Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa (raw, json)
Hash identifier:          P1soIFVBQlu1jLRrI90iFlqkcU79tYQrAbxTmcpfsLU=
Subject key identifier:   F2:CE:E4:EA:7D:4B:9B:5F:9B:B9:81:10:62:6F:40:75:D8:EC:C3:C5
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       27FFFE8524689A3A54E99528A3D258CAD976B7C3
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:58 +0000
ROA not before:           Thu 06 Mar 2025 03:44:58 +0000
ROA not after:            Thu 05 Mar 2026 03:49:58 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:fe:85:24:68:9a:3a:54:e9:95:28:a3:d2:58:ca:d9:76:b7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:58 2025 GMT
            Not After : Mar  5 03:49:58 2026 GMT
        Subject: CN=F2CEE4EA7D4B9B5F9BB98110626F4075D8ECC3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:08:61:f8:9b:57:0b:46:ea:7f:54:b8:dc:
                    3a:4a:34:3c:ab:4b:40:78:be:6f:0d:31:8f:4e:5c:
                    79:d7:c4:d1:be:c9:35:52:e4:39:32:3c:ac:eb:7d:
                    13:ac:0d:69:7e:e6:5d:ae:1e:a8:bb:74:ef:3b:08:
                    3d:20:de:6a:fc:40:a1:df:71:82:fc:5f:fc:60:b5:
                    40:7b:b8:fb:cf:af:fd:20:ee:8f:fd:2c:2b:d0:aa:
                    dd:75:49:98:f3:23:79:16:e2:ce:92:98:d6:54:08:
                    45:04:bb:e4:94:f1:6c:7a:b1:61:32:9d:79:be:55:
                    eb:20:d0:c7:e4:25:19:d4:7e:d5:08:f9:1a:74:4d:
                    20:71:1c:cd:c0:e7:64:4e:16:21:43:70:31:73:a6:
                    6b:1b:6a:51:8f:3a:82:53:42:82:87:bb:9c:9d:1b:
                    c0:9c:de:0e:66:9a:22:37:94:c3:1c:39:ab:3b:35:
                    cb:4f:22:d1:a6:f0:63:f2:03:66:69:75:d4:3d:cb:
                    8c:91:c2:a5:0c:99:ca:7b:b6:35:b3:80:56:33:b4:
                    ea:25:80:f8:97:1d:72:57:13:9a:03:b5:b2:de:5b:
                    44:81:26:72:9b:4a:73:4b:a3:9e:c9:ee:48:16:78:
                    79:05:ed:da:3a:c2:e4:2c:b5:e2:d6:6a:0f:10:60:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:E4:EA:7D:4B:9B:5F:9B:B9:81:10:62:6F:40:75:D8:EC:C3:C5
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33342d3334203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:fd:f9:e6:98:4c:5b:66:33:8f:10:db:ea:60:9a:88:b1:
         b1:95:b9:7f:20:df:cb:1e:6a:70:30:dc:2a:4f:fd:02:b8:aa:
         54:d8:36:8c:d5:7f:88:f6:e1:80:a6:ec:b2:87:ed:e0:d4:79:
         b6:99:85:a1:b0:d6:10:2d:ef:2b:2e:2a:85:76:69:89:82:83:
         44:96:6a:8f:b9:78:87:f7:f0:e8:11:2c:3e:5d:50:e4:ed:72:
         26:3c:b3:ce:44:2c:0a:f9:90:60:89:c1:ac:31:3e:ba:52:6c:
         8e:ae:ea:03:cc:44:d1:11:79:c5:bd:b7:bf:0f:59:93:0b:fa:
         09:54:9f:05:6a:86:21:10:9c:25:8f:ed:bb:44:c3:da:62:58:
         bf:ec:e0:48:d8:04:16:de:ec:e4:53:9e:6b:c9:1b:65:29:05:
         82:f6:cc:65:32:9d:44:c2:54:bf:8d:73:19:87:cb:31:af:3a:
         f1:18:ce:01:a7:85:cc:22:4b:de:1f:ef:f8:cb:ce:0c:61:cb:
         e6:97:68:9b:4a:42:03:94:ee:26:0d:e6:54:6a:98:81:42:cb:
         6c:59:28:79:92:40:97:98:59:15:f8:4d:b0:09:36:7c:49:73:
         21:a6:11:6b:e0:74:a4:be:96:af:e7:59:5f:ae:a4:b5:8d:97:
         83:c0:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:52 2025 by rpki-client