Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          m0rp8+BapN4cooHXGeIngWk00hmNrGGEAAUZAZlpXks=
Subject key identifier:   87:6F:D8:B7:4C:A4:85:6C:EE:E0:8A:2C:01:17:CF:6F:9D:1B:BE:2C
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       66CCDC2A9D76F905DB4DB3B6B7A342E16636DF22
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:36 +0000
ROA not before:           Tue 24 Sep 2024 19:42:36 +0000
ROA not after:            Tue 23 Sep 2025 19:47:36 +0000
asID:                     264485
IP address blocks:        2804:2050:5a7e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cc:dc:2a:9d:76:f9:05:db:4d:b3:b6:b7:a3:42:e1:66:36:df:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:36 2024 GMT
            Not After : Sep 23 19:47:36 2025 GMT
        Subject: CN=876FD8B74CA4856CEEE08A2C0117CF6F9D1BBE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:c0:f7:81:bf:51:ad:fe:a6:04:9b:64:b4:
                    34:5a:38:23:72:d3:25:5f:a8:f3:2b:c6:a7:79:15:
                    80:40:87:ba:b5:90:1a:cf:18:f9:f6:bb:44:31:70:
                    0a:09:f1:6b:15:d4:8e:e1:49:99:f1:18:d6:f1:56:
                    a4:93:9e:37:5a:e1:6e:5f:94:6a:6f:54:22:e4:d3:
                    fd:27:86:36:3e:d7:91:53:6a:5d:d1:20:27:27:3f:
                    e9:d1:0c:c8:55:56:96:bb:89:36:52:2b:d1:b6:12:
                    23:08:b5:10:e4:cb:a0:8a:aa:ca:bc:b9:64:07:13:
                    ee:d4:b3:68:c5:b1:e7:3e:09:81:26:0c:3f:48:f6:
                    9e:6e:21:83:77:50:d3:84:77:a4:2c:6f:1a:0b:33:
                    bd:f7:07:57:4a:6d:a0:d3:21:8b:03:18:fa:6d:d1:
                    3f:1a:a5:fa:ba:1c:11:4f:24:bf:45:2a:f1:2e:ed:
                    55:7b:d7:d6:48:a1:39:ae:54:8d:0e:77:e4:79:0f:
                    3c:a4:3b:c3:67:69:13:f9:d7:b9:9d:8b:d2:0d:41:
                    b7:51:b0:ac:81:6c:d4:3a:d7:79:b0:96:eb:c5:5f:
                    d9:69:dd:56:0e:3f:05:e9:a8:cf:99:35:73:cc:4b:
                    0e:28:b9:fb:86:e3:14:75:59:2e:cd:53:6b:15:cf:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:D8:B7:4C:A4:85:6C:EE:E0:8A:2C:01:17:CF:6F:9D:1B:BE:2C
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5a7e::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:bb:46:93:9c:11:39:75:fa:31:06:0a:a2:4a:74:19:e4:
         b6:c4:13:72:82:87:f8:61:ed:26:b9:e0:2f:53:e4:61:9b:20:
         11:e8:dd:44:f0:d7:e5:33:69:05:a6:9a:be:0f:a4:ec:8f:8e:
         9b:30:27:c0:f5:00:7d:70:f9:1f:c8:fd:4e:63:2b:8b:b9:e3:
         1b:2c:a1:65:4e:a6:49:5b:35:f4:7a:e1:14:75:b0:05:f0:d9:
         39:48:fc:b9:4e:6f:32:d9:4a:0c:dd:a9:0c:42:ca:13:6c:b5:
         71:07:de:31:bc:fa:9b:08:10:e8:17:1d:bd:1a:5d:dc:71:44:
         f9:75:f4:d6:ac:e0:d8:03:84:26:ff:a6:e6:34:cc:f6:40:0a:
         01:a3:9c:6c:98:47:3d:86:ed:4d:ac:31:c2:83:11:5c:e4:2f:
         93:2c:73:f2:a7:c3:e8:98:df:af:8e:37:e9:43:63:f8:d1:10:
         4a:03:80:cb:78:3b:4c:b8:cc:c2:d1:7f:3e:ce:66:16:0b:de:
         31:26:64:92:c0:64:b6:32:54:e3:e9:bd:d4:73:bc:af:e4:78:
         4c:de:0c:41:dc:a6:4f:02:0b:67:5e:e8:46:f7:08:a9:8c:b8:
         f7:a1:d4:14:ef:fd:d2:b8:ab:91:94:e7:dc:95:f9:2b:a2:27:
         2b:15:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:15:00 2025 by rpki-client