Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa
File:                     323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (raw, json)
Hash identifier:          V3vQoWj/pcT74SkEXQYJqSIiwsCNzpVOZJ9AUjyQ4sQ=
Subject key identifier:   59:CD:97:1F:11:96:28:5F:37:3C:CB:A0:67:0C:08:B6:1B:09:28:DE
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       46EA5C6584B757C6F1561BFD3244D06FA3B388EF
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa
Signing time:             Thu 06 Mar 2025 08:32:29 +0000
ROA not before:           Thu 06 Mar 2025 08:27:29 +0000
ROA not after:            Thu 05 Mar 2026 08:32:29 +0000
asID:                     260647
IP address blocks:        2804:67bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 21:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ea:5c:65:84:b7:57:c6:f1:56:1b:fd:32:44:d0:6f:a3:b3:88:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Mar  6 08:27:29 2025 GMT
            Not After : Mar  5 08:32:29 2026 GMT
        Subject: CN=59CD971F1196285F373CCBA0670C08B61B0928DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:49:c3:ec:d8:8d:2c:a4:66:2a:25:72:1e:
                    54:b8:a5:59:c5:25:ee:a3:d6:0a:42:08:a5:64:ce:
                    7e:1d:6e:9c:ff:46:4d:fa:ff:84:cd:f3:96:54:4e:
                    8e:b9:80:cb:e9:d3:4e:69:25:be:bf:b8:32:54:c1:
                    e8:9a:33:b9:fc:32:78:89:13:18:fd:66:99:d0:d4:
                    87:51:57:ec:a3:9c:54:91:66:98:4f:ef:74:0d:f9:
                    7b:47:f7:39:fe:29:5a:54:b5:9f:f5:2b:f9:eb:2a:
                    fc:38:f4:ad:8b:82:9f:b3:2a:f2:a3:34:2f:d1:e3:
                    5b:97:3b:ad:7f:27:83:e7:2f:ff:40:fd:af:ed:f2:
                    d8:10:78:8e:a6:23:58:5a:79:70:ae:d1:14:e3:f9:
                    26:c4:2c:fb:1a:89:0e:2d:ec:f7:f4:1b:3c:38:45:
                    1e:07:77:f2:f5:5b:08:f3:61:48:02:3e:a4:fc:ee:
                    09:59:ca:fe:ee:4e:1f:02:56:72:8c:53:a9:c3:af:
                    03:d4:0d:3f:ca:0f:5b:c1:16:7a:df:87:aa:04:55:
                    4c:03:61:e9:25:0c:8e:54:2c:e8:59:8d:df:bd:08:
                    1d:92:88:45:60:4e:cb:39:49:c8:ba:c2:69:67:24:
                    73:e3:d8:80:b6:f9:7e:95:35:de:6c:3a:38:05:9e:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CD:97:1F:11:96:28:5F:37:3C:CB:A0:67:0C:08:B6:1B:09:28:DE
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33322d3438203d3e20323630363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:f1:d4:ee:11:d6:15:36:ed:d3:dc:67:7f:72:22:b5:9d:
         02:51:d7:31:db:e5:62:c3:50:7d:82:09:b0:59:dc:1d:80:fb:
         c3:e8:35:2b:c9:60:2f:88:2e:a6:36:6c:bd:8e:e9:b9:9f:72:
         97:17:4a:43:4b:22:d4:d7:c5:d9:0e:08:9f:29:21:88:74:b0:
         23:86:d1:7b:c6:34:24:ab:20:1c:ce:36:3c:a2:aa:c9:53:35:
         12:24:39:91:75:d4:9d:0a:07:14:fc:57:3b:f7:c4:37:1e:ed:
         ed:36:05:99:0c:09:9f:e9:a1:db:9f:d6:2b:a2:b1:74:8e:0a:
         ef:d5:fc:59:f1:17:a4:89:36:30:71:5e:68:2b:b0:38:a2:1c:
         37:ef:21:7e:5d:27:43:b2:b6:9e:1e:dd:1e:1d:78:5f:d7:31:
         e4:31:3a:46:13:ac:f3:61:26:75:b9:05:04:26:35:bf:b0:de:
         7a:95:8c:6b:a8:00:9b:a8:cb:32:fb:ec:35:4b:09:65:8c:79:
         fe:6d:bd:1a:36:b1:75:9c:22:dc:f7:bf:fd:ac:23:39:42:81:
         92:05:c5:26:a5:a0:af:1e:d1:cb:71:dd:b6:7f:8d:82:51:1c:
         d3:df:1e:a4:18:a9:14:b6:e3:2d:ad:8e:52:c4:12:66:b6:f4:
         5d:d2:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:05:29 2025 by rpki-client