Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=
Subject key identifier:   BC:6F:D5:DB:10:0A:D5:3F:9E:8A:7D:F2:E5:5A:A9:3A:86:E0:2D:00
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       10FBFF09536109F6765DEDD7D6F93C2E14786EC6
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:41 +0000
ROA not before:           Thu 06 Mar 2025 07:20:41 +0000
ROA not after:            Thu 05 Mar 2026 07:25:41 +0000
asID:                     267024
IP address blocks:        2804:46fc:5010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fb:ff:09:53:61:09:f6:76:5d:ed:d7:d6:f9:3c:2e:14:78:6e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:41 2025 GMT
            Not After : Mar  5 07:25:41 2026 GMT
        Subject: CN=BC6FD5DB100AD53F9E8A7DF2E55AA93A86E02D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:28:94:b7:4d:78:77:02:a1:f1:6d:4e:37:
                    46:ed:f6:5b:f8:7d:16:bf:d2:9e:42:a9:d2:95:83:
                    65:c6:00:53:28:0a:27:1c:3b:e4:8c:a0:f2:0a:34:
                    1c:9c:39:1f:00:60:61:5b:bf:e2:d0:5e:b5:37:4c:
                    21:33:ae:a5:c6:3e:1d:83:0c:fc:19:b7:76:ae:4e:
                    05:9b:92:1f:5b:8d:7d:52:59:52:ca:eb:fd:1c:3a:
                    e6:82:58:2b:c3:4d:79:c1:90:00:f1:c1:86:52:49:
                    02:a5:af:33:f0:8d:ce:92:d0:e0:ca:a7:6f:36:83:
                    7c:ea:74:0c:b8:2e:e1:b8:b1:f3:a4:53:b1:26:10:
                    6f:f5:51:72:b3:30:cf:89:8d:0d:a0:c2:e6:8d:b0:
                    b2:68:b0:49:b2:97:ff:98:8f:96:1e:63:1e:12:0b:
                    22:83:2f:a9:70:f0:f7:f3:08:94:ff:a3:64:ea:27:
                    92:ac:f5:c5:55:4a:df:64:2e:8a:61:79:fd:d6:df:
                    f8:06:39:32:b4:ad:1f:0c:0d:04:29:02:2f:e7:25:
                    27:04:8e:80:15:b0:13:be:f4:88:15:ff:a3:ac:3e:
                    5c:ed:7c:11:fd:62:84:d7:66:7a:3e:5e:ee:88:42:
                    28:70:01:13:77:be:be:1e:c6:cc:5f:80:09:45:68:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:D5:DB:10:0A:D5:3F:9E:8A:7D:F2:E5:5A:A9:3A:86:E0:2D:00
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:5010::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:45:16:4e:73:e8:42:71:9a:e8:99:73:c8:9b:03:e1:a3:
         18:56:a4:6c:f4:93:34:d9:63:b2:b8:bb:ce:88:47:60:4e:24:
         fd:49:c5:54:ab:f9:18:8c:be:3f:e9:d9:8e:c9:32:62:03:4b:
         40:81:db:31:a4:37:fc:77:1c:50:80:cf:0c:2b:fd:1d:38:b6:
         57:22:4c:c7:84:fe:14:7d:65:81:9a:93:fd:72:bb:43:36:35:
         07:82:5c:0a:e6:28:f5:ff:a0:4b:65:92:1d:31:c4:57:d5:31:
         75:09:26:57:f8:d5:1c:0b:75:fb:20:eb:54:d1:cf:79:4e:ad:
         8c:e7:c6:84:ea:79:33:3a:bf:16:77:ef:eb:e1:51:6b:41:9a:
         c9:d3:66:ac:ff:78:92:c6:c0:59:76:db:a1:16:98:1f:7b:a0:
         bc:57:1c:34:92:7c:46:61:e9:51:85:21:00:36:82:f0:93:5e:
         b5:84:cc:24:aa:bf:ba:5e:b3:62:65:03:97:d2:96:dc:2b:a9:
         a9:78:cc:27:8e:5d:9b:1f:f3:49:ec:24:20:3b:61:db:f0:ed:
         d4:88:24:d3:98:5d:d3:89:1b:74:85:7c:1b:38:28:35:39:91:
         7e:33:91:11:be:4c:ea:75:7b:2c:50:ca:73:03:42:af:5f:c7:
         b2:be:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:04 2025 by rpki-client