Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa
File:                     323830343a313664383a3a2f33382d3338203d3e20323632373239.roa (raw, json)
Hash identifier:          kIqdOOSbOUiWIc6ceZNfHmk9FbGB1LkxMd4Mjs3AdjI=
Subject key identifier:   06:8A:2E:2D:36:7D:B5:8A:55:F0:C3:D4:AC:DC:8F:85:47:79:97:B7
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       28F36BE386EAA21539A2532FB4B0C86DF6487838
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        2804:16d8::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f3:6b:e3:86:ea:a2:15:39:a2:53:2f:b4:b0:c8:6d:f6:48:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=068A2E2D367DB58A55F0C3D4ACDC8F85477997B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:bd:6d:e6:01:43:c2:c8:df:e7:c5:49:c7:
                    86:15:30:af:6e:ca:fd:df:d8:59:11:1d:d6:60:3f:
                    25:69:54:db:42:ec:e0:c0:44:89:98:72:0c:f8:81:
                    08:70:c6:01:83:5b:e9:b2:0f:f3:07:aa:fb:22:4d:
                    0d:c2:97:bd:83:16:37:a4:86:34:8b:6b:0c:bc:2e:
                    0d:18:13:9f:ca:fd:91:33:cf:79:f4:58:4f:63:de:
                    52:d0:47:06:80:61:f1:bc:1a:d0:b9:b9:3c:80:6d:
                    dd:b5:69:be:77:ef:58:66:b5:29:75:82:e1:9e:da:
                    bb:89:ff:6e:02:1b:7b:0b:02:df:df:bc:d0:81:92:
                    c7:c7:d2:db:60:af:c1:c0:db:f3:eb:ee:3f:31:da:
                    11:88:60:e6:09:04:29:a4:b9:3f:27:50:d1:14:b6:
                    bd:f8:6e:3a:08:61:4e:85:ce:57:6c:34:45:06:fd:
                    ef:f8:4b:3f:4a:f5:ef:52:5d:86:64:ee:7f:b4:31:
                    92:54:7b:ae:e7:3f:80:05:c5:af:cd:c0:02:84:80:
                    ca:99:34:23:aa:48:04:aa:b7:6a:30:b5:b6:28:3d:
                    c3:e6:ac:1d:30:2a:b4:af:ff:00:fe:1c:41:2a:1a:
                    95:fa:bc:69:f5:58:23:65:a6:4e:7a:2b:c2:b8:f9:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8A:2E:2D:36:7D:B5:8A:55:F0:C3:D4:AC:DC:8F:85:47:79:97:B7
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8::/38

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:61:5c:c5:ad:87:c2:ab:e5:7a:48:a6:c2:f6:da:34:70:
         1f:28:b3:71:72:3f:dd:6b:eb:0d:31:bf:ad:82:a9:6c:f5:11:
         55:31:6d:3e:35:fb:67:0c:d6:aa:24:86:ee:37:d4:f0:59:e4:
         84:4d:bc:af:e7:c8:f8:57:46:a2:bc:83:ef:5a:54:ee:93:6c:
         2e:e4:f1:34:50:4a:e0:ec:16:c5:57:0e:5e:c8:7a:89:bd:c6:
         1a:6b:08:90:5b:69:6d:cd:7f:5f:71:05:94:4b:c7:40:a8:19:
         40:c3:23:3f:a2:67:40:15:ea:71:b6:ef:29:f7:c9:71:b9:2a:
         d2:1d:5f:ec:0b:b7:d6:fd:e7:91:1d:3f:4e:ca:20:93:a5:7a:
         d8:44:e2:9b:d4:f8:c1:b4:80:86:79:e3:99:2a:9a:00:b3:1c:
         3b:0c:9e:26:f8:52:91:fc:a5:10:97:90:2e:cc:30:9a:d2:14:
         29:3e:4b:d1:87:45:56:bf:2d:ae:9f:24:b2:0f:ca:1d:eb:c1:
         b3:11:86:f8:87:93:86:da:7c:01:fa:98:14:33:a6:c9:8e:a6:
         69:98:1d:1e:8e:96:89:0f:20:f9:26:de:6f:d2:3c:42:55:45:
         cc:7f:95:61:12:91:56:32:2a:3f:f8:42:92:32:6d:bd:c5:56:
         c0:5b:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:44 2025 by rpki-client