Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
File:                     323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa (raw, json)
Hash identifier:          jdwu81LwKAHIAzk2FIvpGZ+Uz30eNafo3H9kSSvbyNs=
Subject key identifier:   1D:69:4B:B3:D3:A8:42:50:FA:19:BE:A6:EF:0E:4D:2A:50:6A:7B:EA
Certificate issuer:       /CN=BB025E2BBA700284DDD07C70408A3D358A4AED92
Certificate serial:       25DF492255B1F4895A4F0DCD0C345DC469D9F21D
Authority key identifier: BB:02:5E:2B:BA:70:02:84:DD:D0:7C:70:40:8A:3D:35:8A:4A:ED:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB025E2BBA700284DDD07C70408A3D358A4AED92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa
Signing time:             Tue 11 Feb 2025 18:02:42 +0000
ROA not before:           Tue 11 Feb 2025 17:57:42 +0000
ROA not after:            Tue 10 Feb 2026 18:02:42 +0000
asID:                     269664
IP address blocks:        2804:6800:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BB025E2BBA700284DDD07C70408A3D358A4AED92.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BB025E2BBA700284DDD07C70408A3D358A4AED92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB025E2BBA700284DDD07C70408A3D358A4AED92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:df:49:22:55:b1:f4:89:5a:4f:0d:cd:0c:34:5d:c4:69:d9:f2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB025E2BBA700284DDD07C70408A3D358A4AED92
        Validity
            Not Before: Feb 11 17:57:42 2025 GMT
            Not After : Feb 10 18:02:42 2026 GMT
        Subject: CN=1D694BB3D3A84250FA19BEA6EF0E4D2A506A7BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:48:48:6b:f4:c7:47:53:e6:f8:aa:1c:bb:
                    ef:7f:71:d7:27:ca:c5:6d:5f:f3:ee:4a:26:29:7a:
                    5b:6b:16:e8:86:3c:9f:23:25:45:c9:4b:1a:c5:ad:
                    19:92:55:1a:cc:48:d1:24:bb:2a:54:bf:c1:94:93:
                    f4:fd:5a:15:bb:3e:7e:20:27:f3:19:f5:8f:ed:8b:
                    38:c5:f1:d9:6f:8c:f0:0d:8e:b2:22:12:05:7d:4b:
                    68:ad:45:85:fd:3d:91:8e:0e:82:ca:19:6d:fc:02:
                    2b:32:50:43:90:4b:05:f7:ea:49:dd:aa:d7:a9:56:
                    7b:f7:7c:4e:7f:9f:eb:28:3e:45:c1:47:c0:5b:45:
                    2a:52:5e:63:40:36:92:90:0e:bb:a0:4d:2f:10:81:
                    0d:a5:aa:e1:0c:49:5c:5f:dd:23:0a:f2:36:9d:f1:
                    09:78:5e:84:18:30:9d:56:df:83:54:68:88:3a:76:
                    c5:cd:1b:66:6e:7a:18:c6:18:1b:91:83:08:a8:a9:
                    e9:cd:c8:9e:7b:b6:67:5c:68:f8:e5:9c:a9:1e:86:
                    14:65:27:76:68:35:56:4e:32:14:08:03:cc:b9:30:
                    7c:7f:85:15:70:02:1b:6f:36:f2:25:b0:76:56:eb:
                    f8:8d:63:72:49:b3:66:1e:6d:9e:a8:c7:23:18:6c:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:4B:B3:D3:A8:42:50:FA:19:BE:A6:EF:0E:4D:2A:50:6A:7B:EA
            X509v3 Authority Key Identifier:
                keyid:BB:02:5E:2B:BA:70:02:84:DD:D0:7C:70:40:8A:3D:35:8A:4A:ED:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BB025E2BBA700284DDD07C70408A3D358A4AED92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB025E2BBA700284DDD07C70408A3D358A4AED92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/323830343a363830303a383030303a3a2f33342d3334203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:77:95:19:d0:80:3b:03:69:57:37:df:44:e5:e7:98:55:a6:
         f4:d6:b0:9f:91:eb:3e:b6:6a:d1:d1:0c:bf:cd:c3:ab:d1:1e:
         2a:3e:22:1e:3d:83:f9:8c:70:eb:c7:64:81:be:ff:e3:7a:2c:
         b1:b2:3c:33:b4:66:47:62:96:63:c0:11:b7:21:8a:79:3d:25:
         b5:b2:dc:7f:36:4d:9e:8e:06:16:f9:3b:70:3c:e8:7d:9b:2c:
         35:e7:c7:cf:7b:44:f9:c6:70:01:94:dd:b1:c2:80:8f:c7:3d:
         da:36:5e:e6:76:6b:cf:40:fa:68:d8:66:67:cd:26:0a:c6:bb:
         9e:87:d8:f1:99:dc:23:f6:e9:55:cd:b0:37:c0:17:48:4f:e8:
         a0:c0:6d:01:24:00:28:9e:60:75:f2:25:e2:b4:a2:33:49:09:
         ee:6f:3f:af:d1:28:e3:e6:9e:90:a1:0d:bd:4a:b8:03:d1:dd:
         73:d7:7f:77:14:e6:70:f8:26:5a:4f:47:ad:eb:7e:3c:a4:cc:
         97:7e:45:12:d2:ca:0c:f4:96:a2:0c:f5:7f:55:fb:c0:64:d7:
         f9:26:89:36:b1:ac:7c:33:33:9a:3e:b3:07:29:1c:2e:d3:bf:
         9d:47:f6:1b:6c:d3:8a:d6:f3:98:e0:3a:81:16:fe:7b:50:1d:
         34:09:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:21 2025 by rpki-client