Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
File:                     323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (raw, json)
Hash identifier:          ONO6X+6NuVSvfJJ/zLkx2HnzD66Z/V9kcr2DdTvxHGw=
Subject key identifier:   C6:12:24:FF:59:FC:0E:11:2E:37:F0:81:F2:1F:A8:86:66:7A:56:CE
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       09F21B755622483AFBB322F7709EA74C69D597BE
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     264342
IP address blocks:        2804:2678::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f2:1b:75:56:22:48:3a:fb:b3:22:f7:70:9e:a7:4c:69:d5:97:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:bd:7e:98:7e:ba:fd:bf:81:5d:dc:62:60:
                    10:a4:55:79:78:a4:c3:5c:ad:89:a9:5b:63:47:d6:
                    6f:56:49:75:a3:6c:d6:e4:13:98:bd:e4:31:9a:77:
                    0a:78:94:05:c2:d3:7d:64:b2:88:05:f1:ed:0a:49:
                    c3:09:3f:0f:f5:4b:84:d2:36:5e:d6:ef:03:71:e4:
                    fb:86:52:ff:96:97:f4:fd:03:92:62:93:2e:36:bd:
                    8c:38:2d:19:6e:e0:3b:1a:bf:1a:67:44:1d:25:69:
                    e7:70:60:52:18:cb:bd:26:ec:60:3a:87:1c:9c:31:
                    b1:b7:58:e1:b8:e4:95:e3:14:93:cb:c1:d9:47:dc:
                    b8:e8:7b:4e:0b:0f:b7:4b:bd:42:36:6c:96:11:f0:
                    27:e0:ac:bc:79:e5:fd:24:4c:04:37:fa:e1:0a:5e:
                    54:6c:d7:da:69:59:2d:6e:f2:4c:b4:e9:72:f5:4d:
                    f3:5d:23:c5:f1:a4:c9:94:18:4d:14:3c:0a:40:cd:
                    76:1c:35:d5:92:08:9d:fa:e7:30:df:cc:4f:d5:4b:
                    59:bd:37:41:d2:cb:00:11:86:3c:44:ef:0d:e8:ed:
                    ce:04:93:6c:97:0a:1f:d9:09:5d:d1:d8:60:0d:60:
                    fc:19:9f:11:06:f3:89:b9:4a:81:b0:38:9c:3c:f0:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:24:FF:59:FC:0E:11:2E:37:F0:81:F2:1F:A8:86:66:7A:56:CE
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2678::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:32:7b:5b:33:5c:34:23:17:a5:18:0e:0e:3a:db:54:a6:
         1d:34:cb:20:48:22:ca:bc:30:4c:dd:cb:36:66:a3:57:de:88:
         ed:cc:ef:13:d3:87:58:13:fc:3c:d2:e7:21:79:64:9f:24:35:
         21:49:18:03:f6:59:4c:a6:e2:89:21:5f:d7:c3:16:0f:6a:75:
         7d:8e:11:24:90:7c:48:5f:00:b2:a6:95:f0:6d:85:e4:65:4e:
         78:2e:b1:f2:c7:67:a6:69:9b:c5:7a:61:f1:65:8a:e9:74:cb:
         8d:75:7d:d9:b2:1f:81:b6:73:c1:1e:a3:1a:98:ad:e7:b7:a9:
         84:94:ba:53:71:1b:72:64:0f:04:46:c3:ae:b4:77:f9:ce:62:
         e7:81:3c:16:27:b7:5d:40:34:7d:0d:b3:c8:59:58:5e:8a:f8:
         e8:0b:ad:b8:8f:27:65:08:1f:cd:09:f8:ef:98:d8:24:b2:38:
         bc:b3:33:1f:14:b2:8f:ef:b8:dd:b9:43:83:2c:32:56:92:60:
         cd:3e:18:df:40:5b:08:41:0e:26:1c:b7:a7:28:74:f7:0f:15:
         79:be:48:86:c6:c9:4c:5f:0e:58:b8:29:1a:4f:44:90:ca:6e:
         7f:48:be:7b:7b:2f:cd:af:84:a3:69:52:ae:eb:44:7f:61:7c:
         5e:14:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:21:13 2025 by rpki-client