash identifier:          oJm2bc91dNToUXMb7fOfbJArPRv8q4uA+9DZkMRFhUY=
Subject key identifier:   A8:80:8A:C6:F0:AB:9D:93:69:42:30:68:E8:4B:2E:8D:17:0B:A1:12
Certificate issuer:       /CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
Certificate serial:       020C8A15B60C0EC0D6D03D0DE5E33F43ACEA01FE
Authority key identifier: 46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a383030303a3a2f33332d3333203d3e20323639303735.roa
Signing time:             Wed 05 Feb 2025 12:33:16 +0000
ROA not before:           Wed 05 Feb 2025 12:28:16 +0000
ROA not after:            Wed 04 Feb 2026 12:33:16 +0000
asID:                     269075
IP address blocks:        2804:5f14:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl
                          rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0c:8a:15:b6:0c:0e:c0:d6:d0:3d:0d:e5:e3:3f:43:ac:ea:01:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
        Validity
            Not Before: Feb  5 12:28:16 2025 GMT
            Not After : Feb  4 12:33:16 2026 GMT
        Subject: CN=A8808AC6F0AB9D9369423068E84B2E8D170BA112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:0a:9d:bb:70:4d:52:75:70:b2:4f:68:0d:
                    07:8c:1f:c5:a8:6a:5a:f4:29:d9:78:26:db:e1:cc:
                    26:ae:fb:16:ad:96:7c:1c:b0:6d:f2:0a:77:1f:74:
                    8b:fc:51:36:ea:f8:17:43:41:47:7a:cf:76:4e:d4:
                    75:48:39:5c:71:e4:79:21:92:02:59:4e:d4:35:a0:
                    83:9e:cb:3a:65:51:bc:04:4e:7e:03:26:9b:c2:fa:
                    d6:f8:69:6f:35:1d:0d:99:a1:37:f1:4b:fe:91:df:
                    2c:fc:dd:ef:76:d3:67:7c:84:eb:d7:f0:2b:d5:af:
                    b5:49:a0:7a:ab:9c:61:35:ab:b9:02:7b:db:9b:01:
                    4d:d9:bc:61:ad:bd:b8:bb:a2:db:20:8e:3a:f6:88:
                    80:f7:dd:4b:f9:21:a9:88:e4:9e:3e:f1:5d:ee:92:
                    cf:ff:ed:c6:49:0e:fa:4c:3f:74:3c:46:0b:6a:eb:
                    b2:5d:fa:df:34:85:b0:38:a8:71:f5:ce:1a:47:0f:
                    fb:44:74:55:1e:c9:9c:cd:36:5e:70:6d:80:4d:ca:
                    e5:63:bf:03:4d:76:21:36:40:a1:c7:81:c2:3b:b5:
                    f9:0f:f0:01:74:4f:1c:e5:09:08:18:bf:7a:c9:34:
                    06:ac:fa:c9:57:b7:fe:a8:f4:3a:1b:d6:72:c3:75:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:80:8A:C6:F0:AB:9D:93:69:42:30:68:E8:4B:2E:8D:17:0B:A1:12
            X509v3 Authority Key Identifier:
                keyid:46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a383030303a3a2f33332d3333203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:39:f2:d9:0c:1c:0a:26:18:d5:c3:62:b6:de:1f:f0:01:
         2a:79:34:70:37:f3:98:77:c3:6e:89:38:9e:11:d9:28:85:1e:
         c7:48:e2:fc:89:d7:2d:b7:10:aa:aa:0e:14:7b:6d:ef:1a:45:
         91:38:e5:6a:d4:a1:eb:8e:8d:d1:8f:4d:fd:29:12:d0:57:cb:
         23:31:35:3b:7d:ba:2f:e4:8f:0d:09:44:50:05:54:78:4a:4e:
         00:22:00:9c:de:70:d5:ad:4e:fd:bf:2d:b3:a5:17:5e:aa:7d:
         72:74:84:91:94:8e:6e:67:5b:3e:b5:29:f5:42:51:b3:e1:37:
         35:7d:d6:36:33:96:e6:c7:94:e0:2b:05:02:3d:5f:4b:c0:21:
         4c:50:d4:12:10:d3:1c:a6:42:78:a7:20:60:e5:87:7e:75:57:
         33:c1:10:5c:d4:3d:98:cb:ba:bc:ab:af:9d:1b:6a:34:fb:da:
         13:b7:61:48:35:5f:b9:73:84:99:6b:7e:d1:e6:39:30:29:7b:
         74:5d:c7:8c:12:0e:ee:ab:d0:7a:58:74:b3:3a:7f:08:3e:43:
         1e:c4:d2:f8:b0:db:78:75:cc:c6:bb:1a:a0:c5:8d:e2:69:a3:
         c3:1d:e5:68:2b:37:65:2f:60:e2:89:4f:e2:7d:ca:74:49:df:
         75:0e:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:22 2025 by rpki-client