Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3430303a3a2f34302d3430203d3e20323634393237.roa
File:                     323830343a333030383a3430303a3a2f34302d3430203d3e20323634393237.roa (raw, json)
Hash identifier:          SBiGQHD2oHNjnTtvfo1HKyRXuh5MgYSZvz06POlF3RI=
Subject key identifier:   08:F3:88:C4:8B:76:F1:95:4E:53:CA:6B:FE:71:4C:64:ED:D0:0A:2B
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       01F8C7C097DF3B18F5B0CA0BA0E4AD276D8E5180
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3430303a3a2f34302d3430203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:37 +0000
ROA not before:           Wed 22 Jan 2025 21:39:37 +0000
ROA not after:            Wed 21 Jan 2026 21:44:37 +0000
asID:                     264927
IP address blocks:        2804:3008:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl
                          rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f8:c7:c0:97:df:3b:18:f5:b0:ca:0b:a0:e4:ad:27:6d:8e:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:37 2025 GMT
            Not After : Jan 21 21:44:37 2026 GMT
        Subject: CN=08F388C48B76F1954E53CA6BFE714C64EDD00A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:85:30:af:b2:31:48:dc:ee:1f:d2:17:d3:
                    f7:80:bf:f0:82:9b:19:e1:3b:41:96:42:58:b5:7f:
                    4d:e2:57:9f:d7:dd:1f:0e:77:02:90:dd:5e:7f:46:
                    42:5f:ec:f3:77:03:e9:df:8c:9b:80:25:4d:47:eb:
                    d7:9e:59:a2:16:2c:af:d6:a4:f2:cd:b1:2f:cb:f5:
                    45:bd:be:e1:42:67:db:84:d0:c7:64:72:46:53:22:
                    b7:c2:cf:e6:29:4e:08:9c:a0:96:a1:1d:ae:70:67:
                    6b:3d:a5:68:56:fb:f1:bc:0c:8b:37:4c:73:73:40:
                    d3:87:a3:95:0f:46:d1:1d:30:e1:2f:84:68:17:a7:
                    95:32:b7:f1:a4:45:b5:a5:54:d4:7d:9b:b5:d6:10:
                    6f:90:b4:2d:81:99:de:e2:a2:2d:44:2f:2c:e5:36:
                    e9:34:33:f5:d8:d7:ad:14:c1:77:d8:d8:b5:a8:9c:
                    f2:65:ef:95:90:2d:05:c2:dc:a2:bb:e2:b4:ff:bf:
                    13:da:70:fd:5c:4e:17:5e:84:4a:c0:77:20:62:17:
                    76:85:5d:84:1b:de:ff:e9:5e:c1:65:41:d5:06:fc:
                    3d:86:50:59:9f:b9:06:cf:52:e5:06:10:4e:dd:f3:
                    19:54:33:7a:19:6f:78:ec:7e:0b:69:93:c6:6f:b8:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:88:C4:8B:76:F1:95:4E:53:CA:6B:FE:71:4C:64:ED:D0:0A:2B
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/323830343a333030383a3430303a3a2f34302d3430203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3008:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:7d:d1:18:49:e6:12:0f:ce:02:0c:c7:d1:ba:aa:ed:ba:
         81:ad:36:00:c7:75:b9:02:a4:f4:60:62:51:cd:b1:c9:ed:69:
         ed:f9:ff:c7:b0:ea:ab:b0:85:c6:5c:9f:c1:67:4f:b6:12:39:
         c2:5c:54:6f:40:0f:45:56:5e:7d:41:01:50:6f:9b:b0:fb:f4:
         28:60:46:a1:df:06:6d:c6:ab:52:5e:44:69:d0:a6:c7:d9:a2:
         02:fd:b8:b0:10:b1:13:72:a6:a9:73:2f:37:4d:5a:07:dd:b4:
         d0:dd:18:66:60:e7:08:35:33:c0:2e:3b:b1:e0:35:87:c5:6a:
         56:98:4d:22:71:0c:d7:e8:f7:1a:eb:ef:06:08:e5:85:8c:ab:
         c4:79:b4:f7:11:80:53:4a:0d:d4:36:a8:02:a2:97:fc:9a:b9:
         94:02:27:12:89:18:ee:9c:40:e2:95:2d:11:9a:f0:f7:26:a1:
         93:34:55:15:fa:bd:92:d4:e1:fe:17:c0:b9:87:e0:48:e0:40:
         9c:c0:a2:c8:1b:ab:56:f3:5f:50:ec:c5:0b:e4:8e:11:06:78:
         8b:13:de:69:9c:a4:fd:a4:ab:3a:51:0d:20:b5:eb:48:91:b6:
         b8:92:78:be:8a:ab:e8:43:b8:91:8e:46:22:88:ef:3d:3a:8f:
         02:e1:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:50:52 2025 by rpki-client