Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa
File:                     323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa (raw, json)
Hash identifier:          wD5l5WjjUa2AyzCqUHRG8NkvCf8QAejguwhthurorHU=
Subject key identifier:   D9:2A:5D:65:40:B3:58:1B:19:4B:1C:87:BB:4D:F4:87:1A:F9:C9:27
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       5521E1AC4ED81ADFEB2737EE9798C47C3CE1F484
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa
Signing time:             Fri 16 Aug 2024 13:19:54 +0000
ROA not before:           Fri 16 Aug 2024 13:14:54 +0000
ROA not after:            Fri 15 Aug 2025 13:19:54 +0000
asID:                     270595
IP address blocks:        2804:6e68:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:21:e1:ac:4e:d8:1a:df:eb:27:37:ee:97:98:c4:7c:3c:e1:f4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Aug 16 13:14:54 2024 GMT
            Not After : Aug 15 13:19:54 2025 GMT
        Subject: CN=D92A5D6540B3581B194B1C87BB4DF4871AF9C927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:87:a9:c1:98:af:96:fd:11:a8:87:17:d0:
                    92:79:a2:15:88:a3:53:61:1c:bc:b9:56:a9:22:a1:
                    55:51:ff:ea:81:1e:69:bd:ed:01:da:6d:99:2f:8d:
                    d1:c9:5b:4e:b6:db:34:79:e3:f3:6e:64:2e:df:ba:
                    db:6a:2c:d2:cf:8a:c3:e7:38:66:c4:83:83:7f:35:
                    7e:d8:6e:ad:69:b1:22:f4:ff:05:c2:97:61:3a:3a:
                    bd:ff:c6:a3:fa:1d:b1:26:02:55:1e:76:58:4c:fb:
                    7f:88:1e:7f:7c:15:ef:8d:37:7f:a4:05:52:6e:c6:
                    8f:2e:ba:02:ac:ff:db:a2:73:24:b3:ac:03:f0:53:
                    f5:d2:c2:7d:52:28:63:e8:78:a6:95:76:01:56:b8:
                    52:91:e6:4f:c6:cb:31:83:1d:27:3f:ea:cd:9b:81:
                    33:f5:5f:ed:d3:08:27:10:91:9d:1e:7a:f3:4a:96:
                    1c:7e:ca:bc:e4:a6:32:73:36:b2:12:3a:7f:9e:b9:
                    a8:3f:63:d4:8d:28:8a:0b:6e:26:b4:03:cf:6f:39:
                    df:23:86:8d:6d:4e:b5:07:20:33:ac:26:25:08:25:
                    37:4c:c6:f5:41:85:ce:3b:10:6f:76:9e:33:aa:3e:
                    69:90:46:80:a3:09:c6:9f:8e:33:8e:0a:44:45:10:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:5D:65:40:B3:58:1B:19:4B:1C:87:BB:4D:F4:87:1A:F9:C9:27
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e68:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:d5:0b:58:7a:fb:60:19:50:f7:72:2f:c8:b0:62:3a:d1:
         f3:57:89:d4:66:26:12:a6:4b:34:fb:18:bb:5b:24:f4:7b:15:
         8e:4b:d2:3c:3e:32:f9:7c:0b:0a:9e:98:59:8d:f4:9d:53:f6:
         15:5a:e1:78:7f:cd:46:37:06:60:de:13:a8:88:e5:31:70:12:
         c2:ec:a7:99:44:f5:e1:fd:01:85:15:00:5c:fb:96:0e:14:78:
         e4:9f:ba:db:29:d0:f0:23:fa:b2:50:54:8e:c4:4d:3d:62:a6:
         76:4e:e4:b7:b8:b0:93:b8:fd:1d:23:91:d0:95:37:be:b9:cf:
         a1:78:a9:c7:aa:71:a2:19:83:76:12:49:ac:0f:46:82:f7:40:
         fb:b5:32:13:e7:76:57:43:0b:66:95:af:68:fc:cd:a8:8d:f6:
         50:46:a3:c3:0f:cc:44:eb:ab:33:54:a2:6c:05:4b:38:13:5c:
         bf:1d:9b:84:f3:2f:52:f5:13:38:bd:0d:96:97:0a:67:d5:a3:
         c1:a9:16:bd:9e:24:14:bc:2f:fb:8b:15:a7:53:93:b4:6b:7b:
         53:66:38:af:51:c8:7d:d4:b2:0b:26:3c:c1:53:5d:94:2c:68:
         af:c2:05:87:db:f9:51:1e:7f:10:ec:a9:58:0e:b0:17:fd:d1:
         41:cf:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:22 2025 by rpki-client