Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a383430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          y3YCyEIVatV+/9zbhdSXevu7WFE/jvlpV0ytGdNVv54=
Subject key identifier:   6B:92:AD:09:2A:8A:A0:7F:D6:66:C0:E1:80:7F:55:A1:DE:E5:13:9B
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       1EF392458AF9B46D30DDBD86B1512B504C69C275
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:20 +0000
ROA not before:           Mon 17 Mar 2025 17:52:20 +0000
ROA not after:            Mon 16 Mar 2026 17:57:20 +0000
asID:                     263629
IP address blocks:        2804:104c:8400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f3:92:45:8a:f9:b4:6d:30:dd:bd:86:b1:51:2b:50:4c:69:c2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:20 2025 GMT
            Not After : Mar 16 17:57:20 2026 GMT
        Subject: CN=6B92AD092A8AA07FD666C0E1807F55A1DEE5139B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:f0:9c:dc:cd:ed:e0:77:12:27:65:1a:44:
                    b6:51:bd:d0:2a:7b:93:ea:17:f8:8d:f1:d9:54:7e:
                    71:f6:45:a5:f0:e5:9c:ef:8c:a5:8a:97:76:76:b8:
                    68:b7:14:41:d6:19:40:ea:b2:46:b4:19:d8:79:d8:
                    2c:04:5a:de:af:51:73:b6:2b:ef:ad:dd:c5:41:51:
                    d2:ae:3b:db:77:97:2c:38:cf:d9:68:f2:1e:fd:11:
                    2a:60:c6:44:c5:bb:93:96:19:e5:cf:39:84:2f:ed:
                    d3:b5:4a:c8:20:91:32:c5:87:f1:46:11:8a:11:90:
                    a7:8b:b7:81:ea:ad:6e:b0:f9:fc:c9:e9:61:b7:ab:
                    45:8f:6a:a8:2f:7e:fc:5c:3c:0c:37:71:02:93:0a:
                    6a:41:05:34:00:86:3a:e9:d4:1f:7e:1f:ec:10:14:
                    8f:46:2c:06:b0:ea:1b:98:c2:6a:6c:62:0e:ea:79:
                    82:b4:9d:a0:57:3c:c2:1a:88:c2:68:0f:31:4f:e9:
                    a2:5d:bd:d4:f9:69:f1:f0:c2:40:15:f4:0e:f7:7c:
                    cf:ae:c9:b0:4a:09:44:f1:60:5c:95:79:52:35:0c:
                    ee:33:cf:ad:74:c8:13:22:e8:e7:ce:58:cc:5e:97:
                    51:87:28:5b:58:79:9f:03:a4:9c:90:28:53:56:7b:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:AD:09:2A:8A:A0:7F:D6:66:C0:E1:80:7F:55:A1:DE:E5:13:9B
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a383430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:86:fc:24:60:51:e4:f5:ff:40:a1:03:e8:03:c5:3b:e4:7c:
         f0:73:29:7a:6f:24:36:bc:ef:de:18:04:4d:82:46:2a:80:8a:
         84:c2:7e:35:80:2b:27:ab:f5:9e:37:91:6d:60:da:99:8e:94:
         a8:34:ac:7b:60:bb:30:1d:ca:7b:d0:13:61:97:54:d1:97:13:
         42:5b:f7:2a:da:a4:f4:1d:c0:68:d3:df:ef:8c:53:b1:90:ab:
         b6:a4:cd:f7:2c:28:b5:e7:04:7f:77:a4:e2:28:26:db:97:d0:
         83:d9:7b:cc:4e:39:c2:d6:b3:6b:a8:2b:58:f7:7b:b3:2e:2f:
         53:0c:ac:62:a0:cf:32:6f:d2:dd:68:e3:a3:d4:21:26:c6:0a:
         6f:01:6c:d7:3f:32:70:68:f9:94:da:39:5e:66:55:f5:ce:94:
         d5:e7:18:fd:5a:ad:a3:ab:03:79:d1:b6:f6:79:f5:00:f5:01:
         49:4a:69:aa:de:97:91:5a:e0:f8:25:ef:34:37:95:42:f7:e3:
         07:81:82:a1:a2:36:cf:47:bd:c8:b9:04:1c:ff:47:3f:9a:b5:
         f3:2a:99:19:42:9e:2b:95:13:b2:c1:6b:ad:1b:63:e3:6d:70:
         f2:06:6f:7b:c3:fd:a4:d1:cb:b7:30:e0:9f:af:6e:df:18:32:
         16:06:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:42 2025 by rpki-client