Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          RAyIxOZU7hoJ/Wjpl8ocYzpENnBzuhlY/sbZTZmQioI=
Subject key identifier:   40:A7:88:6B:79:BC:F0:DF:BC:DA:A8:5C:01:54:91:8A:9A:2C:B7:4F
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       4FBEA5FFB192F5F8DF021175167BC12D4B4603BF
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:23 +0000
ROA not before:           Wed 05 Mar 2025 20:51:23 +0000
ROA not after:            Wed 04 Mar 2026 20:56:23 +0000
asID:                     264344
IP address blocks:        2804:2674:4200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:be:a5:ff:b1:92:f5:f8:df:02:11:75:16:7b:c1:2d:4b:46:03:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:23 2025 GMT
            Not After : Mar  4 20:56:23 2026 GMT
        Subject: CN=40A7886B79BCF0DFBCDAA85C0154918A9A2CB74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:cd:b5:0f:bb:17:8e:7b:ea:4c:9d:f1:6f:
                    72:5d:a7:ed:5d:98:e7:95:7b:e2:26:4b:2d:90:43:
                    17:1c:49:a5:31:96:57:1f:49:37:59:74:a3:e2:71:
                    ff:5d:5b:5a:4b:cf:50:03:09:b1:9d:13:11:c4:8f:
                    f0:af:f9:8e:9f:8a:6b:37:d6:44:12:f7:a6:88:fd:
                    43:2d:65:59:ed:4b:b1:2b:4a:ed:e4:1e:29:76:88:
                    f0:53:de:80:c8:c6:d7:a0:a6:48:f1:43:62:90:61:
                    6e:74:0e:9c:26:57:c2:39:66:29:83:2a:1d:9b:38:
                    1c:0a:fc:9b:b5:ea:4c:bd:61:a2:3e:78:4f:de:30:
                    6e:a7:37:9f:cb:c2:5b:15:e4:f8:c3:7c:b1:bf:de:
                    e7:4d:a4:30:15:31:aa:26:d6:a2:fa:c3:45:3f:ed:
                    52:50:c8:65:f1:c6:87:c1:79:28:83:c5:f3:4d:ec:
                    4d:0e:c0:23:29:0d:b2:c1:ce:b2:a3:0a:49:18:0c:
                    59:65:06:13:e7:d1:19:62:96:bb:bb:07:90:a1:c9:
                    17:84:c2:b3:37:00:4b:37:d0:34:6d:84:f2:da:4f:
                    3e:6b:ff:44:02:30:c6:ab:72:ee:b3:77:b1:0b:2b:
                    f8:31:58:5d:7f:7e:f6:37:3e:1c:d8:15:77:58:b6:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:88:6B:79:BC:F0:DF:BC:DA:A8:5C:01:54:91:8A:9A:2C:B7:4F
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343230303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4200::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:bc:61:90:ad:c8:75:ac:46:30:33:cd:06:13:46:20:7d:
         d2:5d:ea:ca:39:e2:c5:ff:26:54:12:3f:87:86:28:f7:f9:da:
         58:62:a8:e7:a3:31:ba:f8:6c:00:f7:bb:99:25:ea:85:a8:f6:
         3d:4c:bd:c8:6e:95:91:40:74:9d:de:38:24:d7:6e:6b:e2:b1:
         81:55:3d:12:0a:fe:ac:16:1d:a9:44:45:7a:3f:36:2a:b7:5b:
         d4:b9:05:c3:84:f1:7e:03:41:ec:40:b5:49:18:e6:e7:23:8e:
         3f:33:ed:d1:45:f7:1b:74:7e:b2:84:a1:81:76:e2:66:a6:25:
         2d:a8:fe:1c:f7:8e:4e:3d:74:40:8a:65:92:9a:dc:e2:9e:e4:
         8a:9d:08:3e:42:04:ac:09:82:88:44:c6:a9:4c:a6:c4:04:ca:
         19:b4:cc:6e:61:ec:b7:8b:82:57:7e:dd:6e:d1:8b:86:3c:38:
         e9:0c:db:99:4b:70:f8:3b:5b:64:bb:e5:e2:8e:bd:8d:79:3a:
         5b:b3:8d:e1:2f:a1:aa:21:e5:d7:d9:0c:99:01:fd:39:14:81:
         15:c7:83:a5:e4:06:94:0d:ad:5c:c5:ec:34:25:1a:47:00:86:
         c1:2d:d8:e9:63:13:bc:69:92:48:8d:69:56:ce:b2:b3:d7:93:
         7c:64:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:15:01 2025 by rpki-client