Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
File:                     323830343a313134303a3a2f33322d3336203d3e20323633363636.roa (raw, json)
Hash identifier:          hLYOZ5V/YBiFT4TiK/dg4m+B0MrlJ1gd2yJo3gd2hsM=
Subject key identifier:   20:5F:7A:C1:19:9D:F4:06:E6:CB:FC:7A:BB:14:D0:69:DC:4D:47:78
Certificate issuer:       /CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
Certificate serial:       579BE837A369465784FFB1FB0E35D6D639D61060
Authority key identifier: 08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa
Signing time:             Thu 06 Mar 2025 15:32:20 +0000
ROA not before:           Thu 06 Mar 2025 15:27:20 +0000
ROA not after:            Thu 05 Mar 2026 15:32:20 +0000
asID:                     263666
IP address blocks:        2804:1140::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl
                          rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9b:e8:37:a3:69:46:57:84:ff:b1:fb:0e:35:d6:d6:39:d6:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
        Validity
            Not Before: Mar  6 15:27:20 2025 GMT
            Not After : Mar  5 15:32:20 2026 GMT
        Subject: CN=205F7AC1199DF406E6CBFC7ABB14D069DC4D4778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:c3:07:80:2b:16:8f:12:a6:13:ef:6d:28:
                    5a:21:cf:e7:02:d4:6c:c5:c6:9d:12:95:11:12:27:
                    4d:5b:d6:93:99:ed:d3:22:8d:5d:cf:83:2e:eb:f3:
                    ce:d1:4d:96:84:ab:47:5d:21:44:41:3b:4d:2c:a8:
                    42:30:e0:68:25:0e:84:ee:4f:13:fb:5f:0d:9b:bd:
                    a0:29:fd:8a:c4:2c:61:43:01:96:c2:68:c3:62:9b:
                    56:96:48:7b:c6:97:f7:45:93:b6:6c:28:ca:ac:9b:
                    a2:4f:ee:0a:2f:30:81:21:89:08:a6:06:0e:c0:86:
                    fa:7e:17:49:ef:0c:38:da:f0:bf:5f:ec:58:bc:e7:
                    be:31:5d:20:e9:5e:c0:bb:da:ec:36:e6:a6:c4:c0:
                    f2:76:03:86:93:13:f9:93:91:04:ab:cc:14:22:9a:
                    f5:19:b9:ca:b3:dd:8f:d1:84:fd:3d:19:02:e5:a3:
                    a5:82:4a:41:2c:45:d3:e3:30:5a:23:aa:a2:22:63:
                    e6:de:11:f2:2d:a3:75:51:36:a8:d2:46:36:c7:9f:
                    c8:e6:3a:8e:b0:19:f3:4c:a0:e8:d3:a6:df:5c:4b:
                    04:08:27:61:00:6b:37:ab:a1:c1:b6:2b:ac:04:49:
                    97:cf:20:1b:d0:7a:74:06:c9:bb:ea:38:ce:6d:1d:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:7A:C1:19:9D:F4:06:E6:CB:FC:7A:BB:14:D0:69:DC:4D:47:78
            X509v3 Authority Key Identifier:
                keyid:08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/323830343a313134303a3a2f33322d3336203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c9:c7:f4:3d:39:2f:65:56:36:42:92:01:6e:a5:f4:42:90:
         d8:20:ef:81:04:f2:4b:bf:aa:f4:9d:a7:65:55:66:95:3b:ab:
         34:93:bb:42:9e:3a:73:c0:ee:d8:6e:44:af:1d:fc:5f:8f:b1:
         94:82:b1:10:e3:c2:72:6a:ab:2f:81:8b:d3:aa:1d:03:fa:81:
         67:1b:19:16:b4:de:9f:93:42:f7:a5:ab:18:11:2b:d0:a7:0d:
         b5:58:9f:6a:e0:65:f8:74:b4:84:45:28:ba:0f:f7:83:de:36:
         00:73:d0:f8:c5:a5:d1:88:6c:38:0b:9a:70:7e:f5:bd:30:57:
         c7:11:f9:ab:55:47:24:be:c3:e2:93:2f:18:1d:94:7e:4f:76:
         ce:02:53:ae:43:e8:89:e1:e3:7a:72:de:f4:62:27:6d:77:16:
         98:61:95:db:c9:18:e7:89:f1:a9:b1:fd:c6:e7:c7:7d:2b:79:
         4f:53:d2:46:1c:45:c3:d2:ab:2b:7e:50:2f:56:b6:6c:30:17:
         3b:dc:b3:ac:2d:0d:c0:43:78:f7:5d:49:87:10:95:4d:12:44:
         39:b6:62:18:21:5d:06:d2:76:7b:f7:b2:1b:60:93:c0:48:e7:
         de:bd:de:9b:42:43:e1:5c:c7:1c:ac:04:07:cb:d6:bb:14:71:
         37:40:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:00 2025 by rpki-client