Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
File:                     323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (raw, json)
Hash identifier:          B4Ct9NXXdWZTsKimA1DUY/XJ+YnQd8EiQuRPE531z9o=
Subject key identifier:   F9:C5:94:37:AC:B5:58:E4:F3:CF:47:38:F2:42:5E:CC:1C:2F:3F:B4
Certificate issuer:       /CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
Certificate serial:       539DD529EAFCA5B635B38809D1F61F8C89F07B44
Authority key identifier: 3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
Signing time:             Mon 09 Sep 2024 14:16:26 +0000
ROA not before:           Mon 09 Sep 2024 14:11:26 +0000
ROA not after:            Mon 08 Sep 2025 14:16:26 +0000
asID:                     267056
IP address blocks:        2804:4778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9d:d5:29:ea:fc:a5:b6:35:b3:88:09:d1:f6:1f:8c:89:f0:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA1465E4D3921B276EAB422ACCE68273C80356B
        Validity
            Not Before: Sep  9 14:11:26 2024 GMT
            Not After : Sep  8 14:16:26 2025 GMT
        Subject: CN=F9C59437ACB558E4F3CF4738F2425ECC1C2F3FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:eb:d0:94:b3:b7:8a:1d:ee:15:93:de:1e:
                    18:d5:b7:5d:88:51:1f:eb:86:24:da:90:93:f9:25:
                    f2:0f:bc:ec:91:d4:3d:29:da:69:d5:c3:25:a7:9d:
                    0a:fc:40:15:62:6e:93:ec:3f:8f:15:71:d2:88:4f:
                    a8:ad:2b:89:19:8f:d3:60:ae:60:ce:47:89:8a:cb:
                    5e:9e:35:37:1c:f8:21:c0:3f:02:e3:d8:99:d5:c3:
                    3a:80:7d:17:68:af:ee:dc:4b:4d:e7:81:81:4e:ff:
                    85:cd:6f:39:a6:89:8d:92:fd:21:c5:7a:4d:0b:b6:
                    3d:3f:69:2d:d0:7c:c5:8c:28:d1:3f:bf:48:99:69:
                    1c:a8:00:ef:da:57:e3:26:b7:e0:05:aa:aa:09:ba:
                    c3:31:3f:d8:87:48:01:28:65:df:f0:36:09:1f:b0:
                    35:b1:f8:f8:f0:f0:d0:da:d4:b7:a4:f1:69:63:e8:
                    d4:f6:42:32:98:1b:88:0b:45:3c:e9:15:5b:2e:03:
                    b5:7b:5e:2c:0a:74:8a:86:f5:df:11:b3:bb:1f:07:
                    f6:83:64:05:dd:e7:38:6b:61:b0:37:67:31:70:b2:
                    7f:5a:d6:8e:20:dc:d8:05:8d:2b:ef:33:32:78:a9:
                    b0:1a:ee:b2:12:73:ea:74:f9:d6:f6:d5:39:78:dd:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:94:37:AC:B5:58:E4:F3:CF:47:38:F2:42:5E:CC:1C:2F:3F:B4
            X509v3 Authority Key Identifier:
                keyid:3E:A1:46:5E:4D:39:21:B2:76:EA:B4:22:AC:CE:68:27:3C:80:35:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/3EA1465E4D3921B276EAB422ACCE68273C80356B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA1465E4D3921B276EAB422ACCE68273C80356B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4778::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:6f:36:07:dd:7d:90:e2:5d:33:56:7b:e0:ff:6b:d5:13:
         8e:0d:dc:b7:6d:76:62:09:39:27:7a:4e:5f:2d:79:93:19:66:
         85:f9:93:d0:e3:21:25:0a:8e:4a:8d:78:28:4f:f4:8f:97:ee:
         69:34:02:aa:42:1c:dc:64:d0:9f:1c:f6:be:c9:da:31:9d:34:
         a7:60:90:19:4f:cb:23:f9:47:0d:0a:32:6c:43:2b:3c:be:5a:
         e3:68:e9:80:b1:18:4d:15:f1:66:ff:29:c7:7d:d8:03:c4:e8:
         ea:fb:84:ae:94:8b:6b:20:5f:b5:41:44:08:1b:c9:d3:57:66:
         d9:b2:7f:dc:da:cc:fc:88:55:41:3b:56:32:f2:42:bd:57:32:
         32:cf:9e:77:bc:b6:e7:1a:0c:bf:a2:53:c8:fa:b6:42:18:ab:
         8c:44:a3:54:90:6e:95:f1:61:48:0a:23:e2:f9:60:26:fa:78:
         37:ce:4c:21:60:fb:7b:dc:9b:9b:cd:9d:15:c3:af:89:fa:c0:
         31:5b:3c:9f:f3:a8:e9:e7:12:02:c4:53:8c:70:11:16:02:e5:
         4d:cb:d4:e2:ec:b7:ae:76:94:32:15:86:d2:c5:51:c2:82:d2:
         71:ff:1b:3f:eb:e5:c5:ae:57:24:ed:0e:df:00:f9:5c:f9:8c:
         bf:06:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:26 2025 by rpki-client