Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633030303a3a2f34302d3430203d3e20323634393438.roa
File:                     323830343a333036343a633030303a3a2f34302d3430203d3e20323634393438.roa (raw, json)
Hash identifier:          e+GGGlCO83+yD9/0sHrYa1Q5XpfUBRSBI/qckI+t1F4=
Subject key identifier:   23:25:44:EE:DA:57:3A:97:FE:E6:80:25:6D:D1:AD:A5:B4:63:E8:16
Certificate issuer:       /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial:       12E5A47CC7F2DC413D8708C42722750772C8DC73
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633030303a3a2f34302d3430203d3e20323634393438.roa
Signing time:             Wed 15 Jan 2025 20:16:35 +0000
ROA not before:           Wed 15 Jan 2025 20:11:35 +0000
ROA not after:            Wed 14 Jan 2026 20:16:35 +0000
asID:                     264948
IP address blocks:        2804:3064:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:a4:7c:c7:f2:dc:41:3d:87:08:c4:27:22:75:07:72:c8:dc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
        Validity
            Not Before: Jan 15 20:11:35 2025 GMT
            Not After : Jan 14 20:16:35 2026 GMT
        Subject: CN=232544EEDA573A97FEE680256DD1ADA5B463E816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:3c:db:73:19:49:fc:d2:92:23:a4:47:b8:
                    1b:f4:f9:8d:10:38:4d:87:03:d8:8c:e6:23:bf:ad:
                    5d:32:a5:61:91:c6:4b:b8:4e:a9:af:0f:56:d5:b3:
                    c5:68:51:b8:74:2a:3d:bd:0d:5c:b7:92:79:6d:27:
                    61:ca:d1:ce:cf:a4:de:7c:d2:ca:d3:ce:c5:64:49:
                    a7:10:d7:65:42:1c:17:2d:39:c5:eb:0e:43:9c:0c:
                    bf:bc:e5:9c:de:62:28:69:02:b5:19:11:ab:f2:1d:
                    d5:40:86:43:2c:82:c4:87:73:8d:ac:fe:b3:3d:45:
                    51:8e:fb:37:9a:4e:a1:50:8e:de:76:2c:28:e6:8b:
                    27:01:f9:52:75:af:89:f9:d2:c0:9b:b2:cd:dc:8e:
                    82:eb:1c:98:04:d5:96:38:18:bc:6b:21:e6:22:be:
                    df:82:ee:49:36:48:cd:d7:e6:23:c5:df:57:1a:51:
                    ea:2e:1d:43:8c:35:be:74:a6:43:a9:a4:71:f9:d9:
                    ad:f8:dd:5c:d3:8e:c0:16:66:af:61:83:9c:49:47:
                    93:b3:15:1f:c1:a7:0b:ea:88:23:8e:eb:71:8d:ac:
                    90:5e:52:72:aa:4e:51:37:ab:25:38:23:1a:ff:41:
                    74:4a:31:46:70:6c:09:25:3a:76:fd:73:ea:2c:b2:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:25:44:EE:DA:57:3A:97:FE:E6:80:25:6D:D1:AD:A5:B4:63:E8:16
            X509v3 Authority Key Identifier:
                keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a633030303a3a2f34302d3430203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:92:01:e8:7a:e9:9b:d2:c6:55:75:d3:0f:05:72:65:6d:53:
         75:0a:4c:ab:10:b1:85:85:98:8e:3f:32:24:dc:66:91:69:fd:
         a5:12:eb:89:98:0c:93:ec:38:2b:37:a7:4a:4b:fa:3a:15:92:
         cd:7a:e7:b9:2b:85:ce:4b:71:d4:cf:ee:b4:e1:bc:b8:bc:0a:
         c6:05:9f:04:c9:d4:35:ac:cd:f4:77:db:d8:e7:6a:a9:06:3d:
         28:45:0e:e6:c9:2b:9c:36:59:96:09:3a:41:8c:0a:5d:64:bf:
         09:17:6d:af:4a:ad:93:38:85:ac:49:35:75:02:6c:e7:64:d9:
         7f:37:4d:f2:c5:9b:08:90:51:75:a1:5d:ea:d6:af:72:8c:f2:
         7c:55:d9:a6:05:46:36:89:58:72:21:91:5f:e3:43:32:38:34:
         17:37:bc:7d:af:62:e4:7f:95:7d:50:4b:86:c8:6c:b0:c7:84:
         3b:bd:ab:8a:c9:c3:78:2d:18:8f:c1:6a:71:cd:83:fa:ae:a2:
         fe:fa:2d:8e:1d:54:15:92:52:9f:fc:67:b7:c2:63:61:03:68:
         8e:3d:35:15:a5:88:4a:d9:e5:b3:ff:22:0e:bc:af:86:89:81:
         93:a2:89:78:3b:98:f1:98:ca:be:b7:f4:f8:87:7d:1d:49:7d:
         b8:c3:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:37:21 2025 by rpki-client