Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa
File:                     323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa (raw, json)
Hash identifier:          P4cV4+US9uQegi0GCBnI1ddsEjoWHMSVzueS3q4sFWM=
Subject key identifier:   41:48:45:74:AE:7A:45:AB:59:11:8F:C8:81:B9:47:60:E7:B2:5C:2F
Certificate issuer:       /CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
Certificate serial:       7D621E68541AEBD9BCBC7DA4AC2587D057AB6146
Authority key identifier: 4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa
Signing time:             Mon 23 Sep 2024 13:42:58 +0000
ROA not before:           Mon 23 Sep 2024 13:37:58 +0000
ROA not after:            Mon 22 Sep 2025 13:42:58 +0000
asID:                     270444
IP address blocks:        2804:6c14:8000::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl
                          rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:1e:68:54:1a:eb:d9:bc:bc:7d:a4:ac:25:87:d0:57:ab:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
        Validity
            Not Before: Sep 23 13:37:58 2024 GMT
            Not After : Sep 22 13:42:58 2025 GMT
        Subject: CN=41484574AE7A45AB59118FC881B94760E7B25C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:a3:14:5f:18:ae:9a:ca:dd:2b:05:f8:c3:
                    53:22:bd:bd:e6:66:20:0f:2f:ba:7a:c4:fa:9d:6f:
                    db:ca:79:75:cf:c9:8f:39:b5:2d:44:a7:3e:93:5b:
                    40:8a:5b:61:89:2e:72:1a:d9:fb:23:86:87:c3:1f:
                    e4:b5:12:48:d7:33:9b:32:93:91:c0:19:aa:f3:16:
                    21:e6:08:e0:e3:0c:95:60:d0:b4:a6:7d:d4:07:0f:
                    4d:b5:a1:64:63:ea:2e:31:ad:2b:5a:9f:2f:2e:04:
                    ff:1f:44:18:b7:b2:aa:83:45:47:4f:ce:ad:0f:b3:
                    d2:c1:af:f9:bf:4a:cf:b5:8d:bf:0c:45:d1:45:93:
                    8f:a2:84:94:41:06:30:eb:96:a6:fb:57:6f:a7:8b:
                    f6:f1:c6:2b:82:fb:90:6e:97:16:eb:e7:6c:a9:cf:
                    2a:1c:3d:d9:c6:3d:3b:e5:de:25:d3:e4:cf:a3:2b:
                    14:64:0b:91:05:37:62:d6:ca:f6:33:2e:e0:82:44:
                    f4:22:bc:5c:37:07:f9:56:b7:8c:1c:22:1d:b0:47:
                    00:a8:f1:60:b9:ec:f9:23:21:48:67:04:51:c7:df:
                    6f:f1:be:10:ec:21:2a:b8:2d:49:af:5e:b5:3d:13:
                    f4:6c:8d:3d:3d:9b:8d:35:db:a6:44:fd:80:c4:93:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:48:45:74:AE:7A:45:AB:59:11:8F:C8:81:B9:47:60:E7:B2:5C:2F
            X509v3 Authority Key Identifier:
                keyid:4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/323830343a366331343a383030303a3a2f33332d313238203d3e20323730343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c14:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:28:28:f2:ba:15:10:b3:01:3e:07:19:3c:04:d4:a4:f5:0d:
         0a:fb:6a:a1:ed:ef:db:6a:ea:45:4a:53:10:40:d4:cf:73:fa:
         c2:f5:95:3c:7c:30:71:71:af:65:24:db:9b:f4:3f:65:95:68:
         b6:52:f5:b3:20:13:3c:8e:d8:84:24:04:13:1d:04:3b:ff:8b:
         75:fe:57:6d:10:f1:53:5d:94:89:73:85:98:d0:4d:43:18:f4:
         9b:91:fd:dc:72:e2:54:21:29:9a:f9:a7:bc:84:be:96:6e:df:
         5f:e1:5d:ba:a6:e5:01:d1:10:69:bf:7a:30:c2:6e:4e:4d:19:
         62:1d:78:4b:36:10:42:b7:cd:21:c0:93:58:b7:8e:5a:41:cd:
         8f:5e:91:36:01:34:fc:8c:ed:fd:eb:d1:de:3c:41:be:c6:0c:
         b7:db:52:a8:3d:3d:10:4e:1b:b3:05:20:ee:9f:7c:fa:3a:7e:
         15:37:82:af:96:8a:7c:07:63:2b:fd:77:7e:98:67:04:4f:bc:
         5f:65:23:06:24:47:70:a9:c9:c6:e2:cf:60:8e:d1:bd:09:a4:
         ff:38:55:43:33:61:61:83:6b:60:8a:ee:97:e1:cc:bc:60:e3:
         42:62:6b:ae:11:da:f5:50:4f:32:43:56:e0:c8:2f:ef:ee:67:
         54:3c:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:43 2025 by rpki-client