Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d3634203d3e20323632373739.roa
File:                     323830343a333231303a3a2f33322d3634203d3e20323632373739.roa (raw, json)
Hash identifier:          vVBHiHQ8GGJwmyHABQf7OSc+ZhUueHi2kKVSwwkolv8=
Subject key identifier:   BE:17:F6:36:13:AA:7C:87:0E:22:5E:26:04:BA:54:49:11:40:C9:C4
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       5C71F8AF9A43673945FD2A46D0F5F6FD9CA1F149
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d3634203d3e20323632373739.roa
Signing time:             Wed 19 Feb 2025 12:24:37 +0000
ROA not before:           Wed 19 Feb 2025 12:19:37 +0000
ROA not after:            Wed 18 Feb 2026 12:24:37 +0000
asID:                     262779
IP address blocks:        2804:3210::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:71:f8:af:9a:43:67:39:45:fd:2a:46:d0:f5:f6:fd:9c:a1:f1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Feb 19 12:19:37 2025 GMT
            Not After : Feb 18 12:24:37 2026 GMT
        Subject: CN=BE17F63613AA7C870E225E2604BA54491140C9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:a5:a6:eb:ca:ef:1e:e8:e3:ec:03:a0:a6:
                    e9:69:82:bf:fa:ba:e6:82:5c:22:a9:64:67:b1:70:
                    bf:f7:06:c4:a4:db:f2:51:22:66:6d:16:f5:5b:32:
                    ee:6f:af:ba:13:fb:54:95:9f:e6:cf:69:e1:4a:53:
                    32:f1:a5:5d:18:52:3a:43:7b:8e:c6:61:ed:28:64:
                    43:95:10:45:5d:8e:86:32:eb:c1:d3:08:d0:cd:24:
                    ca:16:e7:30:08:98:3e:9c:6a:5a:11:de:76:7a:3e:
                    ac:1d:e0:26:75:c1:32:4b:eb:90:81:21:4e:06:83:
                    d2:a9:e6:3d:8b:60:c2:3c:dc:e5:46:b7:39:8d:a1:
                    a6:63:51:67:97:f0:4b:31:4a:a4:93:74:a1:12:50:
                    3a:62:b0:b7:4d:76:a1:5b:67:04:ac:54:7d:12:c6:
                    b6:df:ad:d7:dc:c5:13:ad:5b:3e:3c:cf:38:03:df:
                    8e:ea:66:07:53:39:73:fd:06:46:96:6b:5a:2e:1f:
                    d0:fd:90:8a:02:ba:a2:88:cd:bc:b0:f1:0e:c2:0d:
                    f8:cf:cf:0b:d3:c4:1e:8e:0a:be:98:8b:96:2f:8f:
                    31:de:0d:0d:f4:f5:b9:ed:e0:4a:88:2d:89:f2:a9:
                    7d:e1:00:15:6a:ad:dd:ca:2a:db:58:cb:a0:e7:ea:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:F6:36:13:AA:7C:87:0E:22:5E:26:04:BA:54:49:11:40:C9:C4
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33322d3634203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:39:5d:57:f0:8c:a2:fc:31:66:05:a7:cb:00:b2:f5:b6:cb:
         be:0a:16:01:62:3f:ac:75:f0:a4:af:ac:1d:a8:0d:a6:0a:e9:
         24:c1:d4:f5:8f:6a:ab:54:31:36:1f:80:b7:71:df:87:92:35:
         31:86:21:77:c7:00:bb:ce:60:96:c8:0f:ee:b4:72:2a:65:01:
         fb:9f:50:bb:65:fd:52:8e:51:16:50:01:81:f3:3a:96:c0:e8:
         fd:c1:10:7e:b8:8b:67:0f:c7:17:d9:2d:5c:e2:6b:15:d4:69:
         63:d3:89:66:5d:a8:66:fc:cc:53:1b:b9:36:7b:15:ac:ed:40:
         4a:bc:83:4b:63:8f:31:36:43:ec:b3:4d:51:5f:d5:de:a6:73:
         3f:08:60:ed:1c:1a:d5:a9:23:ab:58:df:10:24:09:14:4f:20:
         71:0c:5d:5a:3c:56:58:41:c0:50:25:c3:33:92:db:33:2d:84:
         5e:4f:a6:d9:c1:e4:86:0c:61:02:4a:3a:37:ce:aa:03:04:07:
         79:33:1e:1b:4b:14:b8:47:46:80:bf:1c:07:07:15:ca:4e:e3:
         28:24:39:ef:7b:aa:9f:b6:cf:70:81:24:88:9e:10:4f:c5:62:
         19:03:bb:76:53:fe:4e:08:de:db:d2:f7:d0:46:22:d2:f7:f5:
         8c:17:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:02 2025 by rpki-client