Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa
File:                     323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (raw, json)
Hash identifier:          M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=
Subject key identifier:   D7:92:63:85:DC:3B:1B:0F:16:3A:D2:CC:7B:D9:D2:1B:7D:44:A8:A9
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       223819FD5AAFDB9C0916AA1924CA0969C7B3C72A
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa
Signing time:             Wed 25 Dec 2024 09:58:29 +0000
ROA not before:           Wed 25 Dec 2024 09:53:29 +0000
ROA not after:            Wed 24 Dec 2025 09:58:29 +0000
asID:                     268878
IP address blocks:        2804:5bf0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:19:fd:5a:af:db:9c:09:16:aa:19:24:ca:09:69:c7:b3:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Dec 25 09:53:29 2024 GMT
            Not After : Dec 24 09:58:29 2025 GMT
        Subject: CN=D7926385DC3B1B0F163AD2CC7BD9D21B7D44A8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:95:4e:d4:34:a0:cb:f6:d4:be:36:9d:d8:
                    ef:13:6d:be:fc:77:54:b1:3e:ad:e2:61:84:9a:f8:
                    16:0c:cf:eb:e2:0b:97:c9:5d:7c:b9:f6:d9:5d:2a:
                    d9:28:a9:7a:1c:90:04:32:58:58:96:78:fc:49:1c:
                    c9:2f:b2:e3:af:47:2f:ee:e2:be:05:ea:b6:eb:58:
                    08:b2:7e:42:b7:f8:6a:93:2a:f7:f6:2c:6e:c4:cc:
                    8d:e3:90:7a:74:17:8f:9f:6b:7d:89:88:8a:25:4f:
                    f6:7f:9b:d5:9e:b9:2a:72:04:ae:3d:3a:b6:06:4f:
                    9e:c4:ca:72:4f:e9:64:04:d6:6d:78:9c:9b:83:09:
                    cc:d7:32:a5:fb:c2:b9:16:d9:77:02:6d:da:82:b4:
                    b4:65:dc:32:b0:48:12:c5:a2:3d:82:cd:7b:6f:19:
                    c7:9b:84:c8:f4:24:00:0a:c6:bb:61:c2:dd:c9:63:
                    6f:a1:ff:b4:e1:3c:1f:a1:aa:a2:b1:42:cc:b0:2b:
                    18:7a:4f:77:13:2c:3b:ed:80:a8:bb:cd:c3:08:96:
                    fd:d8:5d:14:ac:8e:8a:6b:6f:fb:a5:1c:42:88:1a:
                    2e:c8:42:30:ae:6d:9c:e7:4f:a4:ae:b6:cc:56:72:
                    f3:fa:63:38:c2:13:f3:f7:7a:a5:b9:42:93:5c:44:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:92:63:85:DC:3B:1B:0F:16:3A:D2:CC:7B:D9:D2:1B:7D:44:A8:A9
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a3a2f33322d3332203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:62:47:7e:c7:3c:d9:35:a2:6c:1f:20:1c:15:d6:fc:91:60:
         23:8d:a0:ae:d8:17:25:7f:c5:ac:64:65:2d:81:ce:cc:5a:53:
         19:08:34:2d:fe:7f:38:2b:8b:8b:1b:d5:b0:0f:af:60:4a:07:
         2b:72:5a:bd:44:e9:70:13:4f:9a:0c:5f:7f:16:6d:65:4b:3a:
         e6:1f:0a:16:0c:25:f7:09:d0:6a:e8:64:a4:b4:2d:10:db:c0:
         d6:01:30:c5:05:e7:9a:f5:1e:91:e2:a8:03:cd:94:56:7a:50:
         c9:27:48:5b:f8:92:2e:e4:46:1c:ba:0d:05:c7:c4:c3:43:e1:
         16:5d:6a:99:87:cd:6c:eb:5e:69:e9:fd:7d:5e:04:6a:b3:f9:
         ee:04:8f:9f:2e:ff:0b:8d:ae:9b:d6:8e:82:44:67:35:9c:09:
         90:bf:29:a6:b2:09:89:1a:57:bf:5d:be:0a:13:5b:10:59:3b:
         32:57:10:54:87:e3:3e:03:47:14:2d:80:32:aa:eb:52:5e:49:
         f4:09:4c:86:a1:35:8e:bf:76:81:66:b5:9c:17:2a:3a:50:8c:
         6e:d5:b4:a6:a3:29:f3:ed:21:cd:8b:96:b2:ed:20:06:29:be:
         71:b0:3c:31:7e:47:63:7c:af:da:3f:b7:02:19:cc:38:6a:5d:
         f1:19:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:09 2025 by rpki-client