Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a3a2f33322d3332203d3e20323639323239.roa
File:                     323830343a363135383a3a2f33322d3332203d3e20323639323239.roa (raw, json)
Hash identifier:          bffB+moUBhuRPeZ5q3Uwmk9J7fnC6jyJkwO3JJzDFoA=
Subject key identifier:   5A:09:D7:2D:CE:3F:03:28:70:60:98:74:6D:65:CE:46:1B:F4:BE:DD
Certificate issuer:       /CN=BAF64A7AE246E8120826948706145A4757D1146D
Certificate serial:       6F00E1E982B0624F8F08241B510C3D92BDA6BAAC
Authority key identifier: BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a3a2f33322d3332203d3e20323639323239.roa
Signing time:             Thu 28 Nov 2024 17:22:49 +0000
ROA not before:           Thu 28 Nov 2024 17:17:49 +0000
ROA not after:            Thu 27 Nov 2025 17:22:49 +0000
asID:                     269229
IP address blocks:        2804:6158::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl
                          rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:00:e1:e9:82:b0:62:4f:8f:08:24:1b:51:0c:3d:92:bd:a6:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAF64A7AE246E8120826948706145A4757D1146D
        Validity
            Not Before: Nov 28 17:17:49 2024 GMT
            Not After : Nov 27 17:22:49 2025 GMT
        Subject: CN=5A09D72DCE3F0328706098746D65CE461BF4BEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:4c:ff:82:8a:d5:7f:a3:12:eb:db:51:2f:
                    49:26:24:64:95:7e:49:6a:2f:02:ee:7c:3c:c8:3b:
                    9e:37:11:7b:d5:1f:49:5a:20:53:94:9a:03:4c:24:
                    a3:dd:1f:ff:d2:f1:85:ab:49:f2:cd:85:dc:8a:0b:
                    7b:d3:21:e9:21:77:20:f8:b9:bf:da:d1:d1:1f:b2:
                    a9:43:40:a5:e9:a4:df:54:cb:08:93:96:63:ae:49:
                    cf:80:08:09:1e:49:10:89:6d:83:8e:fc:1d:b1:e7:
                    ab:1e:53:03:ed:55:51:07:4c:52:e7:96:c3:6c:d3:
                    09:43:bf:4b:50:57:a3:8d:f8:43:26:e3:8f:a6:7f:
                    b5:c3:61:78:01:58:ff:5e:2a:56:6b:20:fa:3d:5b:
                    cc:81:cf:70:f6:6b:61:8b:a8:11:80:18:57:1c:72:
                    a8:2c:7a:57:26:fd:6b:c9:94:9c:80:64:92:42:23:
                    f3:f7:47:61:c3:1d:7a:61:26:fe:50:33:a4:e4:cd:
                    2f:a1:70:08:25:b5:92:73:6d:5a:0a:7c:26:00:ec:
                    5d:60:c1:4d:f2:97:fc:35:9f:c0:cb:06:ba:da:7a:
                    6a:48:ee:ec:16:32:98:37:92:96:e6:a7:34:2e:78:
                    f4:11:4e:26:17:d8:74:60:15:f2:f1:3f:d6:7a:4c:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:D7:2D:CE:3F:03:28:70:60:98:74:6D:65:CE:46:1B:F4:BE:DD
            X509v3 Authority Key Identifier:
                keyid:BA:F6:4A:7A:E2:46:E8:12:08:26:94:87:06:14:5A:47:57:D1:14:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/BAF64A7AE246E8120826948706145A4757D1146D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF64A7AE246E8120826948706145A4757D1146D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBBqZmaYfY1LQJ1duiVb86cAukLfp12bna6p9zBzaPyV/0/323830343a363135383a3a2f33322d3332203d3e20323639323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6158::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:47:b8:f7:83:57:b3:75:e6:ab:d9:3b:dc:72:df:cb:f6:
         c4:f3:04:c2:aa:7c:55:9d:d0:ef:89:09:48:4c:91:28:02:a2:
         41:f7:9c:20:1c:2b:2b:5f:e0:25:66:65:0d:89:9f:86:37:cc:
         14:9d:51:bc:f2:1f:a4:cc:70:59:9a:bf:73:89:16:90:6a:6d:
         c9:8f:44:ff:34:16:d4:fb:fd:37:57:ef:e5:37:31:02:2d:8f:
         2e:14:4e:80:1e:ff:a9:78:ad:24:e7:9f:ba:87:fb:a9:31:7b:
         6a:46:c1:0b:84:fe:8f:68:d9:b5:53:fe:d0:db:b7:f2:b0:05:
         48:36:16:64:89:ee:f7:93:31:93:d5:99:11:0f:4b:6b:3d:a9:
         c8:bd:4a:0a:62:2a:61:3d:11:c3:fc:b7:64:5e:e1:6b:e3:40:
         fb:29:63:95:be:a8:19:53:68:5a:26:99:cc:7f:cd:71:d1:e2:
         ad:79:81:83:9d:df:61:18:b5:48:8e:59:fd:c6:26:c2:b0:d7:
         06:1a:0f:9d:d3:b1:e9:44:ae:db:f4:4b:de:9d:20:a1:11:35:
         79:60:19:15:6c:6a:7d:98:77:c8:7e:45:7b:01:20:ba:db:40:
         98:cb:dc:b4:84:3b:a5:0e:eb:c4:a2:18:ce:2d:6b:d2:62:02:
         28:73:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:59 2025 by rpki-client