Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa
File:                     323830343a323063343a3a2f33322d3438203d3e20323634353133.roa (raw, json)
Hash identifier:          AmvJcSo7PAYEYF/gEAg/z0LyiV7JMo2YwN5wyOGrsps=
Subject key identifier:   E5:43:8E:8B:B0:14:02:88:45:59:C6:2C:0F:00:10:47:2D:91:86:BA
Certificate issuer:       /CN=B63B26C9AEBF6A09AB233C518334CF88C6AFE55B
Certificate serial:       6138F1AC9CFC06AEA4188A8E77B1CC4A9F8E8F3A
Authority key identifier: B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa
Signing time:             Thu 06 Mar 2025 16:55:40 +0000
ROA not before:           Thu 06 Mar 2025 16:50:40 +0000
ROA not after:            Thu 05 Mar 2026 16:55:40 +0000
asID:                     264513
IP address blocks:        2804:20c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.crl
                          rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:38:f1:ac:9c:fc:06:ae:a4:18:8a:8e:77:b1:cc:4a:9f:8e:8f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B63B26C9AEBF6A09AB233C518334CF88C6AFE55B
        Validity
            Not Before: Mar  6 16:50:40 2025 GMT
            Not After : Mar  5 16:55:40 2026 GMT
        Subject: CN=E5438E8BB01402884559C62C0F0010472D9186BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:e6:0f:d2:5d:cc:92:c1:f1:27:b1:ad:10:
                    3a:f6:e5:d3:90:5d:36:57:33:53:ea:31:09:a9:50:
                    87:7a:1b:0b:3a:97:0c:b0:26:9e:c0:17:cc:98:c7:
                    b0:5d:1c:c7:51:25:20:d3:ec:f9:4f:10:16:6b:94:
                    f8:1b:02:b1:4d:c4:fb:09:92:4a:1b:ef:da:01:9a:
                    c8:17:4c:a4:9b:bb:9f:c9:1c:e0:78:e2:b9:07:69:
                    e7:5b:5d:2c:b4:b6:dd:71:6d:d5:17:34:03:b8:2e:
                    1f:d3:5d:53:ea:9b:3b:bb:0e:19:db:0d:eb:af:c1:
                    d5:2b:01:1b:31:7c:79:39:12:73:2e:b9:f5:44:35:
                    79:f5:79:10:b4:c6:76:e6:bc:3b:f7:a1:12:46:5c:
                    0f:f3:33:17:c2:2e:de:d0:63:21:5f:85:42:cb:f7:
                    82:1b:44:41:fa:21:7a:81:aa:4d:8a:56:65:58:9d:
                    f9:f2:08:f9:9e:c7:80:d6:72:ac:47:2e:09:77:d6:
                    cb:87:87:8a:8a:5e:58:13:03:29:6b:62:af:cf:f8:
                    e3:3b:d6:75:f7:48:34:a4:c3:d6:33:36:db:58:f6:
                    f9:11:89:e8:1a:88:0a:7c:ca:88:5e:3d:5f:c9:24:
                    87:e6:7d:d3:37:1a:b2:2b:1a:b8:7a:e3:fb:59:00:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:8E:8B:B0:14:02:88:45:59:C6:2C:0F:00:10:47:2D:91:86:BA
            X509v3 Authority Key Identifier:
                keyid:B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:9d:d2:ff:43:28:37:7f:66:83:30:7b:e0:18:d8:2e:28:
         17:b4:02:bc:5c:6d:82:cf:9a:5e:b6:88:28:00:f4:fb:45:1d:
         57:ba:c8:e0:71:4b:db:70:47:1a:27:99:68:bb:ea:f1:ff:4c:
         ca:9f:55:0a:6d:b4:4a:8f:11:55:bb:0f:22:6a:0b:aa:d2:22:
         75:85:16:90:43:8e:4e:a8:b6:62:99:d1:29:6d:fd:21:36:c0:
         8b:2c:3e:4c:20:e2:13:6a:8b:b8:72:f8:51:97:e1:db:3a:26:
         6d:35:8f:46:87:83:5c:fe:92:84:9c:9c:ce:54:37:70:e8:9e:
         d9:29:38:34:83:68:1e:12:fc:c2:32:66:f6:5d:d4:d8:df:a8:
         d0:70:2d:82:53:07:5b:59:8b:9d:ea:dd:dd:bb:cf:1b:62:37:
         4f:06:6f:0c:fa:ad:83:30:d4:ec:e1:fb:c8:f0:43:f8:69:e6:
         71:5b:0c:ff:4e:48:5f:27:63:78:47:07:6e:b6:56:62:17:c1:
         85:34:97:5b:7f:d9:96:b4:17:fd:ea:31:6e:1d:54:0b:0f:b4:
         b7:69:06:db:e2:01:87:78:90:ac:4a:fa:46:27:9f:6b:50:c3:
         d4:d8:23:0c:43:26:d1:cb:4f:98:b2:cc:97:cf:2b:86:52:c6:
         54:87:9f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:34 2025 by rpki-client