Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa
File:                     323830343a323430303a3a2f33322d313238203d3e20323634313935.roa (raw, json)
Hash identifier:          tPsfdLFH2AZ0D5SdsAEop/8Y2WZH4B78cQpprt+Ua5Y=
Subject key identifier:   AD:27:E5:4E:9A:07:A0:3B:FC:EE:FF:EB:40:6F:EB:69:B6:3E:CC:DC
Certificate issuer:       /CN=21079D52F0579C141357012117FF7963C76BBFC2
Certificate serial:       23C2264FB0142CDE847911DF1CC64DEEB7DE2F3D
Authority key identifier: 21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa
Signing time:             Fri 24 Jan 2025 14:13:43 +0000
ROA not before:           Fri 24 Jan 2025 14:08:43 +0000
ROA not after:            Fri 23 Jan 2026 14:13:43 +0000
asID:                     264195
IP address blocks:        2804:2400::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl
                          rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 02:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:26:4f:b0:14:2c:de:84:79:11:df:1c:c6:4d:ee:b7:de:2f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21079D52F0579C141357012117FF7963C76BBFC2
        Validity
            Not Before: Jan 24 14:08:43 2025 GMT
            Not After : Jan 23 14:13:43 2026 GMT
        Subject: CN=AD27E54E9A07A03BFCEEFFEB406FEB69B63ECCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:91:53:26:a6:e7:25:8f:c0:53:ca:ae:c6:
                    c3:c2:9e:da:cd:bf:9f:b3:18:a8:8e:a9:ef:ba:30:
                    d7:6c:df:a2:78:63:32:d2:d1:77:83:09:9e:c3:e5:
                    18:e9:95:5b:db:71:8b:6a:ae:17:32:3c:eb:85:04:
                    6f:80:eb:9f:42:86:90:57:b9:b3:bd:32:61:57:00:
                    30:d0:06:b0:4d:3b:82:99:18:54:76:bd:0d:44:37:
                    5d:30:d0:c4:16:61:71:1f:46:f7:f3:f4:83:87:bf:
                    bc:11:f1:73:df:f6:6f:dd:b7:64:b4:4a:28:08:b4:
                    e5:2b:1f:f1:84:48:94:e0:3d:0f:00:63:d5:5d:29:
                    08:6c:e4:6a:92:a5:ce:22:bc:95:cf:c1:80:32:30:
                    47:51:dc:17:8e:78:b1:c0:ce:88:df:24:b6:57:6b:
                    51:c1:d3:2e:14:a2:49:03:ba:d9:3e:bc:62:6b:96:
                    30:1c:5d:3f:24:94:65:b1:f5:ec:4a:58:35:d1:8e:
                    ed:c3:32:aa:93:55:d7:d4:d9:9a:b0:f1:39:25:56:
                    49:b7:1b:24:ff:4e:aa:0e:45:56:70:09:61:78:d6:
                    7d:ed:ac:00:c7:4e:1d:92:0e:6d:00:8e:e5:b8:d8:
                    a7:bf:2d:ef:f5:32:c5:36:c4:0e:cb:28:6b:a8:47:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:E5:4E:9A:07:A0:3B:FC:EE:FF:EB:40:6F:EB:69:B6:3E:CC:DC
            X509v3 Authority Key Identifier:
                keyid:21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/323830343a323430303a3a2f33322d313238203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2400::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:95:5c:2a:e4:6d:52:c1:c2:9a:dd:02:eb:41:b3:04:88:
         e3:a7:73:79:c3:77:c9:61:d5:06:3a:89:77:9c:83:ec:2b:c8:
         54:d3:67:88:8b:70:a5:54:43:5d:7c:d9:3c:e1:b0:6b:e2:e4:
         c6:06:da:e2:1a:52:38:56:3e:46:2d:bb:db:e8:22:b0:9f:c3:
         27:59:1a:f5:6e:22:a9:47:8a:58:ad:77:3e:6d:3f:93:81:65:
         24:e8:99:0c:6f:d4:21:a1:fc:b5:c5:90:90:c3:6f:e6:28:65:
         e0:6d:c3:20:14:dc:e1:23:3c:50:d0:56:fc:8f:ce:b1:7e:cd:
         c0:18:9f:b7:32:99:4f:e7:9c:04:ef:83:ee:f1:45:72:66:97:
         5f:ef:51:6c:b5:84:5b:95:1a:1c:31:4c:f5:04:a4:a0:f0:2a:
         00:b1:ec:79:31:3b:78:7e:3f:cb:ce:da:86:d1:d2:ef:ea:a5:
         74:d7:55:b8:ce:b0:27:f7:24:26:f7:4c:16:74:2d:a9:75:a9:
         2a:d1:b3:98:8c:da:55:1e:f7:20:ca:da:42:b0:c7:01:5f:bd:
         65:8c:b6:2b:24:16:3c:ba:05:d2:58:7d:75:dc:a9:e6:03:36:
         00:ac:91:6b:11:f1:2b:b1:1d:92:7f:e8:b6:6e:2e:ff:ec:95:
         ba:fb:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:14:35 2025 by rpki-client