Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/323830343a323237303a3a2f33322d3332203d3e20323634313030.roa
File:                     323830343a323237303a3a2f33322d3332203d3e20323634313030.roa (raw, json)
Hash identifier:          0CLWAX9huEA2WPdqaXz95fWtPWtMAID1dylNN8eDNTo=
Subject key identifier:   BB:16:5C:E2:9E:11:82:2B:8F:B6:07:26:1B:F1:2E:79:39:61:69:B5
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       1D8937B22A1593F7247EE17F0BB4D12A14AADB8F
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/323830343a323237303a3a2f33322d3332203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:06:32 +0000
ROA not before:           Mon 02 Dec 2024 12:01:32 +0000
ROA not after:            Mon 01 Dec 2025 12:06:32 +0000
asID:                     264100
IP address blocks:        2804:2270::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:89:37:b2:2a:15:93:f7:24:7e:e1:7f:0b:b4:d1:2a:14:aa:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:01:32 2024 GMT
            Not After : Dec  1 12:06:32 2025 GMT
        Subject: CN=BB165CE29E11822B8FB607261BF12E79396169B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:36:b8:2d:f8:6f:c7:46:e3:43:d0:39:0a:
                    51:64:19:26:7c:80:2c:e4:d4:52:32:fa:23:3b:dc:
                    0c:cd:cd:03:db:60:ec:ed:16:d7:e4:63:33:f4:66:
                    94:e2:37:d5:b5:23:97:3f:ba:33:f2:54:a4:e4:45:
                    b7:b6:47:90:e6:c8:61:83:e9:f7:54:22:e2:b9:5f:
                    1b:b0:48:31:f5:7d:57:a8:68:78:8f:4c:7e:87:30:
                    87:95:3d:92:58:03:01:f0:92:19:15:da:53:4b:62:
                    1d:7b:59:1b:26:24:5c:ee:23:07:b1:e2:64:9d:2f:
                    dd:d5:6c:82:d7:51:7b:95:f3:2a:d4:53:8e:a5:ae:
                    47:cf:12:ef:92:71:8b:0a:8b:5d:db:bb:fb:6a:bc:
                    ee:d8:63:7d:a0:a9:39:48:9e:b5:1c:29:59:2e:81:
                    0b:f5:f9:15:50:c7:30:88:9e:71:56:2d:c9:76:29:
                    0f:ce:1c:6f:04:96:cc:45:2a:95:3a:1f:ac:71:7d:
                    ae:c9:a0:d1:40:25:b5:93:4b:c1:91:4f:2f:f2:3f:
                    6b:5c:26:99:d5:e3:9c:c2:92:22:a4:3e:eb:fe:30:
                    16:b7:58:4d:ac:c5:d7:4c:50:27:a3:28:33:c2:f7:
                    2b:28:96:f1:a4:f1:4e:ce:a1:b2:6d:5a:f3:9b:15:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:16:5C:E2:9E:11:82:2B:8F:B6:07:26:1B:F1:2E:79:39:61:69:B5
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/323830343a323237303a3a2f33322d3332203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2270::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:67:25:35:1e:2f:44:b2:7e:be:b9:17:4e:98:86:85:8d:
         16:4b:48:a3:65:77:a1:e9:1c:98:d4:55:12:e1:a7:f3:11:22:
         85:20:59:01:7c:de:67:70:22:dd:a3:8e:a2:90:79:1f:db:e4:
         40:55:b3:e3:df:ce:cd:45:bf:15:f0:7e:db:a6:13:46:a0:7c:
         9b:5e:42:23:e2:53:da:40:0f:9c:3b:b1:57:02:7f:a3:b0:e4:
         49:e8:f9:0d:dc:ab:8b:44:4e:7c:ac:c0:f8:bd:ec:04:9c:56:
         eb:6c:8b:35:71:4a:b3:bf:28:c4:01:f1:97:2a:5b:e6:c0:eb:
         7c:9f:12:72:ea:57:3d:e9:d1:ed:8e:4f:dc:f0:7a:30:35:91:
         89:ac:82:53:e5:04:e1:6f:2b:31:0c:30:1f:9a:79:db:0e:74:
         a5:0a:6c:80:f5:d7:8c:cf:af:5e:49:d6:b3:03:f3:3c:b3:c2:
         1d:1a:45:54:ef:ce:ca:eb:56:91:5a:f1:7d:80:18:e3:84:24:
         c3:83:96:b6:e7:de:2e:88:93:37:e8:69:6d:94:86:ce:e6:8d:
         1c:87:71:ac:6b:33:67:4e:21:51:0d:51:7a:f9:c5:98:a3:d5:
         28:7d:85:01:7a:e1:5b:c0:6e:db:8b:09:a5:0f:c3:5b:ed:a5:
         a4:ac:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:54 2025 by rpki-client