Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa
File:                     323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (raw, json)
Hash identifier:          qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=
Subject key identifier:   A9:BF:7F:C0:70:92:15:CC:69:35:89:26:D1:96:C7:09:16:01:6E:65
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       7E6558E841AA49CD371B2C338741B7791630A786
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa
Signing time:             Fri 07 Mar 2025 21:35:01 +0000
ROA not before:           Fri 07 Mar 2025 21:30:01 +0000
ROA not after:            Fri 06 Mar 2026 21:35:01 +0000
asID:                     273704
IP address blocks:        2804:8af8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:65:58:e8:41:aa:49:cd:37:1b:2c:33:87:41:b7:79:16:30:a7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Mar  7 21:30:01 2025 GMT
            Not After : Mar  6 21:35:01 2026 GMT
        Subject: CN=A9BF7FC0709215CC69358926D196C70916016E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:18:2a:0c:c3:4a:b8:08:ba:fa:cb:9e:54:
                    1e:aa:00:91:73:8c:92:a1:37:80:6e:bd:c7:45:f1:
                    0f:fc:59:3d:20:d4:94:c9:f8:f6:90:ec:0e:ef:ae:
                    db:dc:4e:f3:5c:d1:34:09:1d:cd:14:8c:57:6f:04:
                    5f:7b:0c:cb:29:49:b8:16:1a:6a:0b:ea:81:d3:1c:
                    f2:9b:8f:f0:da:3e:36:c7:c3:89:90:a2:6f:47:52:
                    9b:c6:ee:3f:77:de:f9:76:af:51:4b:70:28:94:ef:
                    e1:61:b8:6e:3d:9b:db:a9:f5:39:b1:b0:7e:b6:e1:
                    70:c1:8b:73:4b:d3:78:41:02:59:63:2b:3e:38:9f:
                    94:88:3f:d4:82:3f:f9:b2:8b:79:8c:e5:dc:1c:0f:
                    e6:ff:d5:3e:14:53:84:8a:b1:eb:8d:05:82:fa:05:
                    c0:25:4c:38:08:e2:cd:70:17:1f:e2:ac:ec:54:09:
                    7d:a0:bd:78:1b:5a:f8:f9:18:27:8b:95:8c:ed:10:
                    99:5f:ce:a0:1b:4c:c0:6f:d9:46:92:17:09:ec:45:
                    f8:f3:f9:c4:97:f6:6f:89:94:b1:b0:c2:ba:57:78:
                    92:62:b8:f4:78:c7:47:7d:51:35:fc:57:f2:f5:61:
                    52:9e:f7:e2:e0:3c:fd:c4:ec:6b:74:a6:6d:57:68:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BF:7F:C0:70:92:15:CC:69:35:89:26:D1:96:C7:09:16:01:6E:65
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:ea:af:f9:6a:66:d7:18:a1:1b:2d:5e:ed:b7:31:e5:64:f0:
         fc:dd:8d:3b:d8:01:74:26:a9:01:d1:2f:f6:ba:71:5f:ac:82:
         f2:ed:d9:a1:13:35:0d:d6:57:ee:59:ad:87:fb:01:4e:e6:c4:
         59:8b:6f:f1:1c:5e:19:6c:9c:63:dc:1e:4b:8a:68:8c:4b:86:
         6f:25:da:9c:31:ec:22:3b:38:b0:a9:58:2f:75:7c:75:e1:81:
         54:b3:d1:b7:52:e2:30:01:d8:ec:72:30:60:a1:a0:61:a9:ba:
         80:6d:a3:e0:a1:5f:cf:0d:1c:23:68:8f:1d:4a:7c:60:86:2d:
         fe:92:d5:bd:d4:91:94:fc:f6:f7:45:02:31:5d:09:c8:57:6f:
         45:5d:84:34:7f:b8:b6:fc:49:12:95:4c:08:d8:3f:b9:cf:fc:
         a9:5c:83:b8:c5:8f:74:2f:f4:f9:01:38:97:5f:93:6d:c8:03:
         02:dc:a5:c7:f0:3e:bb:ed:2e:e9:47:cb:87:67:d1:3c:4e:60:
         34:f1:4d:06:83:2a:bb:55:b0:c6:f8:34:dd:87:73:55:65:c3:
         33:72:76:61:03:df:79:68:61:f5:0f:00:b1:ac:8d:44:44:95:
         7a:67:13:54:a1:c0:7f:82:71:65:8e:68:62:be:0e:d9:d4:1b:
         90:86:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:37 2025 by rpki-client