Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa
File:                     323830343a346234303a3a2f33322d313238203d3e20323637323933.roa (raw, json)
Hash identifier:          5/wF8AekAywin0/w9yKpWEm9fThdAD7BvfGKS8g9LKc=
Subject key identifier:   26:9B:05:19:F6:81:0D:AB:BD:1B:81:6B:5E:C9:DB:50:14:DB:6D:19
Certificate issuer:       /CN=910494A18C7A628293563A78776F129AEA078B88
Certificate serial:       376EBB9A51F587188E667B978FA9B7760B59E933
Authority key identifier: 91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa
Signing time:             Wed 05 Mar 2025 21:18:32 +0000
ROA not before:           Wed 05 Mar 2025 21:13:32 +0000
ROA not after:            Wed 04 Mar 2026 21:18:32 +0000
asID:                     267293
IP address blocks:        2804:4b40::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl
                          rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6e:bb:9a:51:f5:87:18:8e:66:7b:97:8f:a9:b7:76:0b:59:e9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910494A18C7A628293563A78776F129AEA078B88
        Validity
            Not Before: Mar  5 21:13:32 2025 GMT
            Not After : Mar  4 21:18:32 2026 GMT
        Subject: CN=269B0519F6810DABBD1B816B5EC9DB5014DB6D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:6f:ca:2d:b8:01:65:35:82:0c:57:2b:46:
                    d6:01:a9:06:a1:fd:63:05:1a:2b:f6:30:e4:b3:00:
                    3f:51:c3:08:5f:76:ea:84:4a:2c:96:ab:c9:8a:b9:
                    78:83:3d:a2:38:22:f6:88:58:15:7e:39:0f:9f:e2:
                    74:89:3e:ae:b8:47:81:22:8e:f4:a5:b8:bd:c3:1c:
                    b3:25:67:e3:2f:c3:7d:d8:cc:85:33:0c:1f:84:df:
                    9f:e6:74:4d:f1:a2:7f:74:c4:85:ab:a3:e0:84:89:
                    64:d9:f1:35:4f:b7:71:03:51:28:18:67:cf:73:4f:
                    21:48:90:1a:ad:ff:2e:7e:69:92:2c:db:7e:f3:df:
                    81:85:97:94:8f:ef:9c:30:10:a4:7c:8e:fb:ed:5b:
                    f3:63:a3:ff:db:a5:1d:dd:f2:55:c8:1e:0c:38:0a:
                    d8:4f:c7:4c:87:29:b9:e9:5c:1c:f7:ed:5a:b6:a0:
                    d6:c5:66:39:60:18:91:3d:86:fa:bf:1d:e8:22:5b:
                    7b:f5:21:d0:56:36:1b:53:ee:d5:da:c9:bb:d4:f8:
                    7e:d9:fc:e6:85:b9:19:18:e3:77:64:9c:dd:e2:64:
                    43:84:12:49:8d:4c:27:34:01:e1:5b:46:75:22:3e:
                    13:61:08:40:c6:26:38:06:65:34:a2:fe:65:56:31:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:05:19:F6:81:0D:AB:BD:1B:81:6B:5E:C9:DB:50:14:DB:6D:19
            X509v3 Authority Key Identifier:
                keyid:91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/323830343a346234303a3a2f33322d313238203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:4b:21:5e:b9:76:28:61:80:10:4e:3c:0f:32:f3:ec:21:
         0b:e2:95:50:72:de:38:41:9e:53:f9:09:73:e5:79:99:bf:ba:
         1a:6e:0a:49:41:d9:77:a5:52:14:39:89:2c:60:84:fe:85:e0:
         ba:fe:53:8c:41:ce:49:81:f7:6e:ee:39:70:ca:56:7a:48:b4:
         98:4c:51:4f:c7:a0:2f:0a:0a:84:0d:8a:61:47:a7:7e:b8:a3:
         7b:46:c5:53:53:5c:10:dd:0c:78:5d:24:f9:05:0f:7f:2d:c9:
         41:82:29:8d:71:82:26:9b:1f:94:15:2c:e2:30:5e:dc:9d:b4:
         63:1c:34:ec:3a:47:ce:1f:c9:fb:fd:e2:83:72:f1:e5:9c:dd:
         70:0d:69:15:cc:d4:4d:a9:22:c0:54:22:08:8f:20:0a:9f:fb:
         4e:a2:e0:d9:53:7e:a8:fe:3b:06:ed:05:6b:f2:ec:b5:93:12:
         4f:a2:ed:35:51:bc:b9:7c:b5:3e:3e:f8:92:b3:c9:fa:ef:91:
         56:e4:53:00:4c:0d:5c:92:ae:9e:8f:3e:aa:68:18:90:c7:ca:
         06:88:ca:2f:f6:fc:d7:4b:80:af:39:66:56:cc:e8:2b:8e:51:
         0c:1b:88:09:f1:b4:a9:ad:08:8f:ee:b8:60:b7:d7:53:4e:3c:
         5b:72:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:18:55 2025 by rpki-client