Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          +UV5x9hlxh/er6f6rV6q0ifxqdyWYGz7sDJZlHeTtmE=
Subject key identifier:   AF:79:C2:C2:5C:6B:B8:74:20:6B:72:38:B4:2C:32:B9:8B:D5:26:4F
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       5D1653C20BBAB6D4A4704E1A13957D6BBF9799CA
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:14 +0000
ROA not before:           Mon 17 Mar 2025 17:52:14 +0000
ROA not after:            Mon 16 Mar 2026 17:57:14 +0000
asID:                     263629
IP address blocks:        2804:104c:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 06:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:16:53:c2:0b:ba:b6:d4:a4:70:4e:1a:13:95:7d:6b:bf:97:99:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:14 2025 GMT
            Not After : Mar 16 17:57:14 2026 GMT
        Subject: CN=AF79C2C25C6BB874206B7238B42C32B98BD5264F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d3:64:7e:ec:b9:25:b2:e6:1b:a4:fb:fb:3f:
                    0d:ff:41:dc:f8:20:af:c5:28:12:2e:23:41:10:52:
                    f5:23:2c:ba:45:ac:f4:8d:47:d4:60:0e:d0:67:d4:
                    05:aa:41:28:d9:a4:2e:29:17:57:e1:c4:9a:d4:e9:
                    56:fc:66:33:5b:f9:e6:a8:a9:5a:a9:6d:1f:6c:63:
                    6b:b9:c1:ea:d6:cf:e3:05:e4:9c:36:f7:47:07:07:
                    2a:ac:13:c8:d1:a3:7c:07:3f:47:0c:0e:9b:6f:b0:
                    3e:39:5f:1e:df:8b:de:b1:ef:0c:a9:f8:9f:b0:99:
                    f0:3e:2f:e1:e9:4d:be:0f:b9:98:b5:2a:9a:fd:8a:
                    16:96:39:24:57:3b:74:32:63:ea:2a:01:e5:fd:c4:
                    9d:f0:55:ad:e8:e1:5b:f8:67:a4:cd:7e:05:b1:a9:
                    d6:cc:b9:c7:d2:89:54:77:1b:58:fc:1b:ff:ed:0a:
                    e7:20:5a:bd:e0:4b:c9:36:ff:58:6c:14:b3:09:88:
                    14:1a:8a:10:5a:c4:d3:17:5d:f6:da:05:1f:f8:65:
                    58:8c:57:0a:65:d8:84:e2:3e:60:af:f5:20:6a:ab:
                    29:ee:c0:24:5a:7e:ef:9f:e4:bb:71:83:bb:34:ee:
                    8c:50:3c:d4:f0:d3:88:8a:c8:ed:42:4a:fd:63:c4:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:C2:C2:5C:6B:B8:74:20:6B:72:38:B4:2C:32:B9:8B:D5:26:4F
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:6e:f9:e4:f4:f4:b5:db:0c:f2:01:c5:ac:54:4c:5f:1a:0b:
         b3:af:e8:35:45:ad:bf:90:02:6b:40:49:65:a7:0e:03:f0:fa:
         9f:24:d8:4a:3f:f5:43:0a:02:2e:ff:78:d1:9f:52:83:59:50:
         fa:26:98:28:f1:74:29:ef:7d:3a:03:a0:8f:83:b7:e2:06:5c:
         28:08:32:d5:19:46:b9:2a:d2:db:68:b1:1a:8c:0a:b0:49:83:
         0b:b3:ab:29:22:07:a1:f3:c1:68:0e:2b:c4:d2:86:a9:5a:4b:
         9b:57:24:bc:16:bf:50:d7:86:e6:84:59:ca:0e:52:70:4d:fd:
         4e:a1:11:be:39:d6:83:b9:15:b0:88:7f:d7:99:1a:8c:c3:8c:
         c8:14:e2:d9:2b:c7:ba:a1:68:15:69:ba:0c:38:01:6b:95:38:
         06:1d:94:c1:7f:4e:de:ed:30:9f:fe:eb:35:79:8e:94:97:30:
         bc:27:13:54:73:e2:a9:f1:83:c6:5a:73:27:ae:46:e1:93:a7:
         55:5d:8a:78:6e:72:91:f6:60:4c:bf:0a:4b:63:9b:c5:7f:1d:
         bb:05:20:0d:51:b9:b1:b1:df:99:fb:79:60:d2:61:8e:cd:29:
         44:78:ac:91:a1:bf:00:ae:19:cd:2f:71:17:e6:06:94:64:0c:
         31:bb:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:03:40 2025 by rpki-client