Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa
File:                     323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (raw, json)
Hash identifier:          9QIYFSLMeQNgz4stgJwWugpFuWjWbWssf4CiiGcAe3M=
Subject key identifier:   24:14:19:D1:17:C9:AF:9A:4C:53:70:99:9A:24:0A:51:E6:A6:2F:50
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       13AAF586B9616062E60B671016C5E511BE768FD5
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa
Signing time:             Wed 04 Sep 2024 12:36:01 +0000
ROA not before:           Wed 04 Sep 2024 12:31:01 +0000
ROA not after:            Wed 03 Sep 2025 12:36:01 +0000
asID:                     264891
IP address blocks:        2804:2f70:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:f5:86:b9:61:60:62:e6:0b:67:10:16:c5:e5:11:be:76:8f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Sep  4 12:31:01 2024 GMT
            Not After : Sep  3 12:36:01 2025 GMT
        Subject: CN=241419D117C9AF9A4C5370999A240A51E6A62F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:65:66:ba:75:b4:87:a8:7b:5c:4b:2b:a4:
                    18:43:df:f8:12:74:05:55:8b:e5:be:a6:19:11:1d:
                    76:d1:e8:3f:5a:40:19:a3:51:87:74:02:65:76:e9:
                    ec:f1:1d:d7:36:9f:00:d8:1e:1a:b7:74:cd:ab:6d:
                    18:1e:10:2b:09:b6:97:cb:10:a8:4b:f5:fc:f0:93:
                    24:c2:82:4b:03:87:ca:f8:62:65:6c:2e:cd:ed:11:
                    3a:4b:f4:1b:18:6e:88:3c:52:a1:a4:9c:86:be:4f:
                    41:32:f7:10:a1:71:4b:e2:47:46:84:81:e8:e1:bd:
                    7d:7e:82:70:54:0d:a3:1c:13:57:82:79:14:88:ee:
                    50:b0:af:ab:87:35:e8:68:28:03:fa:e5:b6:7f:5a:
                    aa:b3:c6:7b:2b:52:5b:7d:72:44:ec:b9:ad:6d:8a:
                    80:1c:2a:e4:f7:e6:02:db:50:e4:bf:e6:80:fa:a8:
                    56:23:28:cd:d8:5b:cf:0b:0c:ca:45:da:f5:a6:94:
                    92:6a:38:cd:0b:d4:b7:40:6c:54:61:a0:26:e8:2b:
                    a1:35:04:1f:74:49:b6:3e:7a:df:67:52:81:e7:52:
                    2f:d0:c9:aa:73:0b:36:a3:e7:93:9d:66:9d:29:e8:
                    80:27:0f:72:9b:94:95:74:07:f5:82:7d:4b:f4:26:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:19:D1:17:C9:AF:9A:4C:53:70:99:9A:24:0A:51:E6:A6:2F:50
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:06:49:cd:1c:60:67:2e:94:d7:1f:f7:d6:3c:e8:39:9f:
         7b:2f:7d:eb:27:07:7f:4f:f3:3b:84:e2:00:ed:5a:d8:89:0b:
         9b:a9:2e:0f:0d:5e:c3:b5:f8:24:74:4c:15:86:23:86:cf:ed:
         9c:96:1f:30:c4:b0:b8:0b:f7:ec:76:17:ad:c9:6e:f6:47:d5:
         1e:6d:79:80:03:36:2b:26:3f:2f:92:72:15:b7:a4:0b:96:6e:
         62:54:6c:4f:96:6c:49:cd:a9:ea:22:c6:8b:53:93:5f:3b:ba:
         20:9b:e6:08:89:1c:4b:3a:46:48:ae:ba:c7:4f:47:e6:e1:01:
         0a:58:c5:cd:f9:70:72:62:8c:74:a5:10:57:9d:93:27:22:1b:
         8d:c8:3a:c6:82:0c:d8:b3:fc:0a:14:36:9d:c9:fe:ec:2c:91:
         aa:ac:47:ab:5e:71:f7:dd:80:ca:e4:f0:97:44:9f:5b:eb:dd:
         18:f0:1d:e6:a5:9c:96:54:ec:a1:d3:1e:cd:81:0c:06:0e:7d:
         bd:b8:25:fc:c6:80:c3:25:38:62:9c:36:a7:cd:31:14:f8:43:
         24:f6:e0:27:90:ac:21:1c:53:09:9a:0a:da:01:57:f8:44:c0:
         37:4a:c7:7e:bf:f7:a5:df:d7:bc:9a:da:19:e0:72:b0:6f:76:
         c8:4a:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:46 2025 by rpki-client