Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa
File:                     323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (raw, json)
Hash identifier:          XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=
Subject key identifier:   DF:98:DF:95:97:96:19:80:59:1A:FD:C0:21:6D:CA:8C:BD:09:1E:FA
Certificate issuer:       /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial:       09E44DB2DD0924EC378825A4A1DD836C5DA0CF25
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa
Signing time:             Thu 19 Dec 2024 19:49:10 +0000
ROA not before:           Thu 19 Dec 2024 19:44:10 +0000
ROA not after:            Thu 18 Dec 2025 19:49:10 +0000
asID:                     265928
IP address blocks:        2804:4004::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl
                          rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 22:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e4:4d:b2:dd:09:24:ec:37:88:25:a4:a1:dd:83:6c:5d:a0:cf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
        Validity
            Not Before: Dec 19 19:44:10 2024 GMT
            Not After : Dec 18 19:49:10 2025 GMT
        Subject: CN=DF98DF9597961980591AFDC0216DCA8CBD091EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:4b:58:e9:63:94:a3:71:58:20:f4:5a:16:
                    2d:18:ef:d3:06:88:d1:15:e6:56:01:a2:7e:3f:08:
                    b8:54:8c:6e:45:61:b1:77:36:1a:59:23:b4:ec:b5:
                    d9:79:9b:30:d3:b5:c8:bc:22:90:4c:f6:4e:ae:1c:
                    dd:07:6c:9a:88:bf:62:21:8c:87:91:17:53:28:75:
                    5e:64:8f:a4:9f:1d:0c:e9:ec:c7:12:0e:cc:ba:0d:
                    90:91:16:53:b3:05:e0:c1:70:0a:b1:2d:73:4e:1d:
                    ae:c3:52:04:5a:6a:ca:bc:3e:0d:31:7f:7c:87:d1:
                    dd:07:61:79:d1:7c:73:8d:28:3a:9a:3c:2f:bf:f7:
                    15:88:d6:51:39:85:07:4c:da:9c:bb:3d:60:17:e4:
                    65:ca:f9:dd:5d:7d:74:3e:c4:14:cf:54:bb:32:b0:
                    83:8c:24:55:f9:5a:b3:3c:10:ed:56:0f:3e:33:d7:
                    df:68:01:52:9a:b1:95:d1:91:ae:cf:78:41:d5:dd:
                    30:bf:95:2e:a7:8d:5a:63:4d:02:13:a8:7e:47:be:
                    7c:d3:14:1b:d1:19:ea:a6:2e:67:14:cc:ff:d9:2a:
                    72:bf:e5:f5:e0:7c:16:07:71:2e:74:c5:82:24:fe:
                    2e:20:16:8c:bb:d7:f0:44:88:23:f9:13:43:4d:f7:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:DF:95:97:96:19:80:59:1A:FD:C0:21:6D:CA:8C:BD:09:1E:FA
            X509v3 Authority Key Identifier:
                keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/323830343a343030343a3a2f33322d3438203d3e20323635393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4004::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:9b:3a:e4:5f:3c:cb:a7:d6:33:27:33:de:28:e2:5b:a6:95:
         1c:5e:5b:7a:30:44:77:a7:f1:e2:6b:54:2b:41:98:99:19:08:
         3c:76:53:5b:37:9f:e3:c1:58:f3:42:73:4e:1e:e9:ed:c7:d9:
         83:0a:38:5c:31:ef:2c:ed:1d:2b:1a:49:87:72:84:1e:14:83:
         cb:a3:0c:6a:64:1e:a1:b7:5a:b8:8e:b0:d5:24:03:3f:5a:56:
         ae:78:ed:c6:bc:f7:7c:6c:0d:68:58:b5:78:8a:9a:db:df:27:
         a4:53:67:b6:ed:48:e8:12:7e:94:9b:ac:9a:d7:75:7b:b3:e2:
         8d:a6:08:14:eb:fa:3a:95:9c:4e:0c:ee:f3:dd:ce:55:88:92:
         e6:a1:22:b5:0b:2a:1e:1c:46:7d:2f:6c:6b:fa:8c:18:d3:8f:
         21:23:84:e6:0c:3f:15:39:46:fd:35:2a:39:f5:1e:94:0d:8c:
         72:8a:fa:a4:88:17:80:dd:de:22:3d:2c:b8:89:fa:09:71:dc:
         9b:a6:d1:23:87:9f:2c:2d:3f:45:3a:1e:bc:da:7c:17:83:37:
         0c:86:f8:60:29:3b:99:7b:f4:d5:ab:9d:fb:57:6c:fc:40:e6:
         84:d0:f2:e5:56:1b:f3:a9:d0:67:52:8e:3c:22:64:8d:09:dc:
         8d:e7:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:29:02 2025 by rpki-client