Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
File:                     323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (raw, json)
Hash identifier:          5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=
Subject key identifier:   AA:C1:00:98:54:19:BF:49:76:FB:48:2E:AC:89:86:5F:D9:48:04:74
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       5C5ACC753B54533B241B0A5D1D973C2211969FE2
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
Signing time:             Wed 05 Mar 2025 20:57:52 +0000
ROA not before:           Wed 05 Mar 2025 20:52:52 +0000
ROA not after:            Wed 04 Mar 2026 20:57:52 +0000
asID:                     269039
IP address blocks:        2804:5e88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5a:cc:75:3b:54:53:3b:24:1b:0a:5d:1d:97:3c:22:11:96:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Mar  5 20:52:52 2025 GMT
            Not After : Mar  4 20:57:52 2026 GMT
        Subject: CN=AAC100985419BF4976FB482EAC89865FD9480474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:2e:15:cb:04:5d:e6:12:b4:d8:aa:6e:c8:
                    35:aa:81:ef:43:e2:61:c3:3a:e8:69:f2:09:32:72:
                    a3:d6:9c:7d:53:cb:80:58:35:2c:d1:0d:fd:ef:4f:
                    46:1e:23:8c:e7:4a:dc:db:5e:6a:c3:68:73:d4:8f:
                    59:e6:6d:3f:97:27:f2:35:32:4a:27:93:6e:7a:2d:
                    7a:f5:26:e0:24:99:c1:74:ea:95:cd:25:7b:0f:46:
                    70:5c:80:9b:30:7a:bc:69:5d:6c:2e:95:a8:cd:45:
                    c2:29:5c:bb:ef:59:2f:aa:4a:4f:16:ec:b4:c2:8f:
                    8a:f9:b1:3d:45:13:9e:2f:2d:69:c3:7c:14:65:07:
                    8f:99:64:ce:c0:20:58:47:c0:14:e1:d9:7c:b0:f8:
                    b9:f8:af:e6:e7:54:91:7a:4d:57:49:8a:81:2d:df:
                    28:b2:85:68:df:de:ce:01:88:8d:b1:fc:bc:07:dd:
                    84:bd:25:5b:f1:b5:de:56:c5:4a:4f:83:89:b4:28:
                    49:66:c3:77:b8:78:fb:a9:dc:39:b3:3a:7c:da:38:
                    26:ab:e8:dd:31:17:2c:ea:e6:56:47:48:82:e6:62:
                    18:30:20:c4:6f:2e:da:7e:4a:a3:6d:a2:49:a5:2d:
                    76:0e:6c:fc:72:40:a7:dd:86:d8:11:51:e7:34:0b:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:00:98:54:19:BF:49:76:FB:48:2E:AC:89:86:5F:D9:48:04:74
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:a7:14:3c:b8:4c:72:b8:b0:c7:61:7f:cb:fc:83:6a:a6:
         7b:9b:96:97:ca:1b:e3:53:36:a1:c5:0d:78:a8:3c:ff:be:8c:
         e5:0f:5d:6b:ce:4d:d6:73:c1:b3:ef:34:b3:e2:31:dc:e7:76:
         aa:17:6d:65:a2:19:c1:d3:bf:36:4a:58:3a:6d:6a:3c:63:f5:
         f8:29:16:05:99:ab:94:fc:bf:2a:11:5a:de:0b:c0:18:e9:ca:
         59:1b:c5:43:af:e3:a5:8b:6f:83:c5:22:86:ee:02:3c:82:f1:
         f1:86:67:e2:b0:4a:ff:09:c3:5c:02:48:f5:0d:40:74:e3:6d:
         7e:80:6e:75:a1:27:c4:4b:61:91:b7:78:8e:e5:78:8f:34:c1:
         e7:b9:63:b8:e7:f9:24:d9:e8:5a:da:59:e7:c1:52:34:59:45:
         bf:b6:49:6f:04:c2:9b:72:24:3c:55:66:0e:1a:a0:ac:75:de:
         07:4e:fb:22:2d:6b:52:d8:c7:56:67:a1:63:68:cc:90:83:54:
         97:6c:ed:04:94:71:af:a4:08:57:9f:58:44:52:c1:d7:28:0a:
         ea:7f:53:a7:19:ec:d0:ed:27:b5:6e:2b:26:df:df:3e:be:83:
         49:da:8d:c8:03:34:68:77:96:32:80:9d:8c:19:5a:f8:2a:d1:
         0b:33:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:08:28 2025 by rpki-client