Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
File:                     323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (raw, json)
Hash identifier:          TIoTmELcEddVffZPfrZLwAU/FNPMFP3seaCMW/N+Zb8=
Subject key identifier:   E6:43:CA:ED:7F:AE:BB:82:8E:CD:C3:A0:08:1E:7B:34:A2:9D:6F:33
Certificate issuer:       /CN=4474057A30776C0D117A5958EDE5DB8636FA5342
Certificate serial:       67CBDC655B7E96FBD869C0F72A389133D5CEC368
Authority key identifier: 44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
Signing time:             Thu 06 Mar 2025 19:46:02 +0000
ROA not before:           Thu 06 Mar 2025 19:41:02 +0000
ROA not after:            Thu 05 Mar 2026 19:46:02 +0000
asID:                     262433
IP address blocks:        2804:2064::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl
                          rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 07:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:dc:65:5b:7e:96:fb:d8:69:c0:f7:2a:38:91:33:d5:ce:c3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474057A30776C0D117A5958EDE5DB8636FA5342
        Validity
            Not Before: Mar  6 19:41:02 2025 GMT
            Not After : Mar  5 19:46:02 2026 GMT
        Subject: CN=E643CAED7FAEBB828ECDC3A0081E7B34A29D6F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:48:fa:7e:ae:1b:a1:f7:f2:30:0f:e3:93:
                    10:36:72:b7:57:f6:82:cc:c4:80:b7:26:65:c4:dc:
                    4f:b4:03:51:c8:fd:ff:4a:0f:f5:ae:8a:27:98:b7:
                    05:f3:ba:e0:f5:a9:74:f9:ef:2b:55:d4:cf:5e:2c:
                    b8:1d:f6:ca:dc:cb:ee:e1:86:56:02:f4:bc:c8:8d:
                    5f:78:29:7d:19:52:54:0e:fc:0e:47:91:7e:d2:3f:
                    a1:60:c9:4e:18:72:f2:f4:29:be:60:78:43:22:d9:
                    c8:37:1f:8f:65:9a:85:79:a8:ee:bc:a5:aa:b9:9d:
                    db:09:fd:15:49:48:db:9f:46:1c:31:64:9a:c6:1d:
                    2d:d3:58:88:fd:ac:5d:8e:70:d1:9c:c5:bc:90:ff:
                    80:27:57:31:b4:ea:ea:72:6d:df:83:0b:9d:f2:0e:
                    bf:fe:93:dd:e4:46:4c:1d:d6:9f:2c:f0:8c:0b:d5:
                    5e:fc:d6:37:70:a3:21:39:1b:00:87:1f:ec:82:2a:
                    9d:14:3a:1f:4a:3f:94:d9:d3:ba:6d:18:7c:23:f1:
                    d0:7f:0e:31:21:dc:20:6a:fb:28:c6:88:ea:8f:02:
                    71:f2:07:d7:76:25:fa:1d:00:8d:46:7a:19:45:2d:
                    30:ed:c9:6d:b0:84:68:c3:ce:71:87:e8:c3:18:69:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:CA:ED:7F:AE:BB:82:8E:CD:C3:A0:08:1E:7B:34:A2:9D:6F:33
            X509v3 Authority Key Identifier:
                keyid:44:74:05:7A:30:77:6C:0D:11:7A:59:58:ED:E5:DB:86:36:FA:53:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/4474057A30776C0D117A5958EDE5DB8636FA5342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4474057A30776C0D117A5958EDE5DB8636FA5342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/1/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2064::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:63:3e:05:22:aa:10:d7:5a:d1:14:3c:73:52:34:da:f0:
         37:98:ce:9c:8a:e1:3e:95:bf:e0:d3:2c:e0:80:db:ab:7d:86:
         4d:e5:17:42:83:d9:13:22:0a:84:2d:e4:a7:36:71:86:de:de:
         06:1c:c8:82:b8:22:e5:ba:0f:46:b6:43:d2:1a:9a:c6:d5:f8:
         a0:11:ef:12:2a:90:73:e9:07:76:07:97:21:a7:42:87:1f:56:
         a8:3d:d5:41:ba:49:a1:38:fc:50:94:d6:7a:3d:91:31:d3:90:
         da:92:a3:5f:98:47:aa:80:7c:a1:5b:01:98:d6:6c:ca:ae:2b:
         9b:52:e0:60:b1:60:25:b2:61:a2:84:49:b0:4a:38:56:77:91:
         62:0f:b4:cd:8a:2e:21:d2:1a:5c:2f:ce:53:69:25:e0:3e:30:
         5c:c9:b4:81:ae:f9:a9:81:ac:8a:0b:41:56:cc:c5:97:5e:79:
         d7:8e:3f:8c:72:f0:30:2d:cc:cf:d3:e2:fe:3f:df:93:ad:17:
         6e:7e:47:e0:e9:03:31:53:da:ed:30:ec:c4:48:ae:9d:73:96:
         2c:4a:a4:5d:9b:38:75:45:27:02:b8:7a:d8:2c:d2:e5:a1:15:
         43:e3:66:e9:37:9a:37:68:e4:f4:6c:1d:bb:73:04:d0:3e:b4:
         c3:45:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:31:57 2025 by rpki-client