Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33322d3332203d3e20323637333334.roa (raw, json)
Hash identifier:          f7qVukWhN/HcM7JZgQ0Ol0lmU/9V5IyWRf5UawMAGSQ=
Subject key identifier:   C0:CC:19:A9:00:6C:B8:55:3D:0B:C3:AD:2E:45:88:8D:38:B3:CF:86
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       4C42164818B18B19F397CE02B14403DCFE9C8CAE
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:16:48:18:b1:8b:19:f3:97:ce:02:b1:44:03:dc:fe:9c:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=C0CC19A9006CB8553D0BC3AD2E45888D38B3CF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:a8:95:04:d2:ee:52:89:58:02:9a:a2:54:
                    bf:1a:48:c4:61:eb:38:ec:19:6f:fd:f0:05:2c:c9:
                    00:80:63:b6:da:1e:06:62:b1:09:ac:5c:ac:63:90:
                    80:f0:38:1c:6d:b3:00:06:f5:9a:06:00:8e:13:d9:
                    76:3b:69:87:20:39:20:9b:89:99:20:41:53:65:d4:
                    12:f8:e7:3f:81:f8:88:16:79:d4:6f:27:f9:65:06:
                    ba:53:64:31:5f:0f:9e:59:72:08:62:ea:07:de:d6:
                    1e:b5:9d:3b:0f:e1:44:15:a6:81:82:3a:4a:3e:13:
                    b8:2c:72:fd:81:e7:81:fd:cb:67:a5:23:02:bc:8f:
                    60:7b:8a:d7:f5:26:0c:1a:35:7a:25:6c:61:31:6f:
                    58:50:8e:46:d1:a0:08:8c:dd:09:a0:9d:e7:4d:f7:
                    f9:b4:24:ad:ef:0c:36:e9:b1:d2:d2:ec:2e:94:e8:
                    ce:0e:b0:92:53:3f:12:d3:5a:4a:43:3f:e7:3e:c1:
                    85:2d:b3:5e:f8:5e:91:8b:d8:ab:4a:fe:6d:3c:39:
                    da:ad:1b:91:e5:83:17:a6:d2:2a:18:8c:2d:f2:e6:
                    5e:27:24:b5:ec:5a:bc:03:ea:4a:19:90:19:ec:e5:
                    67:ee:38:3f:00:9f:f4:22:01:f5:2a:b5:ab:35:78:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:19:A9:00:6C:B8:55:3D:0B:C3:AD:2E:45:88:8D:38:B3:CF:86
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a3a2f33322d3332203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:21:ac:30:af:e9:e5:e4:3c:0f:92:d6:0d:ca:a8:39:1d:86:
         67:ff:22:7d:8f:ba:9f:97:25:96:86:84:c6:46:3b:d4:53:61:
         39:f3:80:ed:8f:a6:78:3d:8d:ef:a4:f5:0f:4d:5b:78:3a:a7:
         98:0b:5c:11:e2:a6:11:c3:ed:e5:49:93:dd:a9:6d:fc:0f:8b:
         b2:f1:fe:a9:12:56:a8:df:07:65:f5:0e:20:66:7a:58:f9:18:
         4e:b4:ac:d5:de:a5:af:b0:5a:33:2a:f5:ba:91:e1:3e:92:b0:
         5d:c7:f6:21:bc:38:5a:8d:7e:58:aa:e2:0c:d7:8d:fa:2f:c0:
         ef:43:6e:17:29:0c:a2:93:cd:4e:5a:d9:f2:5c:23:ad:7a:32:
         a6:d5:f8:d7:8a:12:7d:20:f5:10:30:93:08:03:09:55:ba:16:
         d8:72:dd:a4:10:f8:89:48:dc:2c:27:80:21:72:df:04:91:b7:
         db:ee:d6:08:65:3b:8f:2c:7c:cc:dd:66:ef:23:10:fa:1b:7c:
         eb:95:fa:99:d4:df:0e:8a:e9:08:4f:4d:42:7b:5c:ee:05:f0:
         33:00:a8:93:af:4a:25:fb:1b:75:b7:3e:7f:b2:ad:87:d7:3c:
         dd:b4:8d:9e:5b:85:40:c8:87:ef:d2:e1:12:34:31:25:c2:49:
         83:bb:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:22:34 2025 by rpki-client