Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa
File:                     323830343a363236303a3a2f33322d3438203d3e20323639323933.roa (raw, json)
Hash identifier:          26SxraMdkFt+XHl1GktBx0rf3rRdaDD+kwx5IuK0qMA=
Subject key identifier:   02:D8:69:D5:DB:F9:3E:23:9B:04:7B:6C:83:79:1D:95:E4:B9:BC:23
Certificate issuer:       /CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
Certificate serial:       4E3AF789CF4DA2B29D97C979A6DDF6F425FBFBD4
Authority key identifier: 85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa
Signing time:             Tue 04 Jun 2024 14:27:06 +0000
ROA not before:           Tue 04 Jun 2024 14:22:06 +0000
ROA not after:            Tue 03 Jun 2025 14:27:06 +0000
asID:                     269293
IP address blocks:        2804:6260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl
                          rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3a:f7:89:cf:4d:a2:b2:9d:97:c9:79:a6:dd:f6:f4:25:fb:fb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
        Validity
            Not Before: Jun  4 14:22:06 2024 GMT
            Not After : Jun  3 14:27:06 2025 GMT
        Subject: CN=02D869D5DBF93E239B047B6C83791D95E4B9BC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:32:d5:35:51:fa:16:17:5f:7f:6e:82:31:
                    4d:25:e5:f0:86:ba:e2:2a:93:1b:bd:fc:f2:d2:fd:
                    00:60:ea:81:1a:2f:9f:17:ca:49:85:9e:76:bc:62:
                    dc:15:77:09:c8:af:7e:9e:61:2f:3b:6e:68:50:6e:
                    e7:1c:d6:64:54:ce:77:5c:2b:a7:19:e9:5d:69:22:
                    67:c3:7b:91:91:34:20:8f:eb:a1:67:58:b0:36:14:
                    de:00:79:71:b3:fa:80:20:e0:c2:fa:8b:ff:c3:11:
                    f9:ca:c1:ad:63:ab:92:a7:b8:2f:ae:fd:80:e0:06:
                    f9:8d:be:e5:58:55:10:33:21:47:66:ec:b5:cb:be:
                    32:22:aa:49:59:53:6d:7b:db:62:6e:f0:72:39:8b:
                    2b:47:a6:54:ee:d4:74:5d:0c:30:51:0c:41:a4:31:
                    e2:3c:e4:2f:57:c6:e9:81:03:f8:45:cc:e4:69:25:
                    28:c4:39:50:3e:d6:7b:dc:47:0b:64:7c:f2:8a:e1:
                    9e:da:3c:5a:a0:92:b6:7b:54:03:a3:b4:fe:df:06:
                    31:f3:d2:61:6b:f7:a3:ed:dd:96:f3:b9:63:18:39:
                    0f:c6:56:24:7a:11:20:73:86:c5:be:f6:13:ba:6e:
                    1a:96:79:4b:40:cc:6c:72:bb:19:90:e6:e7:9a:a3:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:69:D5:DB:F9:3E:23:9B:04:7B:6C:83:79:1D:95:E4:B9:BC:23
            X509v3 Authority Key Identifier:
                keyid:85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6260::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:d3:d6:b1:a0:4a:7b:c3:c7:c0:42:61:17:2e:10:5a:58:e2:
         ca:d4:73:c5:03:e8:26:6a:99:25:e6:41:56:8a:6f:6b:ec:a4:
         43:54:76:c2:2b:87:7f:ad:54:7c:25:42:45:47:d9:90:fb:cb:
         c9:37:4e:23:ef:d1:91:ca:6c:ee:32:1b:75:02:e1:78:58:b1:
         4c:e3:bd:6f:6f:df:cb:fd:fb:d3:dc:7b:6f:4e:80:78:48:c2:
         1e:3b:e5:23:29:8e:59:e1:23:ff:76:aa:7f:fc:54:d2:0c:ec:
         e7:c6:90:40:65:26:ec:d6:a1:f3:c4:c7:1f:83:db:d6:f1:64:
         09:9f:4b:24:af:b2:cd:67:dc:c1:f3:7f:d9:f8:e5:19:6c:f8:
         43:f1:ff:ec:57:b4:49:86:a6:3b:b4:2b:f6:40:20:79:5b:79:
         aa:60:7a:04:e6:41:f0:4f:fd:27:24:a4:64:b9:fd:39:0b:af:
         96:03:41:21:8c:66:a3:98:1f:93:25:7b:7c:08:6f:7a:1a:fe:
         14:ad:91:75:da:0d:b9:d6:eb:56:a0:23:d9:5e:d1:0c:97:28:
         8c:85:fe:70:d5:01:fc:c9:d4:33:0b:ae:34:cc:4c:a4:95:e5:
         1f:14:63:79:0b:9b:d9:02:b0:37:05:01:6d:51:51:a4:89:bb:
         e8:92:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:31:10 2025 by rpki-client