Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d313238203d3e20323635393938.roa
File:                     323830343a343130343a3a2f33322d313238203d3e20323635393938.roa (raw, json)
Hash identifier:          LODlsKaanew1sXwWkXvg53CbbbAVODkh1Md3MommNu8=
Subject key identifier:   2F:44:32:11:4D:64:02:F3:7F:E3:0E:44:59:8B:B7:C7:65:D9:58:EA
Certificate issuer:       /CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
Certificate serial:       6AB4C1E1CF1B7F0DA1AD05D9A1EA3B1CD10F9A99
Authority key identifier: 96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d313238203d3e20323635393938.roa
Signing time:             Tue 16 Jul 2024 18:37:17 +0000
ROA not before:           Tue 16 Jul 2024 18:32:17 +0000
ROA not after:            Tue 15 Jul 2025 18:37:17 +0000
asID:                     265998
IP address blocks:        2804:4104::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl
                          rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b4:c1:e1:cf:1b:7f:0d:a1:ad:05:d9:a1:ea:3b:1c:d1:0f:9a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964E4683BB2B2596300F81FEBD9EA9DB505AF025
        Validity
            Not Before: Jul 16 18:32:17 2024 GMT
            Not After : Jul 15 18:37:17 2025 GMT
        Subject: CN=2F4432114D6402F37FE30E44598BB7C765D958EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:d5:45:da:bc:6f:f6:90:3b:03:89:38:b2:
                    af:af:6f:71:d7:a9:04:4c:e1:82:ae:8d:d7:c7:3c:
                    99:ff:97:60:02:44:ec:91:d4:65:67:96:97:bf:fd:
                    fa:56:27:dc:29:58:79:a3:f7:c4:f1:26:b8:e1:55:
                    4f:b3:08:6d:89:40:e6:eb:19:5f:d5:c4:05:17:4f:
                    b0:31:f3:67:40:cb:17:fa:eb:ab:b3:d6:78:a8:ea:
                    c4:ee:3d:c3:7e:c4:d7:e8:54:3a:60:df:94:f6:03:
                    ec:a0:73:6c:e8:9f:6d:38:ae:6f:6d:f5:3d:fc:27:
                    ef:7f:b2:d8:b5:26:85:89:09:da:0e:2e:b3:7d:f0:
                    2e:2a:25:20:38:c9:7c:0f:24:72:b3:84:27:af:84:
                    92:2f:b0:ce:86:c0:5f:80:c9:fd:3d:f1:f0:96:90:
                    19:0e:91:71:50:8e:a4:f6:dc:2a:da:08:81:ed:fb:
                    d2:64:0f:e5:6e:8f:54:b9:da:72:1d:bc:82:55:54:
                    fb:81:78:f4:50:35:fc:d6:55:cd:c4:4d:63:44:9c:
                    6b:d2:4c:3a:91:e9:58:b2:4d:b8:1a:bc:9a:ef:bd:
                    66:ad:bd:7f:10:ce:6d:a3:af:1b:71:31:c8:60:2d:
                    18:dd:ff:c9:a3:86:86:c5:a2:af:a1:d6:53:2c:64:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:32:11:4D:64:02:F3:7F:E3:0E:44:59:8B:B7:C7:65:D9:58:EA
            X509v3 Authority Key Identifier:
                keyid:96:4E:46:83:BB:2B:25:96:30:0F:81:FE:BD:9E:A9:DB:50:5A:F0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/964E4683BB2B2596300F81FEBD9EA9DB505AF025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964E4683BB2B2596300F81FEBD9EA9DB505AF025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/0/323830343a343130343a3a2f33322d313238203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4104::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:78:d3:82:94:cc:da:24:9c:c7:9f:fc:68:cc:24:8f:62:f2:
         d4:6d:2a:3b:c5:e4:36:28:71:1d:d0:7e:13:e0:8f:2b:bd:f2:
         17:20:dc:18:9a:13:be:83:81:2b:b7:b2:cb:8d:c9:39:8e:7f:
         78:e7:04:e4:70:af:97:b8:5f:88:22:63:ad:1c:b5:3e:e2:38:
         e6:16:18:ff:2b:68:f3:0a:08:b1:29:2a:5c:0b:52:ac:a0:02:
         d3:11:36:fb:be:00:66:1c:5a:9e:88:48:39:92:0f:13:08:c5:
         c3:b7:25:08:b3:77:2c:04:49:29:20:cc:84:e1:54:2f:df:92:
         73:52:ca:59:ba:2e:7d:88:a4:dc:a5:66:70:58:f7:69:33:a7:
         95:f1:83:4a:95:c4:1d:90:f9:7b:ec:cc:af:64:7a:c0:44:a8:
         62:8f:9a:47:11:a3:38:16:46:2a:b0:b4:de:be:6e:1c:69:7f:
         1b:86:ac:f6:8d:f6:6e:36:5a:d4:ae:8b:00:a3:6d:3e:03:a2:
         fd:56:5b:51:77:36:dc:60:07:05:08:17:aa:69:cc:5a:9a:e8:
         8b:b5:50:19:1a:1e:58:b9:fe:5b:23:91:50:f4:34:55:24:34:
         e9:fe:2f:46:e1:c1:91:07:5d:bd:74:21:e7:da:c8:c9:87:43:
         54:05:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:48:59 2025 by rpki-client