Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323230303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a323230303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          6SbahL/iqVTyG2EeaWbc3tD5UoYd3l0e9vQCyil6HZ0=
Subject key identifier:   53:38:9D:71:AE:CC:A3:2C:0D:8C:BF:E6:F3:C3:DA:7B:55:CB:ED:46
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       1A4C762974DA682223B7D5204BD2DD98D0600F5A
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323230303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:24 +0000
ROA not before:           Mon 17 Mar 2025 17:52:24 +0000
ROA not after:            Mon 16 Mar 2026 17:57:24 +0000
asID:                     263629
IP address blocks:        2804:104c:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4c:76:29:74:da:68:22:23:b7:d5:20:4b:d2:dd:98:d0:60:0f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:24 2025 GMT
            Not After : Mar 16 17:57:24 2026 GMT
        Subject: CN=53389D71AECCA32C0D8CBFE6F3C3DA7B55CBED46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:8e:81:56:02:80:6b:f3:ad:c6:56:06:74:
                    47:70:ec:cb:88:db:cf:38:df:c7:21:58:9d:ab:38:
                    ac:0a:97:c6:e6:6b:a1:ca:0d:b1:3d:ef:0e:3e:c6:
                    4b:62:df:1d:be:82:f4:9e:5b:d0:0b:fc:05:30:58:
                    71:7a:8b:a2:43:cc:7c:84:bc:0e:2f:be:b0:18:e0:
                    01:95:86:9f:17:35:9d:9d:dc:00:6f:98:98:e5:78:
                    b5:12:6b:25:0d:f3:62:2a:66:36:a8:bc:f3:c3:0f:
                    fa:a3:e9:9e:40:eb:d5:36:22:72:7d:13:23:f6:8a:
                    69:72:77:bf:f5:9a:f0:29:aa:fc:57:8a:93:18:f8:
                    1d:17:23:73:c9:37:06:b5:da:32:93:fc:cf:2a:1f:
                    43:73:77:72:36:92:10:30:3b:8a:55:54:ac:bf:01:
                    5a:1f:dc:13:79:08:91:42:f8:e0:4c:95:65:f2:0b:
                    68:cc:0d:d1:23:59:3d:51:2d:69:02:47:64:fc:1d:
                    ba:b0:f3:c5:01:d3:bd:44:a6:71:c4:95:9f:70:d8:
                    ea:0d:16:81:ae:32:39:09:0c:3e:3c:4f:0c:39:7d:
                    de:cf:36:fc:23:98:80:27:44:cb:f2:4b:c5:39:cf:
                    85:41:07:70:6c:52:50:ae:6f:43:5c:ae:bd:00:e8:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:9D:71:AE:CC:A3:2C:0D:8C:BF:E6:F3:C3:DA:7B:55:CB:ED:46
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323230303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:31:5b:d2:7c:4b:46:51:3b:d3:cb:83:6d:38:59:e5:f5:
         f7:e4:f0:4a:da:5e:00:3e:be:92:d9:4b:7e:be:5c:a1:80:bd:
         ab:85:7e:9f:3e:f7:ef:d9:ad:f1:e1:6d:b4:78:a5:4d:46:b6:
         1c:da:69:53:e0:e8:05:58:ec:1b:40:18:f7:25:9f:74:eb:1f:
         73:49:78:38:ed:98:60:48:f0:cc:c4:ac:76:3a:09:e3:f1:cb:
         1c:d8:b0:c3:c6:27:df:64:44:65:43:cb:63:2b:ba:b0:9a:c5:
         9f:7d:ca:a9:08:41:a6:0a:5f:61:9b:ab:e6:66:b7:50:a9:0b:
         3f:fb:ce:56:04:95:01:47:34:4e:2f:eb:2c:d0:22:35:3f:ff:
         c4:da:62:8f:00:3d:71:a0:6c:c8:fb:18:7f:40:a6:95:01:2e:
         5f:0f:fd:d2:93:2a:c3:73:09:8a:37:a9:ed:bd:95:23:4a:d1:
         96:85:d4:be:f0:ad:9d:4a:2b:a4:87:64:4b:85:a3:dc:bb:55:
         53:da:63:4f:ac:6b:d7:79:dd:50:44:b3:c4:59:f9:d2:31:05:
         43:a7:fa:27:00:c0:40:b2:cf:fe:a7:3d:e7:7d:57:fc:8e:21:
         da:0f:43:88:a7:c8:20:6a:34:89:27:74:90:82:f1:68:39:a9:
         43:41:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:16:09 2025 by rpki-client