Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3a2f33322d3332203d3e20323634313830.roa
File:                     323830343a323362633a3a2f33322d3332203d3e20323634313830.roa (raw, json)
Hash identifier:          ACo2UbOzc0ruonZe60LyeJLRoinjG9/dOm+5QHbDNGc=
Subject key identifier:   29:5D:EC:AE:BA:ED:B3:8B:04:EA:09:68:34:57:A7:E5:F5:F4:93:DF
Certificate issuer:       /CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
Certificate serial:       72667B7EECA9D5CAC634B1C33B435EF4C4100BC3
Authority key identifier: 98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3a2f33322d3332203d3e20323634313830.roa
Signing time:             Tue 21 Jan 2025 16:46:04 +0000
ROA not before:           Tue 21 Jan 2025 16:41:04 +0000
ROA not after:            Tue 20 Jan 2026 16:46:04 +0000
asID:                     264180
IP address blocks:        2804:23bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl
                          rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:66:7b:7e:ec:a9:d5:ca:c6:34:b1:c3:3b:43:5e:f4:c4:10:0b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987C6F3143FC8DA789AA98C170AC2ABDB03F55C5
        Validity
            Not Before: Jan 21 16:41:04 2025 GMT
            Not After : Jan 20 16:46:04 2026 GMT
        Subject: CN=295DECAEBAEDB38B04EA09683457A7E5F5F493DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:41:ae:7f:35:44:a3:a8:0e:4e:7c:ac:be:
                    e0:a3:06:4a:b0:89:b0:6a:df:0c:a9:0b:f3:b5:41:
                    14:e7:1b:98:b0:f3:3c:2f:0e:21:16:2c:3e:e2:0a:
                    2d:dd:3f:26:fd:dd:42:9c:45:20:2a:91:83:0c:d7:
                    f8:89:ae:1c:12:c3:f5:e1:33:04:6b:d2:69:bc:fe:
                    57:32:53:bc:fc:11:41:78:96:fe:07:86:d1:86:dd:
                    c5:35:64:b2:56:4a:b3:94:0f:7b:23:ee:c2:8b:d5:
                    17:5a:28:45:bd:15:da:4b:b3:b6:49:9c:dd:e7:f4:
                    c1:98:34:04:ad:f1:b0:84:43:41:41:d1:18:1c:0e:
                    b7:ed:df:f5:4c:5d:f3:3f:c4:29:6c:5e:9e:70:f6:
                    57:06:4c:53:ad:a6:48:7f:0e:0a:60:36:d5:7b:4d:
                    97:95:5e:7d:44:5f:4b:21:b9:78:63:2c:8f:b2:f6:
                    8c:37:98:3a:d3:10:97:bc:95:ad:c0:1d:d1:1a:b9:
                    1e:60:03:c7:a6:7f:7c:f5:83:bb:a4:db:b1:b9:1a:
                    87:57:a3:e4:1a:5c:68:e3:fb:27:23:9f:14:fa:14:
                    ba:06:39:a7:c1:84:34:ad:db:1a:fa:c0:1c:d7:dd:
                    0f:f6:48:71:90:70:90:64:8e:d1:f7:59:d4:da:99:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:EC:AE:BA:ED:B3:8B:04:EA:09:68:34:57:A7:E5:F5:F4:93:DF
            X509v3 Authority Key Identifier:
                keyid:98:7C:6F:31:43:FC:8D:A7:89:AA:98:C1:70:AC:2A:BD:B0:3F:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/987C6F3143FC8DA789AA98C170AC2ABDB03F55C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6sbDakjuNx1Lqu3wTjvKZmmh6vTZAqUMePjKgZdy7Q6/0/323830343a323362633a3a2f33322d3332203d3e20323634313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:68:a4:49:a3:1d:a2:31:84:2d:34:cc:00:5f:ee:e4:7f:
         af:b7:c2:3e:40:b2:bf:e4:14:bc:d9:13:3c:d4:7a:24:77:da:
         94:7c:43:89:af:4f:33:1f:4f:40:de:bd:13:99:ae:fa:db:cb:
         4b:7d:ef:6f:b5:39:9a:2f:91:a0:e2:c2:df:c5:6e:c9:6c:db:
         72:6f:69:82:45:45:80:10:80:dd:9a:36:ff:39:4e:c2:d1:8d:
         51:90:28:84:2a:7e:db:7b:23:11:30:bf:65:d6:8a:8b:0b:f7:
         19:f1:25:8e:57:84:35:f1:ac:bc:c7:79:0f:f5:c5:d3:7e:40:
         00:a9:15:12:3c:a3:ea:77:fe:56:cb:9d:3b:84:69:f5:1d:4c:
         25:b2:8f:28:3b:f7:df:d6:b4:6e:78:7c:dd:e6:52:26:ee:52:
         77:71:7d:72:f4:88:d7:8e:44:83:e6:8b:80:fd:df:8f:e6:de:
         aa:75:9f:ca:9e:d8:b4:03:d7:e3:ff:d4:55:48:cc:d2:52:70:
         d0:83:d9:0e:07:ef:af:22:76:fb:05:de:3c:31:2e:2f:46:94:
         76:71:35:3d:93:e5:4a:71:e2:5d:28:7e:f4:a1:51:40:22:93:
         b1:45:05:19:a6:10:97:9f:fe:25:31:c0:6a:d3:0e:81:02:94:
         87:29:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:46:08 2025 by rpki-client