Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa
File:                     323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (raw, json)
Hash identifier:          E66P1l9jzzJdEsrTZbqJ7bxSjri6PncXAOZ62gwdjGQ=
Subject key identifier:   4D:22:02:C1:78:AB:B6:3E:F9:1D:E0:8A:25:8B:E1:92:0B:FA:88:98
Certificate issuer:       /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
Certificate serial:       6559955D08ACC8370B53AE8A6108D16B904B1AB0
Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa
Signing time:             Wed 17 Jul 2024 15:00:20 +0000
ROA not before:           Wed 17 Jul 2024 14:55:20 +0000
ROA not after:            Wed 16 Jul 2025 15:00:20 +0000
asID:                     263465
IP address blocks:        2804:1240::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl
                          rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:95:5d:08:ac:c8:37:0b:53:ae:8a:61:08:d1:6b:90:4b:1a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
        Validity
            Not Before: Jul 17 14:55:20 2024 GMT
            Not After : Jul 16 15:00:20 2025 GMT
        Subject: CN=4D2202C178ABB63EF91DE08A258BE1920BFA8898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:0f:2e:aa:a9:d0:dc:43:e0:49:c3:84:f3:
                    57:98:e1:12:8f:3d:79:6f:b3:11:2e:d6:9b:e7:c9:
                    ae:8f:2f:b1:47:49:f8:6b:2b:b9:4d:86:c6:d2:cd:
                    6d:74:32:2c:93:71:a5:82:5d:c9:ef:20:60:9c:f6:
                    ef:2f:ab:1e:63:f5:cb:69:61:81:03:62:97:71:6b:
                    72:21:ea:7d:d2:e6:7a:2a:70:e7:80:43:07:0e:2f:
                    8d:2f:3c:83:43:77:b9:3f:6e:d7:33:7e:4a:2a:7e:
                    c1:b4:37:65:92:36:e5:10:88:ce:e7:86:77:cc:79:
                    b5:d8:1a:0d:c7:07:4b:6d:d2:00:90:b3:d1:ce:78:
                    00:2b:7c:fd:bf:fb:92:37:eb:6e:e3:ff:ed:25:04:
                    00:00:dd:c8:6b:0d:81:c6:70:1f:b9:8d:61:0e:88:
                    df:73:e8:81:cd:d4:69:ab:ad:6a:ad:bc:dc:43:da:
                    9f:e8:2f:4f:f5:41:5b:4a:28:94:39:b0:46:10:71:
                    d1:bf:a3:75:59:d3:44:73:47:66:5d:3a:db:07:35:
                    38:27:70:59:da:77:09:5c:0f:a5:8a:10:ef:1f:3a:
                    fe:3a:73:1d:7b:60:9b:c2:a9:55:4e:58:f9:c7:f1:
                    ba:29:4a:a5:93:5b:0a:f9:14:82:bb:00:df:5f:41:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:02:C1:78:AB:B6:3E:F9:1D:E0:8A:25:8B:E1:92:0B:FA:88:98
            X509v3 Authority Key Identifier:
                keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/323830343a313234303a3a2f33322d313238203d3e20323633343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1240::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:73:5a:1f:d0:32:0e:7d:b6:7b:a6:32:83:e9:9e:4d:8e:
         a3:ae:60:0c:e8:41:ff:96:e2:17:f4:8f:cb:16:e7:ef:93:8a:
         54:b3:6a:78:13:3d:47:fc:17:22:0c:c5:36:2f:89:1e:38:0c:
         3d:34:bc:94:d9:df:f7:e0:2d:41:d4:33:8b:a6:55:b8:93:c9:
         9d:16:8b:71:a4:9d:1a:f0:13:55:a4:aa:c2:fd:7c:54:78:62:
         c5:ea:88:34:bb:b0:f2:10:20:11:09:e8:e2:93:ca:e6:ce:fb:
         9c:c3:49:cd:57:c2:13:1a:72:7a:56:ab:37:51:ac:9f:8f:07:
         95:ea:1d:6e:69:53:61:20:55:34:d8:d5:74:18:ea:e4:51:23:
         ac:87:e5:2d:1f:ee:67:0f:4f:9b:df:3d:a9:47:d9:42:6b:42:
         10:a0:e9:67:1c:e9:ce:a8:a5:86:92:e4:00:4d:95:1f:07:4c:
         63:64:03:03:b8:3d:33:39:cd:a1:dc:56:d9:e7:13:2d:b1:44:
         07:e5:02:47:d6:13:7b:8b:10:f6:1a:e9:8b:37:d2:52:ae:ee:
         cc:66:50:8e:5d:4b:aa:e2:41:eb:67:af:5b:cb:f6:41:e5:f1:
         22:89:9c:91:80:49:b3:18:87:f9:1a:0c:bb:fc:0d:ed:5e:8a:
         98:a7:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:35:11 2025 by rpki-client