Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
File:                     323830343a383665383a3a2f33322d313238203d3e20323732363734.roa (raw, json)
Hash identifier:          da6MzxLwOScB6Z/r2uOLB2vU4keDm/PQNp3NlnxITB8=
Subject key identifier:   A1:B2:53:0C:A1:4A:F2:69:BE:90:D7:9D:A5:60:C3:25:35:C1:FC:FA
Certificate issuer:       /CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
Certificate serial:       63D1D4CA0812D7CC27831835AD905A337BD67DB5
Authority key identifier: BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa
Signing time:             Tue 28 Jan 2025 18:24:04 +0000
ROA not before:           Tue 28 Jan 2025 18:19:04 +0000
ROA not after:            Tue 27 Jan 2026 18:24:04 +0000
asID:                     272674
IP address blocks:        2804:86e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl
                          rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d1:d4:ca:08:12:d7:cc:27:83:18:35:ad:90:5a:33:7b:d6:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFD07829824ED2E39C17D185BBAD3FFD99DE265
        Validity
            Not Before: Jan 28 18:19:04 2025 GMT
            Not After : Jan 27 18:24:04 2026 GMT
        Subject: CN=A1B2530CA14AF269BE90D79DA560C32535C1FCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:c2:d3:62:14:97:c1:e0:50:e3:cc:88:ca:
                    f6:56:bd:94:22:c3:a8:fd:fa:80:70:84:2b:67:3f:
                    b9:c8:ce:ec:8d:df:83:d2:4c:51:08:78:f9:cf:a0:
                    ef:d7:67:0e:51:6f:c7:0c:04:d8:36:6d:86:37:ae:
                    6e:78:a7:4e:be:4c:27:03:df:d8:41:76:ee:4b:3e:
                    6e:54:6b:4c:ae:51:88:63:ff:51:fe:b8:fb:80:1f:
                    11:84:df:64:42:74:98:b2:2a:6c:93:26:97:38:fd:
                    87:fc:60:98:f2:b0:1c:37:3b:a9:6b:d5:95:89:ec:
                    b4:2d:a4:e1:27:12:83:1e:ac:d4:c1:fb:21:4f:64:
                    89:24:42:b5:46:a7:95:8f:22:bf:dc:a9:36:57:fb:
                    a0:a2:6f:8a:07:c6:f6:bd:a1:f4:93:d7:36:8f:f1:
                    86:d5:4b:ef:7d:c7:92:03:4e:d0:71:36:dc:a0:4e:
                    7b:ca:b7:3a:24:7a:2e:24:67:0f:26:f5:77:58:90:
                    e6:50:a7:ac:a2:49:10:b0:ed:70:b6:0d:1c:44:a2:
                    cf:63:86:7c:47:81:3c:74:57:ea:59:a6:4b:e6:d4:
                    01:ce:87:b9:b8:10:83:b5:e2:86:08:1f:c4:3e:b6:
                    cb:05:d3:bc:89:5e:3f:ca:20:fb:5f:51:7c:e1:fd:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:53:0C:A1:4A:F2:69:BE:90:D7:9D:A5:60:C3:25:35:C1:FC:FA
            X509v3 Authority Key Identifier:
                keyid:BB:FD:07:82:98:24:ED:2E:39:C1:7D:18:5B:BA:D3:FF:D9:9D:E2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBFD07829824ED2E39C17D185BBAD3FFD99DE265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/0/323830343a383665383a3a2f33322d313238203d3e20323732363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:93:ae:92:51:58:7e:0d:ff:38:67:2b:08:b4:45:a5:98:
         7c:5c:8a:0a:3e:fa:f3:7f:ac:c5:0c:d0:cc:1e:b8:6c:64:43:
         d5:c9:07:b9:48:3a:84:cb:15:38:55:f2:5e:de:49:1c:85:f6:
         27:ec:65:8a:dd:2b:80:62:eb:9f:a9:56:52:64:05:55:c2:39:
         08:69:e8:2e:c7:45:9a:22:fe:a6:32:14:83:ec:77:fd:87:35:
         51:7b:0f:d1:29:ae:ac:a6:c4:28:f1:33:2e:6f:2f:d1:48:e7:
         db:0a:26:e8:39:07:33:9e:55:01:a1:84:fe:02:c2:34:5a:64:
         29:05:a7:48:ed:57:2c:79:b1:aa:9f:cf:fb:c1:36:80:00:87:
         17:d9:24:8d:ff:5b:e5:02:a6:08:9b:6d:91:4c:0d:27:70:2f:
         77:39:ea:60:51:cb:96:94:fd:54:44:94:91:09:d0:43:95:f8:
         ae:98:a6:9d:cf:75:50:c5:90:6f:dd:62:b4:20:32:00:7b:04:
         25:0b:11:75:e7:ff:c1:8c:3c:c8:4c:e3:1f:4e:fe:f4:ff:66:
         76:47:bf:d0:a0:b8:d2:e2:36:3d:78:f3:02:fd:f4:18:32:63:
         02:b4:66:95:97:a3:ab:0a:a4:54:7e:a5:4e:2a:91:fa:b7:3f:
         0e:d5:01:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:51:40 2025 by rpki-client