Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa
File:                     323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa (raw, json)
Hash identifier:          NbkMQ6wLhjnqJhZg/Cgul52AvlT38EWwLkUGMs6qOwY=
Subject key identifier:   7A:74:1A:1B:38:11:CA:79:4F:62:0D:A5:8B:40:23:BB:FC:4C:20:62
Certificate issuer:       /CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
Certificate serial:       7BCFA5F070E53F659456C3B3D90688F40F46F8A8
Authority key identifier: 4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa
Signing time:             Mon 13 Jan 2025 14:11:29 +0000
ROA not before:           Mon 13 Jan 2025 14:06:29 +0000
ROA not after:            Mon 12 Jan 2026 14:11:29 +0000
asID:                     270417
IP address blocks:        2804:6bb0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl
                          rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:a5:f0:70:e5:3f:65:94:56:c3:b3:d9:06:88:f4:0f:46:f8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519
        Validity
            Not Before: Jan 13 14:06:29 2025 GMT
            Not After : Jan 12 14:11:29 2026 GMT
        Subject: CN=7A741A1B3811CA794F620DA58B4023BBFC4C2062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:40:33:be:2b:a4:9d:e4:54:89:56:2a:8b:
                    20:b7:54:c4:c6:87:d9:3c:33:d7:c9:f1:bb:7e:35:
                    5a:63:51:84:90:8a:0d:f9:fb:3f:01:30:69:04:d1:
                    5b:d0:1c:28:2e:88:67:d4:45:25:52:00:7b:2d:59:
                    3f:26:c7:85:09:bb:a0:03:88:60:2b:06:86:99:96:
                    ce:62:6d:8f:19:c3:2b:24:a2:ca:58:5f:08:22:46:
                    61:10:bf:6e:80:b9:80:e2:15:5d:35:e3:86:e5:09:
                    9c:63:a6:a2:03:ab:06:b4:aa:cf:75:1b:c3:30:6b:
                    4a:f7:e7:6e:25:7b:5a:0e:ae:05:f0:e6:0a:91:3a:
                    87:7a:fd:e6:fd:9a:5c:80:de:59:b1:a9:3f:df:9f:
                    ed:d1:80:ce:d3:97:87:1e:18:94:67:44:72:f0:f4:
                    e4:95:fe:88:f2:be:24:b9:f8:5d:ea:0b:a2:fe:c6:
                    5b:4a:58:e2:af:ad:f5:1d:50:91:fe:6a:64:e3:1b:
                    45:25:a3:eb:b7:67:8d:7f:e6:43:06:ee:69:5a:60:
                    c6:9d:f2:6f:83:4b:f9:95:55:f1:f6:6d:65:a4:07:
                    6f:62:41:37:4d:43:db:4e:e3:31:83:e6:59:bb:1c:
                    eb:b8:c4:39:4b:97:87:fd:b8:11:44:2e:b4:0a:d9:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:1A:1B:38:11:CA:79:4F:62:0D:A5:8B:40:23:BB:FC:4C:20:62
            X509v3 Authority Key Identifier:
                keyid:4D:E4:54:FF:1B:8B:F0:DF:2A:C7:FE:C8:E0:AD:68:78:2B:7D:85:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DE454FF1B8BF0DF2AC7FEC8E0AD68782B7D8519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/1/323830343a366262303a383030303a3a2f33342d3334203d3e20323730343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:f7:1e:d2:66:be:f9:06:b6:0e:ed:c8:b2:63:46:42:58:
         52:5e:5d:dd:e8:8c:74:e6:f5:5b:94:c3:02:f1:4d:4e:01:69:
         93:dd:3c:43:ed:7d:9d:cc:93:22:bc:a1:44:33:3b:d1:91:86:
         ad:ad:49:e9:a9:4d:c3:bf:97:e0:ce:46:cd:de:ee:0b:d6:ed:
         12:73:cc:e9:8a:34:50:4e:54:db:5d:b5:1d:ba:15:82:e7:d2:
         84:2e:85:e2:b6:13:9f:0b:22:ef:ff:97:3b:2a:56:dc:2f:de:
         53:68:66:37:26:90:49:63:1d:61:16:ce:76:18:2f:40:ae:e9:
         1d:43:81:34:55:6d:29:98:af:3a:93:72:80:ed:4f:18:14:54:
         6a:35:46:27:33:18:e7:af:e4:07:93:71:49:4d:10:af:dc:4c:
         e3:55:19:8c:60:4b:53:c9:c4:ca:b3:78:44:f2:90:ac:da:6a:
         90:09:48:90:d0:65:e4:ab:57:c5:bf:0e:94:29:34:7b:ec:a0:
         1f:4b:47:d0:bf:9a:4d:c7:d7:ea:1f:52:a2:f7:b8:98:2b:93:
         e5:e6:2b:12:f1:15:98:79:c9:70:ec:4d:5a:cc:f2:cb:19:b8:
         3a:b3:08:df:fd:00:22:40:06:37:67:a5:fd:cc:63:bb:fa:3f:
         d3:2b:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:33:27 2025 by rpki-client