Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33342d3334203d3e20323639363536.roa
File:                     323830343a363765303a3a2f33342d3334203d3e20323639363536.roa (raw, json)
Hash identifier:          4+AiLrwHlVtxA2XNoSu/TBZyIlveL9Mse+ldooS83wo=
Subject key identifier:   B7:AA:88:75:1B:9B:B4:8A:29:49:0A:0E:42:7B:90:D8:9C:18:8B:7A
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       3AF11C4F87E66B063B7AD9826452D4758355B25D
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33342d3334203d3e20323639363536.roa
Signing time:             Thu 05 Dec 2024 18:15:24 +0000
ROA not before:           Thu 05 Dec 2024 18:10:24 +0000
ROA not after:            Thu 04 Dec 2025 18:15:24 +0000
asID:                     269656
IP address blocks:        2804:67e0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f1:1c:4f:87:e6:6b:06:3b:7a:d9:82:64:52:d4:75:83:55:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Dec  5 18:10:24 2024 GMT
            Not After : Dec  4 18:15:24 2025 GMT
        Subject: CN=B7AA88751B9BB48A29490A0E427B90D89C188B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:71:5a:a4:de:91:29:43:39:a3:15:91:f0:
                    c9:c6:83:2e:8b:78:4c:20:5b:b4:32:4c:34:83:26:
                    e4:fe:b8:49:2b:cf:27:04:7d:b8:de:89:23:1e:ce:
                    71:b9:2e:bf:1d:b1:c7:bd:60:7c:28:62:3d:21:f9:
                    97:5c:e2:46:b8:a1:0d:fc:e8:22:b9:77:60:9d:e0:
                    20:ea:fc:f5:3b:5c:fa:6b:04:03:4f:5a:a6:42:13:
                    1f:c0:d2:36:15:9e:58:c8:fb:a5:15:e8:9b:f7:2f:
                    c2:b0:91:cf:8e:5f:1d:02:a1:26:47:a5:7a:5d:11:
                    d1:14:11:e5:9c:07:42:38:73:0c:2f:8a:96:07:b9:
                    a2:21:b5:f1:1e:82:5a:7f:f0:ae:6a:df:e4:0b:53:
                    05:f7:55:af:08:7f:61:a9:40:bc:0d:c3:f0:56:85:
                    8c:5b:87:f8:a7:d6:22:68:f3:20:30:bf:ed:94:be:
                    61:d0:b5:78:a6:12:00:43:3f:7f:8c:3c:f6:0c:83:
                    a1:6e:e7:91:27:9e:dd:04:89:56:69:19:ec:c5:d7:
                    2e:52:71:c4:02:82:b7:a0:92:f0:a0:53:29:bd:43:
                    ff:2a:d6:10:20:41:9a:e3:b6:62:ec:ec:4e:b5:63:
                    67:c8:63:d9:01:52:3a:b8:f0:c5:d2:64:ff:78:1c:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:88:75:1B:9B:B4:8A:29:49:0A:0E:42:7B:90:D8:9C:18:8B:7A
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a3a2f33342d3334203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:f3:0d:a5:00:a6:a3:21:f0:8b:44:46:f9:c6:b2:76:f7:15:
         94:7f:ae:99:34:cc:e6:bd:0c:20:42:35:c5:ed:d3:07:7d:8e:
         c8:22:4d:c3:85:3e:a8:39:f7:3b:08:9a:0c:27:8e:c0:88:0a:
         91:75:17:cc:82:9a:55:ad:3e:ca:f0:f2:3d:91:7c:d5:fa:e0:
         18:e0:f4:f3:05:67:f5:9f:c5:95:b3:27:71:bd:2a:c9:68:36:
         66:81:90:6b:b6:80:11:c5:69:cc:3a:1b:8b:fd:d4:a2:89:7e:
         01:b2:36:5c:96:a7:35:1b:87:e7:e1:b5:7a:b9:32:d6:fb:3a:
         f4:3c:cc:c8:ad:56:d2:bf:d5:30:1e:f6:86:2b:3a:52:40:6e:
         27:71:d1:ad:1e:1f:51:75:48:59:38:74:21:16:b6:d8:f2:b1:
         20:4c:36:01:0d:1a:31:21:ab:53:e7:90:09:e5:81:e6:fa:84:
         a0:42:00:5a:ee:ba:3a:73:8f:46:9d:b3:cd:d5:56:86:03:e7:
         47:9d:db:7b:71:cf:5f:47:9f:d7:29:47:8d:dd:32:0a:3e:5a:
         b9:64:d7:9c:cc:98:1f:0c:42:ed:10:27:09:2d:28:31:f2:1d:
         db:35:29:37:81:4c:eb:e1:d3:ae:2a:ed:13:89:42:3c:ca:3e:
         1a:ec:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:39:42 2025 by rpki-client