Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa
File:                     323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (raw, json)
Hash identifier:          15axzlvaPxlpvdEmdsItvuAH+wRillPEZD906FjgXUs=
Subject key identifier:   B6:59:F6:68:F2:E3:B6:97:D7:0B:84:21:AD:2A:08:13:DA:30:1C:1F
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       60F89FE0EB99B40EB87A3A904FD22497CE376AB3
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa
Signing time:             Thu 06 Mar 2025 18:52:51 +0000
ROA not before:           Thu 06 Mar 2025 18:47:51 +0000
ROA not after:            Thu 05 Mar 2026 18:52:51 +0000
asID:                     271179
IP address blocks:        2804:7774::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:9f:e0:eb:99:b4:0e:b8:7a:3a:90:4f:d2:24:97:ce:37:6a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: Mar  6 18:47:51 2025 GMT
            Not After : Mar  5 18:52:51 2026 GMT
        Subject: CN=B659F668F2E3B697D70B8421AD2A0813DA301C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:cf:4a:fc:5e:a2:5b:76:13:e3:34:96:cb:
                    ff:5f:75:d9:b3:46:48:99:57:66:ce:e5:d6:28:ea:
                    6f:86:f9:d7:bc:a3:60:8d:20:5a:9f:82:8a:63:90:
                    61:ff:3a:24:67:53:5c:65:a3:5f:b5:d7:39:5c:a0:
                    6f:ec:17:db:89:d5:6a:df:e9:4f:72:09:c1:c3:ab:
                    c6:eb:a8:81:fb:d3:87:4d:68:61:96:43:f9:9a:cc:
                    59:fe:8d:5e:45:49:ab:14:a1:d2:97:2e:3f:77:8a:
                    c7:c8:00:8b:ea:60:67:4b:c2:4b:38:00:88:c0:0f:
                    5d:0a:a9:04:d3:c3:06:6a:28:80:62:80:34:f9:13:
                    06:9b:d3:bd:e8:14:3c:8c:a6:fa:18:b1:30:5e:42:
                    82:08:82:9d:6a:53:5d:f3:09:a5:d0:57:bd:d4:83:
                    72:bc:18:85:ac:d4:ab:ae:00:04:30:d6:a6:a9:5c:
                    29:85:cd:a9:eb:bc:cd:8a:f1:07:3c:4c:be:60:fa:
                    4d:33:63:8a:91:39:32:41:de:40:be:be:0c:e8:34:
                    1a:13:90:72:40:44:49:21:59:c6:45:da:13:7f:d2:
                    8c:d3:03:13:54:98:c3:21:fb:9c:e9:49:ab:23:c9:
                    a3:8c:05:81:da:d4:7a:6f:69:f3:54:32:2a:09:2a:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:59:F6:68:F2:E3:B6:97:D7:0B:84:21:AD:2A:08:13:DA:30:1C:1F
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/323830343a373737343a3a2f33322d3332203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7774::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:68:a3:8f:b1:9a:c3:1a:27:47:d4:95:48:61:a4:6d:99:40:
         80:f8:54:6a:0f:26:7d:66:90:eb:c5:4d:4e:1c:df:10:2d:40:
         87:80:59:a8:3a:c7:fa:31:07:34:b8:7b:69:e1:a3:06:ee:1b:
         43:70:cd:d7:9e:31:83:47:d3:0d:66:d2:23:36:7a:b8:ed:26:
         d5:d0:38:76:1d:11:dd:87:3a:c1:59:8a:52:0e:80:9a:46:6e:
         a2:00:33:c6:69:cc:f2:b0:99:55:12:f6:1e:6b:8a:c1:47:54:
         3b:2a:33:34:1d:d9:8f:02:6d:05:84:e4:81:3e:5c:46:f7:76:
         2c:33:15:47:98:76:05:e9:ae:e7:a2:fc:4f:4f:5b:cc:7b:23:
         a6:e7:ef:5f:10:b0:c9:ac:72:8a:1d:95:f3:b9:9b:19:0f:9c:
         c4:8f:87:e1:4d:a6:03:3d:9b:9b:9e:10:54:93:46:1d:db:7e:
         13:3c:f6:d7:81:76:28:49:dc:c0:ec:ab:6d:64:79:71:f7:01:
         04:e9:0c:3c:58:fe:3d:0b:bc:5b:d8:1e:85:39:97:5e:53:86:
         ec:17:7d:2f:8a:81:dc:76:b9:4a:48:e5:74:ce:83:51:1f:9e:
         39:00:52:d8:ad:12:cc:59:02:24:da:c1:3c:cb:37:48:30:a4:
         bc:29:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:13 2025 by rpki-client