Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
File:                     323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (raw, json)
Hash identifier:          89/jOPHsLY2gsEjmXvUrzzwNqHwgFL0Iyq8uBdggugU=
Subject key identifier:   32:62:1B:41:AC:7B:60:1F:30:AE:2A:1A:81:4D:7C:8E:3F:CB:1A:D4
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       4BEDDB76E09425818E25B6A3BBCF21565678C90B
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
Signing time:             Tue 12 Nov 2024 16:19:24 +0000
ROA not before:           Tue 12 Nov 2024 16:14:24 +0000
ROA not after:            Tue 11 Nov 2025 16:19:24 +0000
asID:                     269425
IP address blocks:        2804:6464::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl
                          rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 13:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:db:76:e0:94:25:81:8e:25:b6:a3:bb:cf:21:56:56:78:c9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Nov 12 16:14:24 2024 GMT
            Not After : Nov 11 16:19:24 2025 GMT
        Subject: CN=32621B41AC7B601F30AE2A1A814D7C8E3FCB1AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:33:e5:36:5e:5d:ff:39:b5:cf:2a:ec:45:
                    1f:e1:3b:23:91:7f:9c:46:18:7f:5f:f5:65:fd:1c:
                    f4:3b:85:19:80:ac:e7:35:42:a5:b4:65:90:cd:8b:
                    6d:08:5e:5e:87:fa:20:52:06:3f:31:09:06:d6:a5:
                    79:fc:72:5c:3b:55:82:56:56:3f:4d:fc:c1:62:ae:
                    31:16:bb:e6:e6:c2:78:56:ee:ed:a3:a2:21:19:d8:
                    79:fd:0c:f8:01:32:30:a3:67:17:38:63:fc:f9:4b:
                    9b:1c:f9:25:b3:69:d6:f0:60:02:7f:2a:f2:ef:22:
                    57:79:cf:45:4c:53:0b:f8:00:a4:86:70:47:3a:2e:
                    a7:36:80:7b:5c:19:c6:97:ee:2f:7b:3f:2e:1d:09:
                    28:7b:16:1a:fb:94:db:47:a5:f1:31:47:a8:db:15:
                    5e:04:e5:71:27:12:b4:31:a1:95:fd:cc:3a:87:81:
                    9d:f4:e1:ba:e0:b6:fa:1c:55:aa:58:5a:53:f9:1b:
                    90:01:70:94:ca:a2:e0:49:4a:55:5a:1a:9b:68:df:
                    ee:a3:c8:94:19:71:7f:cb:4b:3a:77:00:bb:3a:95:
                    f7:74:19:cd:10:3e:a2:8e:25:9a:a3:64:59:12:ab:
                    ca:4a:2a:38:ef:58:89:be:b7:9f:44:84:3a:96:9c:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:62:1B:41:AC:7B:60:1F:30:AE:2A:1A:81:4D:7C:8E:3F:CB:1A:D4
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:eb:31:8b:82:4c:3b:6a:81:fb:66:17:47:5a:6a:6e:a1:
         ab:3b:1e:24:55:16:5d:f7:15:02:0a:85:40:93:bb:fa:43:99:
         57:10:63:ae:c1:52:81:1b:60:17:cc:f7:e5:04:0e:fe:f5:6e:
         0b:ef:8f:c5:b0:6f:84:b4:22:bf:98:c5:6a:42:b8:f6:4b:f2:
         dc:9f:20:70:b7:14:f0:00:f2:f8:da:c9:df:26:d2:3b:e8:22:
         1f:16:a5:db:f7:e8:ad:66:fb:14:c7:c6:b6:3c:54:e5:ef:8e:
         2f:59:e6:ab:76:fe:a1:88:b5:49:68:20:ac:f1:6b:90:d3:d8:
         00:24:86:9d:6f:f0:1f:0d:62:07:1f:8c:d2:73:f8:4e:97:be:
         0f:3d:3b:06:44:bc:10:f9:11:7e:f7:22:fe:3a:26:b9:40:99:
         a6:d2:fd:3c:5f:68:8d:0e:88:cb:23:49:17:c0:6e:00:de:53:
         b6:6f:70:f0:f1:4b:c2:04:7b:b4:ab:fc:f6:79:82:98:1f:92:
         9c:66:d4:0e:dd:f4:bb:c6:86:01:31:83:56:58:52:c8:5a:80:
         9c:a2:dc:dc:ba:05:66:b6:19:7e:d8:9c:e7:b1:29:4d:2c:ea:
         04:9b:ce:f9:6d:94:9f:05:82:fc:fb:a8:91:e4:f4:1d:30:6f:
         27:ae:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:40 2025 by rpki-client