Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/323830343a343339633a3a2f33322d3334203d3e20323637353739.roa
File:                     323830343a343339633a3a2f33322d3334203d3e20323637353739.roa (raw, json)
Hash identifier:          gdtNMJmCVhI19nCwgwjAYRfqvHm0dwNC6holxx6iIQY=
Subject key identifier:   BE:70:BE:95:8D:E0:8E:30:06:69:E9:1C:6A:22:DC:F9:B9:17:E7:30
Certificate issuer:       /CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
Certificate serial:       6049802F2310A8185C74E2D1070B141054C3846E
Authority key identifier: ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/323830343a343339633a3a2f33322d3334203d3e20323637353739.roa
Signing time:             Thu 06 Mar 2025 22:16:10 +0000
ROA not before:           Thu 06 Mar 2025 22:11:10 +0000
ROA not after:            Thu 05 Mar 2026 22:16:10 +0000
asID:                     267579
IP address blocks:        2804:439c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl
                          rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:80:2f:23:10:a8:18:5c:74:e2:d1:07:0b:14:10:54:c3:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Validity
            Not Before: Mar  6 22:11:10 2025 GMT
            Not After : Mar  5 22:16:10 2026 GMT
        Subject: CN=BE70BE958DE08E300669E91C6A22DCF9B917E730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:72:06:5e:33:41:e2:2a:40:48:95:bb:af:
                    5f:a3:33:08:3d:d5:d4:ec:c8:94:76:23:10:cf:61:
                    ea:ec:13:f3:85:10:01:12:2b:59:6d:12:1d:96:2e:
                    92:08:33:57:12:c4:71:ea:53:19:4d:f1:6b:cf:20:
                    c9:4c:ac:17:9c:37:ae:2f:b4:f9:5a:7f:64:0f:5c:
                    45:f5:95:be:ed:74:3a:14:0a:43:fc:5b:3b:b8:86:
                    40:19:ad:d8:de:55:a3:34:6e:79:d4:38:8f:af:b1:
                    0c:cc:8d:c7:79:80:18:06:cd:20:01:d8:70:fd:d4:
                    08:79:b5:c5:68:06:f8:64:77:a1:f3:a7:48:ec:95:
                    e6:0b:41:b4:63:24:13:67:31:a6:0c:73:62:72:2a:
                    cd:e9:78:c6:90:11:11:9b:fb:03:1f:1c:63:e1:bd:
                    57:c6:ce:8f:6d:bf:5c:02:a4:4e:d6:a5:d8:17:54:
                    7a:96:d2:99:51:87:f2:ec:5e:3d:13:60:bb:97:57:
                    4e:e6:83:ce:6d:69:95:37:60:2c:07:47:a3:58:25:
                    3f:be:be:ec:e5:bb:b6:b4:08:69:f7:a3:55:d5:57:
                    66:85:82:d1:99:49:3b:6c:cd:d5:6a:ec:e7:d3:04:
                    ff:01:dc:d9:97:6c:1c:16:65:d9:14:7b:21:d6:79:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:BE:95:8D:E0:8E:30:06:69:E9:1C:6A:22:DC:F9:B9:17:E7:30
            X509v3 Authority Key Identifier:
                keyid:ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/323830343a343339633a3a2f33322d3334203d3e20323637353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:439c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:07:9d:c9:70:1a:1a:28:c3:30:47:a9:86:3f:59:41:c1:66:
         90:77:4a:5b:86:69:01:5a:43:93:99:41:1c:98:64:1b:90:13:
         36:cd:74:d5:5b:9d:98:0b:c4:e4:60:de:ab:21:85:d9:38:68:
         2f:8d:68:03:d2:a1:8b:4e:f8:f6:5f:c7:49:84:04:42:08:ad:
         09:b4:49:d7:18:71:ac:f3:eb:49:51:4b:22:3b:a3:83:10:47:
         48:3b:38:b7:29:3f:5e:b4:9b:b7:16:13:d5:81:19:eb:51:e6:
         92:01:c6:dd:82:cf:db:a2:52:c6:38:c9:e4:f6:47:19:29:46:
         a7:e7:47:27:df:90:73:dc:fa:9d:cd:06:1e:c5:9f:39:58:70:
         55:42:76:35:2a:91:e5:92:c7:10:8d:d4:3a:e2:2f:28:85:6f:
         51:b4:d6:d7:f9:b8:54:79:48:d3:38:c4:a5:33:9d:7d:2d:cd:
         a6:07:68:6d:7a:10:d0:0e:11:af:09:05:13:ac:3d:17:20:ae:
         2d:87:07:47:7e:c0:62:90:bd:dc:c0:e0:0a:d8:34:18:c4:4b:
         79:f4:23:1e:70:bc:47:b7:97:d3:ec:37:d7:03:43:e3:13:fb:
         dc:09:eb:d6:77:5d:c2:54:ca:29:29:b6:49:71:a0:ca:06:41:
         6c:a2:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:05:53 2025 by rpki-client