Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          5odB5yWTm4uAB6rsgPg3I+OPxNXaHhdycLs/wC5tT3I=
Subject key identifier:   9C:9A:4B:05:1A:EC:B8:AA:F8:69:2B:B9:51:5C:3C:9A:F4:01:10:1B
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       448AA26529A9904AB4CFF8D0FF7BEFF4BAB3BA27
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 06 Mar 2025 08:32:29 +0000
ROA not before:           Thu 06 Mar 2025 08:27:29 +0000
ROA not after:            Thu 05 Mar 2026 08:32:29 +0000
asID:                     269647
IP address blocks:        2804:67bc:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 21:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8a:a2:65:29:a9:90:4a:b4:cf:f8:d0:ff:7b:ef:f4:ba:b3:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Mar  6 08:27:29 2025 GMT
            Not After : Mar  5 08:32:29 2026 GMT
        Subject: CN=9C9A4B051AECB8AAF8692BB9515C3C9AF401101B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:13:b8:41:0c:36:1b:5a:bd:45:e3:56:25:
                    39:fc:8c:54:0b:02:d6:43:57:d8:24:52:49:40:ea:
                    f4:98:e3:02:e6:62:8f:80:0e:bc:5d:37:aa:c6:32:
                    94:01:fa:76:15:71:e1:80:0b:fb:b7:b8:ab:43:44:
                    df:dc:f4:12:03:0d:e4:74:13:4b:df:7d:67:d8:97:
                    95:ca:1b:02:06:1f:8a:19:8c:37:7b:5a:0f:e3:6a:
                    24:ad:a9:4d:8f:d6:a9:30:54:b2:ef:c8:4d:7a:8c:
                    c7:79:8c:d9:46:6f:b4:f5:3a:22:78:b5:ec:3f:f0:
                    93:95:c7:05:e7:e3:66:b7:bc:61:72:47:8e:88:83:
                    e0:bd:3f:ec:5a:b3:57:c5:b8:e8:82:aa:d3:f3:ec:
                    a1:cc:75:2e:ed:53:7e:c6:da:f7:68:82:0b:b8:5a:
                    cf:84:32:44:e4:a8:56:aa:9b:bd:8b:1a:af:96:3b:
                    15:45:45:22:3e:a0:fb:00:31:20:d8:86:de:43:55:
                    c2:ed:ea:87:5e:06:2a:b4:d3:79:cc:8b:f9:d0:06:
                    92:bf:9f:e3:aa:bd:e1:1d:a2:3f:5b:42:97:d5:14:
                    0b:cf:20:ae:c8:04:f7:c4:83:e1:1c:fc:a3:e1:c3:
                    51:5c:3e:e1:85:37:57:81:97:11:b6:e5:3c:85:b2:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9A:4B:05:1A:EC:B8:AA:F8:69:2B:B9:51:5C:3C:9A:F4:01:10:1B
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:07:5f:9c:e1:ba:d6:8e:30:27:45:d2:0b:5f:9b:29:04:
         98:b7:4b:1d:48:65:f9:c4:1a:76:1d:cb:72:71:e2:70:2a:63:
         cc:4b:d3:6d:7e:87:f7:10:20:7a:3e:c1:38:3a:1f:42:a6:80:
         34:5e:60:6b:9c:a0:48:53:71:30:74:3f:00:42:bd:2f:24:a3:
         92:26:a7:9f:7c:b9:6b:fd:c8:b6:1a:3f:a1:c9:8e:8f:37:5d:
         b0:4d:d0:96:f7:01:2c:95:8d:e5:b0:50:7d:82:c6:50:d2:75:
         52:86:f6:aa:7f:4f:e1:47:87:93:a0:97:43:a6:08:fc:20:e5:
         be:e6:69:39:41:13:97:bd:0a:11:65:55:a5:de:43:ce:3c:25:
         02:9c:2f:b2:9d:1e:ab:9e:1e:10:be:98:d2:30:64:f7:7f:6a:
         ba:c0:ac:19:c7:31:c6:fe:97:bc:68:dd:bf:dc:16:ca:c4:77:
         7b:a1:f1:9e:42:f2:42:6d:20:22:70:c8:95:30:1d:c5:19:35:
         46:24:f2:b9:4b:2e:73:37:3e:7c:72:4f:e0:ed:85:49:4e:41:
         ad:e6:4a:95:4a:4a:4d:72:94:b6:8c:75:a5:ac:2d:3f:37:1b:
         9c:d4:8d:38:18:95:28:8e:07:47:ec:07:e8:0a:a8:e4:10:bd:
         a0:7f:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:00:51 2025 by rpki-client