Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a343030303a3a2f33342d3334203d3e20323634313335.roa
File:                     323830343a323266383a343030303a3a2f33342d3334203d3e20323634313335.roa (raw, json)
Hash identifier:          F70WmbUhVgqoLwHqeg/NIVhcStyO4j6GGMEr4DSvnkA=
Subject key identifier:   99:A2:C8:D9:DB:5F:11:70:65:A6:E1:6A:52:45:ED:91:BD:52:7F:A5
Certificate issuer:       /CN=8810214D39049DAE584E4DE0958ABBECE36C9558
Certificate serial:       7CE7A5522FBAC2ECF50782248B3E9D7E89725B63
Authority key identifier: 88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a343030303a3a2f33342d3334203d3e20323634313335.roa
Signing time:             Fri 21 Feb 2025 23:52:40 +0000
ROA not before:           Fri 21 Feb 2025 23:47:40 +0000
ROA not after:            Fri 20 Feb 2026 23:52:40 +0000
asID:                     264135
IP address blocks:        2804:22f8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl
                          rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e7:a5:52:2f:ba:c2:ec:f5:07:82:24:8b:3e:9d:7e:89:72:5b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810214D39049DAE584E4DE0958ABBECE36C9558
        Validity
            Not Before: Feb 21 23:47:40 2025 GMT
            Not After : Feb 20 23:52:40 2026 GMT
        Subject: CN=99A2C8D9DB5F117065A6E16A5245ED91BD527FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:b9:98:4d:55:85:55:af:13:6b:bc:d1:da:
                    0a:11:3b:08:e9:ec:cf:e7:53:5d:11:f8:e5:a2:ad:
                    20:03:c1:b6:c8:b5:60:3d:66:e6:cc:11:46:1f:60:
                    9f:4b:ad:10:45:45:de:cb:2d:e6:54:93:52:90:c7:
                    b5:d9:0a:85:2d:5b:bb:fc:ce:53:a7:2c:2d:c4:48:
                    51:7f:85:9d:b0:42:7a:63:e9:1f:ff:29:df:5e:85:
                    d3:49:11:ca:84:48:e0:04:73:d5:c3:fa:9a:24:9a:
                    0c:a2:a6:ff:2b:89:28:21:db:e1:72:88:93:3c:26:
                    8d:a7:74:85:f9:e4:da:b6:01:5e:40:e0:1a:51:08:
                    d9:c5:c9:2a:26:3a:49:02:e5:80:1a:96:54:0c:f8:
                    d6:4a:c6:fe:2b:a0:0b:c7:96:e1:4f:6f:da:69:da:
                    48:05:8d:41:7d:e0:27:04:4f:cb:cf:38:72:b7:e1:
                    a5:93:20:d2:9a:9b:b1:35:6b:a2:cd:ea:96:19:93:
                    9d:da:c6:48:23:89:35:9c:2f:c0:4f:97:6f:ae:49:
                    30:fb:53:c4:2e:7d:99:ce:8a:51:7d:ca:d4:d4:fa:
                    03:62:b3:0a:d6:14:3d:9d:92:b1:8f:2e:40:e4:1d:
                    63:11:ac:60:55:f6:8d:3f:b8:2e:62:a5:fd:58:87:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:C8:D9:DB:5F:11:70:65:A6:E1:6A:52:45:ED:91:BD:52:7F:A5
            X509v3 Authority Key Identifier:
                keyid:88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a343030303a3a2f33342d3334203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:3c:a8:df:29:2e:84:8d:01:75:59:c8:30:1c:31:32:c6:
         1a:f8:7d:c0:f3:5c:07:d0:b2:4a:a3:4a:9c:44:99:f5:3d:8c:
         cf:3f:3e:3c:d2:5f:22:eb:bd:29:d3:a1:b2:e9:f1:28:14:6d:
         74:08:d8:08:fb:85:ce:1b:06:7c:09:13:2a:1c:95:ab:f1:84:
         0c:a3:69:40:51:88:2f:98:02:c7:80:1f:23:ac:06:7c:8f:4b:
         e6:f7:64:3e:d7:67:86:bd:3f:4f:0e:60:78:3c:2e:56:25:d9:
         f7:69:55:0f:15:59:f9:7a:de:ef:64:fb:68:2f:42:2a:9d:d4:
         f9:18:d8:2f:b1:e2:61:0b:2c:c0:09:68:15:c7:91:22:51:20:
         10:94:92:dc:6a:7b:3f:7b:58:0c:74:9f:d1:78:f0:7a:d4:b1:
         3c:e3:8c:cd:18:0c:39:10:ec:c0:ae:0c:4d:2e:5b:ea:9a:25:
         02:68:33:5a:d6:59:6d:c0:2a:b7:97:3a:f1:23:1d:c7:da:d1:
         db:58:20:a6:ec:6c:e4:9d:fa:7c:84:44:d4:71:55:52:62:fa:
         b0:5b:36:80:5b:a6:2a:d5:4f:31:05:16:bf:73:56:13:3d:60:
         36:96:8c:d1:cf:dd:46:3b:b7:40:64:ca:95:db:d4:44:53:97:
         42:cc:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:20:55 2025 by rpki-client