Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa
File:                     323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (raw, json)
Hash identifier:          ywJGU3MRDrCY3Q3pSK1+vis/YtjubPSWQV7awvyeIJ0=
Subject key identifier:   F7:3A:DB:4C:80:FE:A6:98:4F:BA:DB:3E:11:BE:9D:0B:46:7A:6B:24
Certificate issuer:       /CN=79850E90B00295449D73112E86E0EB79DBC9B2A8
Certificate serial:       53CBB478652B793B7B270BE5C5200C7B18F92A97
Authority key identifier: 79:85:0E:90:B0:02:95:44:9D:73:11:2E:86:E0:EB:79:DB:C9:B2:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79850E90B00295449D73112E86E0EB79DBC9B2A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa
Signing time:             Mon 24 Jun 2024 17:57:24 +0000
ROA not before:           Mon 24 Jun 2024 17:52:24 +0000
ROA not after:            Mon 23 Jun 2025 17:57:24 +0000
asID:                     273510
IP address blocks:        2804:8fc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.crl
                          rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79850E90B00295449D73112E86E0EB79DBC9B2A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cb:b4:78:65:2b:79:3b:7b:27:0b:e5:c5:20:0c:7b:18:f9:2a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79850E90B00295449D73112E86E0EB79DBC9B2A8
        Validity
            Not Before: Jun 24 17:52:24 2024 GMT
            Not After : Jun 23 17:57:24 2025 GMT
        Subject: CN=F73ADB4C80FEA6984FBADB3E11BE9D0B467A6B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:bf:c2:ec:1a:5c:a2:5a:b0:6b:b7:ef:64:
                    55:9d:6a:f9:c6:51:c8:c0:90:bc:a0:d4:e0:6f:0d:
                    81:8a:78:1c:ea:9f:20:60:34:d0:bb:32:fb:f6:91:
                    81:45:ab:95:b7:70:29:b4:3d:00:f3:e2:33:38:a5:
                    d8:bc:24:40:f1:4d:d2:42:dd:1d:ba:f8:93:b9:4f:
                    d6:a9:eb:f6:2e:ee:e8:23:6b:bd:d5:59:1e:cb:db:
                    14:1c:91:f2:59:c0:eb:ab:72:87:f6:b2:69:fe:63:
                    6e:3d:99:11:84:da:85:4d:cf:cf:32:6f:6a:7c:32:
                    64:fc:a1:17:cf:bb:40:d2:78:97:a3:7f:81:8b:7d:
                    16:28:1d:07:a8:22:c4:b0:ae:6c:bd:73:9b:cc:b2:
                    b2:e5:23:4e:b3:37:6c:76:bf:d5:f1:c3:38:b6:dc:
                    1f:2e:77:7d:18:0e:93:b3:8a:70:f8:18:a5:61:22:
                    47:20:0c:2b:07:4d:e5:74:87:c2:27:5f:f0:97:97:
                    dc:0f:d6:b1:76:42:e5:ba:45:01:f8:7c:d6:e1:f7:
                    8b:9e:b8:7a:89:5f:ec:53:41:5e:6b:e8:ee:f9:4d:
                    ec:1f:8f:ce:2a:18:09:3f:35:dd:00:a7:d5:c9:03:
                    69:d0:ab:f0:fb:5c:9c:07:e7:86:ca:30:93:ba:cb:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:DB:4C:80:FE:A6:98:4F:BA:DB:3E:11:BE:9D:0B:46:7A:6B:24
            X509v3 Authority Key Identifier:
                keyid:79:85:0E:90:B0:02:95:44:9D:73:11:2E:86:E0:EB:79:DB:C9:B2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/79850E90B00295449D73112E86E0EB79DBC9B2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79850E90B00295449D73112E86E0EB79DBC9B2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/323830343a386663343a3a2f33322d3438203d3e20323733353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:73:25:19:8e:b3:a8:5f:75:02:66:6f:98:8e:5d:b2:55:fc:
         27:81:2a:38:00:0b:7d:b6:5a:62:27:cd:19:d3:d6:3e:f1:88:
         62:05:9e:24:98:dd:0b:0c:50:82:94:aa:a1:7b:d8:6f:23:4a:
         3a:f8:89:48:da:24:33:b5:08:16:d2:00:0f:b9:51:7a:60:73:
         50:2c:11:97:0c:62:ff:49:94:29:18:b3:1a:43:d1:d8:73:c2:
         8b:14:84:35:75:5d:6e:9e:20:0c:8e:1b:bb:23:94:8f:76:ce:
         20:9e:84:15:b8:7a:cd:d2:c6:43:90:fa:05:8b:a3:6f:34:1d:
         13:af:5a:c1:d9:0b:15:f9:5f:69:76:84:28:e9:2c:ab:55:a4:
         b3:79:54:ba:62:e5:0c:c9:aa:d3:6d:73:1b:e7:73:b4:05:ba:
         30:da:b9:5a:4b:e2:89:d2:f3:f7:df:e8:df:f4:f7:e5:ea:dd:
         62:9a:b7:5f:c1:81:8b:62:81:34:76:e1:f7:96:b8:be:90:66:
         e1:45:5d:e3:42:b9:b2:22:60:9a:03:ac:05:4a:d8:2a:86:cb:
         2f:3a:08:fa:78:5a:d8:fb:df:30:51:a5:83:c8:14:54:15:f8:
         d4:d5:74:2c:a1:6b:05:06:f3:bf:ee:46:91:28:db:ad:eb:8f:
         3d:cf:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:21 2025 by rpki-client