Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a633030303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a633030303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          7VqopVgYcRnFXCukJVzp95nd109C4S0NtnjeMeBxvqU=
Subject key identifier:   CB:9C:51:23:0F:56:9C:CE:22:24:78:20:58:F6:79:F1:7B:FA:C7:BF
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       45C93588BB370B8406080BEE205A2F003A88C577
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a633030303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:30 +0000
ROA not before:           Mon 17 Mar 2025 17:52:30 +0000
ROA not after:            Mon 16 Mar 2026 17:57:30 +0000
asID:                     263629
IP address blocks:        2804:104c:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c9:35:88:bb:37:0b:84:06:08:0b:ee:20:5a:2f:00:3a:88:c5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:30 2025 GMT
            Not After : Mar 16 17:57:30 2026 GMT
        Subject: CN=CB9C51230F569CCE2224782058F679F17BFAC7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:37:21:42:ef:c7:ea:0b:df:f5:6f:8a:88:
                    64:80:36:29:83:b0:d3:64:29:4f:4e:ea:fc:04:53:
                    68:0b:38:cb:95:ac:0e:60:c3:4b:c9:0c:da:d1:4a:
                    f0:cc:f5:9e:2b:40:04:9a:16:2f:45:03:0f:49:cf:
                    05:03:ef:af:91:4f:5a:bc:a0:aa:eb:9a:34:90:7c:
                    26:ac:0e:2a:27:53:f3:ff:0d:1d:bb:90:d0:dc:ff:
                    ed:9b:af:e3:b1:99:30:d6:cb:94:75:4a:92:8e:d4:
                    f5:13:50:92:62:81:e3:a2:0a:df:4b:d7:9f:80:4d:
                    c9:65:70:e6:92:2f:b5:d2:82:c2:f5:31:20:98:13:
                    d5:75:cd:ef:f0:30:ab:a8:82:7f:fc:d0:55:7e:ad:
                    94:24:62:bd:a9:8d:93:e4:8b:1f:d6:3a:ec:9e:56:
                    16:9c:ed:74:f9:a7:ca:90:68:1c:80:90:be:66:f7:
                    69:4b:b7:e9:30:9f:f9:fb:39:b6:04:a6:02:49:23:
                    d6:09:54:f3:a4:45:aa:81:e8:c5:fc:34:64:17:ff:
                    e3:9d:20:2d:e3:b0:5f:8c:d4:45:1d:9b:81:ce:00:
                    ab:c0:ba:95:d0:88:3e:25:7e:5f:6c:58:bd:00:d5:
                    a0:fc:b6:d4:5a:aa:db:bf:e8:10:b1:2a:2d:54:39:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9C:51:23:0F:56:9C:CE:22:24:78:20:58:F6:79:F1:7B:FA:C7:BF
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a633030303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:a1:74:5d:db:88:c0:82:eb:bc:f9:f6:6f:72:66:50:19:74:
         0d:37:94:d5:80:ab:56:0b:66:a9:a3:e4:ab:17:30:6b:92:a0:
         f2:76:9f:78:fd:50:c4:e3:e8:60:e7:29:12:25:3d:fb:1b:69:
         22:a6:9e:90:6b:b9:d0:25:e4:f8:84:24:8d:63:29:bf:66:04:
         28:80:f4:2d:5c:d7:a1:67:53:25:2e:0a:35:00:77:a2:35:e0:
         63:a2:8f:59:b0:6a:31:0a:c6:b0:f8:6b:b5:96:62:3d:63:c2:
         06:db:c7:59:06:11:9f:fb:bf:86:b9:1f:64:6a:f2:11:90:9b:
         73:77:07:a1:c6:6f:a2:40:69:3c:ce:e0:04:02:8b:af:ed:85:
         05:c0:40:8a:ba:d2:ec:d5:96:e6:89:c6:13:c8:e6:bb:7f:8d:
         5d:79:87:6b:fd:97:51:11:e2:2c:2d:69:e4:cb:66:02:6b:e4:
         65:5f:0e:db:c3:71:e7:b1:98:68:e8:5b:8e:87:31:56:a2:2c:
         8c:55:f5:37:96:58:1b:25:d8:ce:78:41:95:b8:66:89:3d:93:
         94:5a:6e:0c:89:08:28:a6:c5:77:7a:6a:82:fe:c2:02:28:09:
         db:fd:b7:e4:85:c2:7f:22:56:ea:3e:22:f5:2b:8c:26:8c:b7:
         9f:03:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:14 2025 by rpki-client