Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33322d3438203d3e20323731363039.roa
File:                     323830343a376533343a3a2f33322d3438203d3e20323731363039.roa (raw, json)
Hash identifier:          Wwy+zWxgBmVi9CrHFR2rVa+/PBim1JXtm5poprqwBgQ=
Subject key identifier:   CC:B0:9C:00:F5:27:35:C5:3D:7B:67:D8:E8:71:5F:17:30:36:D7:53
Certificate issuer:       /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
Certificate serial:       7FD535C7CD42C8D0B4A8CED4CF3CD3B0055CACC8
Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33322d3438203d3e20323731363039.roa
Signing time:             Sun 16 Feb 2025 01:22:52 +0000
ROA not before:           Sun 16 Feb 2025 01:17:52 +0000
ROA not after:            Sun 15 Feb 2026 01:22:52 +0000
asID:                     271609
IP address blocks:        2804:7e34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d5:35:c7:cd:42:c8:d0:b4:a8:ce:d4:cf:3c:d3:b0:05:5c:ac:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
        Validity
            Not Before: Feb 16 01:17:52 2025 GMT
            Not After : Feb 15 01:22:52 2026 GMT
        Subject: CN=CCB09C00F52735C53D7B67D8E8715F173036D753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:08:26:5f:06:46:f4:f3:32:4d:7f:96:79:
                    b4:ce:19:07:5f:54:40:09:94:2c:0d:c9:fa:15:5c:
                    ad:35:48:17:b9:ca:af:2c:b0:cf:3e:03:ca:c5:ef:
                    2c:f2:25:ba:e5:d9:a6:03:88:5f:09:1f:e0:d6:88:
                    31:a8:46:9e:5c:73:f0:5f:f8:93:96:91:a0:e2:87:
                    7e:a5:ce:75:ad:e6:c9:bc:9f:a8:f3:d1:82:29:e8:
                    37:7f:d5:1b:50:09:9d:6f:c9:24:16:64:ad:b5:77:
                    69:2c:e5:e6:a4:8d:a4:46:00:26:1c:01:16:5c:10:
                    c0:2c:61:43:57:14:8f:a5:bd:14:fa:7c:88:bf:a6:
                    90:30:bb:07:91:e3:0b:39:d7:d5:92:e5:86:ea:1d:
                    be:22:d0:47:13:a6:7c:33:77:66:11:92:75:05:24:
                    51:36:3f:64:32:27:9e:d3:df:29:a7:aa:4c:fc:34:
                    bf:ba:88:22:4b:d5:9f:b0:2f:97:73:ba:ed:7d:2a:
                    79:38:ac:52:5c:6f:f7:07:16:c5:1f:91:1b:c9:2f:
                    af:fd:a6:f3:c6:66:94:b5:3e:bf:87:de:79:58:53:
                    bc:df:92:a6:99:c2:bd:0e:b9:f1:c8:7c:68:e6:d7:
                    bb:ab:6e:e7:fb:98:09:c9:94:65:af:38:8d:4a:dc:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:9C:00:F5:27:35:C5:3D:7B:67:D8:E8:71:5F:17:30:36:D7:53
            X509v3 Authority Key Identifier:
                keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a3a2f33322d3438203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:03:db:8a:0a:78:51:e0:f3:cd:e0:a4:fd:24:99:49:42:
         56:8d:99:de:cc:a1:21:b5:fa:7a:d4:ea:44:71:f5:9a:6d:92:
         8a:55:35:ca:da:4d:49:07:19:eb:a6:08:98:9c:f8:48:cc:ea:
         80:11:c1:e1:0f:83:78:eb:73:f0:a5:a0:c9:e4:ab:d5:29:09:
         b7:93:27:89:e2:5c:af:c9:2a:88:96:81:97:8d:9f:62:02:76:
         8b:77:f4:3d:5e:c4:ac:97:88:29:3e:48:e7:24:1f:43:29:8a:
         6e:9f:2b:20:16:34:ad:ce:98:2d:d4:48:78:46:8e:ea:4f:1e:
         1b:be:ec:9a:ed:5a:e9:ba:09:7d:ee:ac:ea:fa:e4:7e:b0:c0:
         08:ac:4e:4d:89:55:5f:cb:76:40:f2:df:39:ad:60:fe:3d:38:
         c4:2e:0b:0e:1b:f3:bb:61:af:f1:ac:3b:cb:c8:ba:50:16:a7:
         58:a7:22:1a:2b:a6:1d:62:06:ba:da:3d:b1:4c:d8:db:25:8a:
         64:c1:3d:78:91:35:6b:45:a1:ae:74:7f:05:77:74:7e:c9:41:
         11:18:c6:1a:12:11:ec:8f:b7:85:2e:60:72:93:7a:32:3b:2f:
         3b:ee:f2:85:fe:4b:67:6a:76:6e:99:55:4e:02:5c:d0:47:67:
         8b:1e:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:43 2025 by rpki-client