Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          ZDsGq+gb6ot9Ru3QuzXYlEs3Imomli0bcPUjLZoRAvA=
Subject key identifier:   E3:3B:C8:1C:DD:BD:DD:A4:FB:B3:3F:FF:CE:C5:C2:A0:10:99:16:E7
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       447E1E82504570D9BCC91D60FECC5A42824CB568
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 12:58:55 +0000
ROA not before:           Thu 05 Dec 2024 12:53:55 +0000
ROA not after:            Thu 04 Dec 2025 12:58:55 +0000
asID:                     53047
IP address blocks:        2804:6f0:c100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7e:1e:82:50:45:70:d9:bc:c9:1d:60:fe:cc:5a:42:82:4c:b5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:53:55 2024 GMT
            Not After : Dec  4 12:58:55 2025 GMT
        Subject: CN=E33BC81CDDBDDDA4FBB33FFFCEC5C2A0109916E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:1f:1b:2a:dd:b9:f1:79:ad:10:c0:b5:0c:
                    38:80:50:bd:95:8d:24:02:52:8f:3e:7c:4a:9a:0b:
                    c3:23:1f:9f:db:b6:95:42:ba:82:a0:3e:fd:c7:23:
                    e2:83:a8:4b:ec:a7:f3:0c:c1:6b:1f:90:11:2e:cf:
                    5d:8b:37:46:63:65:39:4a:f3:9d:a4:53:f1:4b:44:
                    6f:bb:8d:14:7e:04:44:91:a5:e8:43:56:7a:b9:72:
                    24:50:16:f3:17:b3:5f:dd:d6:32:df:62:8e:d9:98:
                    5b:79:fb:b8:5e:b1:e1:1b:cb:e1:4d:b2:79:e9:4a:
                    d8:9a:0a:c5:8f:ca:c1:7f:33:56:a9:eb:4b:4e:4a:
                    fb:6b:cc:16:48:cf:4a:e6:32:fa:62:99:e3:a4:d0:
                    47:1a:d7:7d:cf:fe:0a:ed:7a:21:01:2b:ec:8f:9a:
                    a3:86:89:a0:40:80:4a:91:6e:e1:33:b4:c6:14:88:
                    13:16:0e:cb:bc:12:c5:38:c1:f2:2e:62:f4:16:53:
                    ce:26:aa:47:b5:d6:20:f6:a0:1b:dc:5b:57:51:f9:
                    be:9d:c8:95:1f:cd:6f:1d:be:68:c7:80:72:1e:11:
                    86:b3:a1:c0:d1:e5:8e:23:07:6e:1c:0a:64:50:4e:
                    b0:19:ad:b9:38:8f:53:1b:10:9b:02:0e:04:b0:a2:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3B:C8:1C:DD:BD:DD:A4:FB:B3:3F:FF:CE:C5:C2:A0:10:99:16:E7
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633130303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:1d:eb:ad:5b:26:7f:56:e1:95:a2:80:40:d8:6f:76:08:19:
         79:66:fe:10:ae:42:5f:e1:8e:08:63:c6:90:47:0c:be:43:a5:
         9a:3f:bc:67:98:c0:dd:28:23:39:58:58:c6:06:93:90:79:f1:
         8f:c8:27:83:b1:4d:e5:43:1a:5f:cf:04:68:2d:7f:d0:47:ef:
         dc:5f:d8:41:c8:14:44:de:61:e1:eb:a7:b0:4a:76:f2:40:98:
         c3:dd:21:5d:ec:54:66:10:8c:72:c8:30:00:e9:06:66:8d:df:
         4b:58:7f:9e:04:4d:88:05:82:cc:68:4b:f4:a6:46:df:64:6f:
         ab:38:ce:ef:ce:0c:8d:72:1e:a6:f7:d6:57:58:cd:ba:b7:c9:
         8e:3b:9f:d9:1d:e5:83:5c:ff:d1:b8:db:30:3f:df:7a:c6:be:
         8b:74:f1:0e:9c:9c:99:2f:e0:c4:71:d6:e1:e3:73:88:ff:78:
         6d:4e:3f:94:1c:14:61:8f:67:89:14:35:e2:c4:2d:57:76:9e:
         1d:4a:81:32:ad:3c:c9:01:45:b7:9e:b5:62:49:95:f4:54:a7:
         6d:e2:6e:f8:93:de:0c:1d:ab:80:8b:bb:c7:9a:45:15:4e:e9:
         91:a1:45:28:66:18:2c:40:96:83:3b:39:0f:7e:75:66:55:01:
         2a:05:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:53 2025 by rpki-client