Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa
File:                     323830343a343666343a3a2f33322d3438203d3e20323637303232.roa (raw, json)
Hash identifier:          wGGditG9tTqCGYZSh8WD/0YnQh7/n+mvWtqwMEWfFwM=
Subject key identifier:   06:40:DF:BF:B0:43:BC:91:2D:88:55:DD:3A:27:7E:BF:6B:67:A2:8E
Certificate issuer:       /CN=DC40E61CDCBC1E2ADAB99017EA481017DE0593A3
Certificate serial:       5ED6F2DBDF79A98164477DED4673694AEFB8A29D
Authority key identifier: DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa
Signing time:             Fri 24 Jan 2025 17:29:40 +0000
ROA not before:           Fri 24 Jan 2025 17:24:40 +0000
ROA not after:            Fri 23 Jan 2026 17:29:40 +0000
asID:                     267022
IP address blocks:        2804:46f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.crl
                          rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d6:f2:db:df:79:a9:81:64:47:7d:ed:46:73:69:4a:ef:b8:a2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC40E61CDCBC1E2ADAB99017EA481017DE0593A3
        Validity
            Not Before: Jan 24 17:24:40 2025 GMT
            Not After : Jan 23 17:29:40 2026 GMT
        Subject: CN=0640DFBFB043BC912D8855DD3A277EBF6B67A28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:96:ac:f5:68:06:40:5c:4a:17:58:7e:d9:
                    06:cd:65:5d:cd:28:fb:e1:c2:6c:4d:f3:60:7c:14:
                    6f:ae:4f:40:25:ad:5e:16:5b:13:dd:c1:b6:6d:86:
                    26:a2:ce:97:c2:6c:e4:b5:19:ff:04:4f:20:b6:75:
                    44:25:10:1a:ea:4d:ca:bb:00:bf:80:b4:e1:60:20:
                    72:67:e6:f1:47:61:4c:83:01:9d:cf:8e:fd:1d:39:
                    60:93:22:69:52:e0:82:9a:ce:01:de:11:9d:25:de:
                    2e:ae:7b:a7:91:51:87:85:18:98:27:c6:a0:12:f0:
                    ec:a1:02:77:0f:89:17:70:d5:52:6a:b8:84:a3:dd:
                    7e:a4:77:0c:d1:52:9c:9e:10:62:fb:26:ac:4d:63:
                    7b:1f:0b:21:58:b9:e1:ec:91:7d:8a:05:34:72:05:
                    29:e6:68:e8:cd:54:6c:fd:a6:cf:a1:45:86:d8:bc:
                    9c:7c:5c:ec:e0:c2:a4:56:a7:f5:6c:2d:45:48:75:
                    18:26:79:e4:6a:ba:b1:fa:67:d4:cf:c0:40:db:aa:
                    64:ae:2b:ac:34:19:29:9a:d5:28:74:1d:de:b1:01:
                    c0:26:f7:73:66:8e:93:3a:8a:11:f4:81:a4:da:e8:
                    60:9d:87:1b:48:bd:b3:1f:9a:52:c9:b9:bc:86:01:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:DF:BF:B0:43:BC:91:2D:88:55:DD:3A:27:7E:BF:6B:67:A2:8E
            X509v3 Authority Key Identifier:
                keyid:DC:40:E6:1C:DC:BC:1E:2A:DA:B9:90:17:EA:48:10:17:DE:05:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC40E61CDCBC1E2ADAB99017EA481017DE0593A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/0/323830343a343666343a3a2f33322d3438203d3e20323637303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:68:98:ad:cc:fa:6f:02:88:e5:52:e0:52:6c:9a:e2:2c:68:
         2c:08:24:14:43:ca:7b:33:07:bc:06:8a:fc:ce:c6:cf:e7:f5:
         da:62:4a:e6:da:8e:37:a5:6b:fe:a3:88:e5:f4:06:83:d1:5a:
         3c:10:6f:bb:e2:66:f7:41:19:64:23:71:e8:83:f4:e4:93:5d:
         73:1e:3c:14:35:8f:ba:f2:85:2c:16:14:f7:f5:8f:f1:3c:19:
         11:9c:6a:4b:db:4e:aa:67:17:b6:64:85:33:08:a7:56:6c:6b:
         7f:61:21:93:39:d1:ce:cb:d9:ff:fc:d5:c8:17:e9:23:d3:78:
         0c:81:d9:67:ed:80:2d:32:ba:bd:c1:53:4d:2f:63:65:61:82:
         9d:77:51:4f:ea:38:2d:af:73:bf:b3:88:62:6b:db:69:e4:7c:
         dd:88:3a:60:b8:f0:74:cb:97:67:2d:26:7a:d2:90:62:84:0f:
         83:42:e8:22:88:9a:7f:21:1c:b0:76:56:f3:10:b2:01:6e:4d:
         c7:72:33:bc:6b:56:6a:19:d6:57:10:5b:d6:69:57:da:a2:18:
         8c:c6:17:53:f0:1d:06:bf:39:09:32:84:f3:78:87:08:8c:c2:
         27:33:d0:8b:5b:87:89:af:35:17:39:50:31:3e:8a:a2:20:28:
         36:ed:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:53 2025 by rpki-client