Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
File:                     323830343a356238343a3a2f33322d313238203d3e203238333239.roa (raw, json)
Hash identifier:          8oQjwIhylKHaXa+Bo4k7CwqHZyzEonGyi3LkoANO2yY=
Subject key identifier:   BF:97:60:DA:58:C9:D2:4C:87:90:D2:A4:A2:F4:05:86:71:F5:A5:1F
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       4FB77567A6CEB6CA086EF0D8C0DF973F2B9D3A70
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
Signing time:             Fri 07 Mar 2025 19:14:24 +0000
ROA not before:           Fri 07 Mar 2025 19:09:24 +0000
ROA not after:            Fri 06 Mar 2026 19:14:24 +0000
asID:                     28329
IP address blocks:        2804:5b84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 06:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b7:75:67:a6:ce:b6:ca:08:6e:f0:d8:c0:df:97:3f:2b:9d:3a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:09:24 2025 GMT
            Not After : Mar  6 19:14:24 2026 GMT
        Subject: CN=BF9760DA58C9D24C8790D2A4A2F4058671F5A51F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:18:1d:bb:01:fd:09:20:d2:86:2f:26:5a:
                    62:ab:10:82:47:77:55:90:2d:3c:8b:73:50:b3:53:
                    ae:a7:37:3d:4a:e4:1f:8f:11:31:48:27:71:50:07:
                    42:06:11:59:ff:72:5c:52:a0:18:ab:fb:2e:2c:c4:
                    4f:c9:f6:17:8d:fc:cd:05:92:d5:09:8d:cd:d8:a7:
                    f5:ec:81:e5:2c:f0:a0:6f:a1:95:d7:38:3d:97:29:
                    f1:e2:72:eb:18:bb:06:fa:c2:3d:bc:6d:4d:49:62:
                    c2:08:1d:71:cc:12:7e:25:ee:56:4d:7e:47:ad:93:
                    3e:a8:dd:0b:b8:cb:f4:86:41:4c:b8:f7:07:08:26:
                    4d:d9:4a:02:e7:67:9c:f2:25:c8:11:74:b3:c2:b8:
                    5a:15:4c:d3:02:43:b3:f5:2d:f1:41:52:bd:59:9f:
                    e5:75:cf:91:57:d6:2b:c0:6b:93:db:95:c0:15:96:
                    8c:96:a1:bc:1d:56:cb:35:d2:4a:40:aa:22:0d:41:
                    63:45:6e:ff:3d:0a:9b:67:85:91:72:ba:15:32:41:
                    63:d3:26:85:00:bf:d1:27:da:27:3c:54:2a:63:67:
                    39:43:74:65:a7:1e:2b:8e:81:39:d3:38:94:4f:05:
                    3c:3f:96:54:3d:15:5a:b4:80:b2:38:27:bb:a8:8d:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:97:60:DA:58:C9:D2:4C:87:90:D2:A4:A2:F4:05:86:71:F5:A5:1F
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:80:15:42:02:93:55:96:85:1f:5f:b4:29:b4:81:3b:13:c5:
         73:47:3a:5a:80:8f:bd:19:65:99:d2:d5:6d:d9:87:00:78:a3:
         72:6b:7d:9f:31:3b:08:b6:87:40:d4:8b:a6:e0:ae:8f:c4:36:
         7f:c6:a7:35:d7:50:a7:f7:bc:b5:cd:dd:8f:4e:54:6d:87:bd:
         38:f8:ba:61:af:6f:81:02:be:d9:08:cf:fb:51:cf:51:18:73:
         30:0b:8c:f0:5d:52:f5:4b:45:03:ef:48:da:21:03:cc:7f:f0:
         c0:1e:0b:cf:a3:eb:50:ec:6d:1e:9b:d8:6f:b3:7e:ec:e2:cb:
         22:bb:29:30:f7:b4:bc:0a:d4:c2:90:56:e6:20:39:c9:cf:c6:
         f0:7f:af:02:0f:14:3a:a9:0e:44:b3:4d:d9:10:ac:e0:ff:09:
         03:9b:83:99:84:fe:a0:b9:a7:dd:f7:14:b0:76:dc:58:e0:2d:
         fc:07:36:8b:93:01:64:12:7e:8e:98:3c:df:26:d6:b8:67:f1:
         40:04:34:80:ca:e6:b0:af:b6:a8:7e:df:fd:c8:4d:1b:38:f6:
         b9:06:2e:5b:ad:51:6c:1f:48:8c:c8:8e:2c:cf:5c:02:b8:34:
         f1:56:4e:bd:3e:7a:38:e1:6c:b1:6d:4f:83:41:8d:49:85:3b:
         65:82:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:18 2025 by rpki-client