Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
File:                     323030313a313239343a3a2f33322d313238203d3e203238313832.roa (raw, json)
Hash identifier:          wq3xnxZSfpqP8b/yJHEqo/Jq6/0YSv53UQ+P+bHXVwE=
Subject key identifier:   B8:82:4A:F0:03:AB:A1:AD:08:1C:74:6D:0A:DF:ED:91:61:9F:DD:69
Certificate issuer:       /CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
Certificate serial:       7850B02F480685581AA62E636530BA024D173223
Authority key identifier: 4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa
Signing time:             Mon 11 Nov 2024 20:31:22 +0000
ROA not before:           Mon 11 Nov 2024 20:26:22 +0000
ROA not after:            Mon 10 Nov 2025 20:31:22 +0000
asID:                     28182
IP address blocks:        2001:1294::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:50:b0:2f:48:06:85:58:1a:a6:2e:63:65:30:ba:02:4d:17:32:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC
        Validity
            Not Before: Nov 11 20:26:22 2024 GMT
            Not After : Nov 10 20:31:22 2025 GMT
        Subject: CN=B8824AF003ABA1AD081C746D0ADFED91619FDD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:0e:7e:49:c3:0c:29:9c:b7:1e:49:0b:16:
                    df:9c:fd:ca:a8:29:57:01:97:4f:50:3d:01:30:8a:
                    aa:08:6c:9a:88:02:8e:ed:6c:80:86:fa:59:d1:3e:
                    27:8c:05:4b:cb:19:df:26:e8:06:16:a3:15:a4:7d:
                    e7:90:ae:2d:4b:aa:e2:58:1b:60:ef:e3:d2:37:24:
                    d1:4c:e8:2c:06:21:d6:1b:46:ef:28:82:9d:4f:d2:
                    e3:4c:a8:9e:65:69:4d:fd:3c:26:15:0c:be:4a:51:
                    79:3e:cc:f3:92:35:47:11:1e:73:cd:5f:fe:8f:05:
                    97:e1:b5:74:59:91:8f:4a:2a:bd:e2:da:70:6c:b9:
                    a3:61:b6:46:88:d9:37:f7:75:ff:ec:88:58:cb:2a:
                    eb:41:66:34:29:74:5b:bd:d0:dd:ec:ee:20:c6:3c:
                    42:1c:34:29:8e:74:ba:f1:22:87:c7:b4:f5:5c:e5:
                    09:bd:7f:ee:c4:d3:70:27:1c:48:8c:08:ff:85:f1:
                    4d:74:83:43:fc:c8:19:47:ca:2f:3f:30:e9:ba:b5:
                    c4:1a:d2:7a:1f:13:1c:2f:fa:52:ab:f1:89:e2:b0:
                    8b:a6:11:ee:44:e5:dd:47:2c:85:fb:4b:ed:97:a4:
                    46:31:e0:16:04:ae:c1:6a:01:02:0e:66:ef:1c:d4:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:82:4A:F0:03:AB:A1:AD:08:1C:74:6D:0A:DF:ED:91:61:9F:DD:69
            X509v3 Authority Key Identifier:
                keyid:4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/323030313a313239343a3a2f33322d313238203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1294::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:35:55:41:ba:f1:14:a6:10:0d:fb:6a:d7:a7:79:13:aa:
         d1:38:51:fd:b2:64:c4:19:22:86:c7:97:92:77:29:78:42:f1:
         e7:d9:51:50:9a:4b:fe:6f:e3:a0:d5:bf:32:65:6c:40:cf:34:
         d7:0d:72:aa:43:dc:e7:fd:f8:85:2b:d8:51:1a:ff:26:93:6b:
         aa:d0:ce:c7:68:a3:44:95:f1:64:fe:15:82:5b:10:5b:e8:eb:
         7a:67:10:ad:db:5b:be:98:cf:ab:56:d6:c7:f1:79:b1:9e:8b:
         a4:c6:7d:5f:c1:70:cd:b5:2a:1c:66:53:90:63:7a:3f:d8:7f:
         38:6a:dd:43:84:08:26:3b:cf:f2:43:7c:93:03:9c:92:ca:0d:
         bd:a9:fe:2f:39:8f:c0:10:fd:bd:b6:27:f0:06:a0:e3:2f:5b:
         93:a1:65:de:47:1a:a1:dd:d0:67:b4:88:a0:9a:39:9b:c3:5a:
         da:2e:54:c9:a9:2b:9b:55:28:e2:d9:68:dd:83:16:a6:83:22:
         bd:04:9e:04:4e:f7:ee:56:ed:58:1a:47:9c:ce:61:83:93:6e:
         61:3c:0e:bc:b6:1b:73:ce:20:18:41:e7:ca:97:12:e6:2b:cb:
         b2:10:ce:56:74:28:83:77:76:d7:ba:23:ea:52:c0:89:41:04:
         c0:7c:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:57 2025 by rpki-client