Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa
File:                     323830343a363530303a3a2f33322d3334203d3e20323639343632.roa (raw, json)
Hash identifier:          cLcQrIxN/zlMewAXBUwCe8PfBeU7yCTG5zzWKghK39w=
Subject key identifier:   33:A6:41:52:18:E7:DE:9B:38:75:D4:8D:9D:D7:21:0F:91:0B:AB:DA
Certificate issuer:       /CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
Certificate serial:       584F9B09FFBEB94403C45DC34EDF5F50063E5683
Authority key identifier: 9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa
Signing time:             Thu 06 Mar 2025 21:17:05 +0000
ROA not before:           Thu 06 Mar 2025 21:12:05 +0000
ROA not after:            Thu 05 Mar 2026 21:17:05 +0000
asID:                     269462
IP address blocks:        2804:6500::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.crl
                          rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4f:9b:09:ff:be:b9:44:03:c4:5d:c3:4e:df:5f:50:06:3e:56:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5498CF2BF865A6C6012312932A13ACCDC56CC1
        Validity
            Not Before: Mar  6 21:12:05 2025 GMT
            Not After : Mar  5 21:17:05 2026 GMT
        Subject: CN=33A6415218E7DE9B3875D48D9DD7210F910BABDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:b0:1d:9c:a1:ca:d4:2c:21:ca:c5:4a:8e:
                    7d:df:9b:70:84:79:d3:70:a6:7a:75:d6:42:f3:cd:
                    88:86:ef:75:56:49:29:b6:72:12:37:eb:ad:ae:1a:
                    10:5f:e9:92:96:34:c3:d8:97:dc:81:b2:3f:a7:7a:
                    d9:4f:1f:49:f1:4d:92:d4:e0:dd:47:db:2e:34:69:
                    7c:52:f5:f2:d2:a5:4e:e2:32:f3:ce:26:c1:dc:aa:
                    a8:52:48:24:52:28:0d:54:ce:cf:5f:16:80:79:c3:
                    f0:ae:99:ed:e4:f8:b0:9b:40:df:7d:62:63:4a:59:
                    31:45:ed:c7:82:61:44:a8:68:0f:af:12:4f:98:aa:
                    96:a5:87:93:7c:57:5c:3a:b9:36:e4:d2:68:ee:4e:
                    36:75:7b:90:20:5f:eb:b7:be:1c:dd:6e:ed:a7:05:
                    37:32:75:8b:9b:74:66:64:d7:8b:12:f7:6b:2d:7f:
                    ba:47:8b:98:2c:33:5b:f5:dd:0a:19:f8:95:db:58:
                    d7:62:1c:54:99:d0:cf:02:f1:37:1b:82:b7:69:62:
                    4d:87:2f:67:50:94:94:b6:c2:be:b5:7e:00:c7:05:
                    3d:07:ca:fe:0e:6d:d7:f0:fa:72:6f:ff:3d:a4:c4:
                    98:d1:60:37:47:05:c1:82:0a:fe:ee:a4:13:c8:ec:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A6:41:52:18:E7:DE:9B:38:75:D4:8D:9D:D7:21:0F:91:0B:AB:DA
            X509v3 Authority Key Identifier:
                keyid:9E:54:98:CF:2B:F8:65:A6:C6:01:23:12:93:2A:13:AC:CD:C5:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E5498CF2BF865A6C6012312932A13ACCDC56CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/1/323830343a363530303a3a2f33322d3334203d3e20323639343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6500::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:3c:c1:90:46:4c:ec:70:90:77:e9:c0:10:6f:9a:71:62:
         00:9c:c3:42:b6:59:05:8e:1b:8a:78:e6:cc:76:76:3f:49:82:
         90:f5:46:d8:6e:b9:59:ab:91:c5:35:0c:0d:a2:26:20:87:06:
         51:c0:98:9a:d7:29:c0:be:3e:59:9f:23:e3:03:df:db:fa:92:
         77:17:d4:a8:03:f1:ca:c1:47:c3:64:51:be:7f:79:57:df:3b:
         a0:2b:27:e4:1e:b6:8b:1a:f8:eb:6b:ea:d8:fb:a6:4a:54:6b:
         9e:fd:86:46:63:e1:08:7f:f5:76:ed:7d:db:6c:57:e6:9a:02:
         4b:8e:35:2d:3e:01:1b:2c:e1:3a:bf:29:38:f7:2a:71:00:a5:
         90:ac:a7:65:cd:4d:f6:1b:a0:fa:22:14:f5:03:72:1c:07:f6:
         9a:59:b7:8a:d8:23:b8:7a:d0:f0:0c:ad:fc:ce:5f:4a:a8:66:
         f2:59:74:9f:a8:59:a2:c3:91:8b:6f:09:20:d3:1c:83:fb:c9:
         6d:5f:4a:2b:9d:d9:3a:e8:b2:3a:4a:90:82:8b:85:88:27:37:
         94:85:77:aa:4a:5a:a7:2b:72:e9:a9:a8:ed:09:ee:bc:4c:47:
         f6:9e:fa:52:10:f0:db:b8:02:b6:3a:98:60:0c:d8:5b:5f:85:
         27:16:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:42:38 2025 by rpki-client