Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa
File:                     323830343a316264383a3a2f33322d3438203d3e203238323234.roa (raw, json)
Hash identifier:          AsiNytgBxrqlpOM7yeWOspnZKE5kIyA6esFBCGZ/O7g=
Subject key identifier:   86:72:6F:15:12:74:20:6D:98:FD:43:62:E0:4E:08:C1:99:1F:8D:12
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       083DA1BC375062E6EBABF46AC65F9F346DDD452D
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa
Signing time:             Fri 08 Nov 2024 18:36:39 +0000
ROA not before:           Fri 08 Nov 2024 18:31:39 +0000
ROA not after:            Fri 07 Nov 2025 18:36:39 +0000
asID:                     28224
IP address blocks:        2804:1bd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 20:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3d:a1:bc:37:50:62:e6:eb:ab:f4:6a:c6:5f:9f:34:6d:dd:45:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:31:39 2024 GMT
            Not After : Nov  7 18:36:39 2025 GMT
        Subject: CN=86726F151274206D98FD4362E04E08C1991F8D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:fc:30:ea:e4:40:25:1c:a8:27:a7:2e:c2:
                    83:32:06:47:7f:4b:0f:e3:a2:41:f6:e3:69:7c:b3:
                    64:87:e7:03:0f:36:b5:47:d6:d5:62:ec:ef:fb:c5:
                    b2:c0:c3:c7:77:1f:76:19:59:28:b2:61:7e:af:5a:
                    7a:7e:6d:41:51:71:0c:32:89:ec:4d:71:a1:3a:be:
                    db:5d:5b:2d:4f:57:7d:d7:c5:04:db:df:45:9f:d7:
                    3e:be:76:97:b3:c8:5c:0f:db:ba:5a:d8:7b:46:ab:
                    18:6e:c4:cf:7b:8f:46:8b:3d:11:e8:8f:40:4f:02:
                    ac:c2:a9:42:d7:44:58:35:95:3a:74:e4:78:2a:40:
                    57:ae:82:8f:51:17:d1:7c:87:9c:f8:a2:08:43:26:
                    05:82:2f:28:72:bb:9a:91:d3:52:c9:e1:c8:4b:a0:
                    68:39:c0:3c:8a:d1:f0:14:3a:7f:94:d7:54:7e:04:
                    4a:59:4c:53:7e:fb:eb:2e:ea:6c:06:f7:38:c6:64:
                    45:9f:37:77:3f:1c:55:b2:45:32:f8:08:7c:7a:cf:
                    f8:c4:50:65:01:6f:2d:e1:4a:67:ef:9a:61:38:65:
                    a3:9b:ce:8a:04:92:74:07:35:9b:fe:d0:1f:81:10:
                    bd:e4:f2:0e:5a:aa:5d:4e:89:a0:72:8a:76:12:70:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:6F:15:12:74:20:6D:98:FD:43:62:E0:4E:08:C1:99:1F:8D:12
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:cb:ce:f4:c4:c9:db:d9:a4:01:df:8c:c5:eb:5d:92:93:d8:
         ed:21:4d:ac:b7:32:19:da:43:56:da:27:62:ed:66:70:f2:f9:
         43:6f:90:46:3d:1d:e7:e7:1d:b1:53:68:18:90:68:dd:ca:48:
         a4:99:64:8e:93:af:b5:83:a6:84:45:f7:61:31:59:51:ac:e3:
         90:a5:c6:d8:c3:e7:70:d8:94:6f:ce:e9:01:ab:a9:45:54:80:
         8f:af:48:2e:fd:b8:85:c4:3e:95:df:fb:52:ab:5c:49:48:41:
         49:5d:10:b5:37:ac:15:9b:df:b2:b9:6a:cf:4f:e1:12:84:6f:
         5a:eb:ba:93:fc:e8:83:d6:49:50:61:db:64:78:16:46:db:7c:
         2d:1f:e4:b9:a7:ac:6f:5b:c6:3a:1a:f8:00:20:e8:37:a7:f5:
         2c:53:b9:66:1b:2f:0a:00:79:e5:4e:16:f9:d0:ae:0c:75:97:
         42:b3:76:64:13:90:66:6a:cf:61:bf:e8:9e:30:34:87:fd:4a:
         3d:5b:dc:ba:56:53:43:e3:b5:85:49:2e:53:2f:be:21:af:76:
         ea:f4:c5:30:39:b8:4f:79:19:8c:41:d8:98:78:a7:3e:d8:88:
         79:d1:3d:89:ca:d4:bc:9b:73:a5:23:ae:15:8b:c5:20:02:fb:
         68:f7:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:26 2025 by rpki-client