Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa
File:                     323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa (raw, json)
Hash identifier:          UnTL83KQm6tK5wufSiSPFtVNeTEmFJNy2WEFIl4DiYw=
Subject key identifier:   A4:60:37:34:92:01:BD:73:D8:4E:BF:16:AE:45:5D:3F:AB:DF:7B:45
Certificate issuer:       /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial:       6C4D943249E4C881AD49E08EF579EE355E13A8DE
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa
Signing time:             Fri 07 Mar 2025 00:00:56 +0000
ROA not before:           Thu 06 Mar 2025 23:55:56 +0000
ROA not after:            Fri 06 Mar 2026 00:00:56 +0000
asID:                     268331
IP address blocks:        2804:4f84:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
                          rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4d:94:32:49:e4:c8:81:ad:49:e0:8e:f5:79:ee:35:5e:13:a8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
        Validity
            Not Before: Mar  6 23:55:56 2025 GMT
            Not After : Mar  6 00:00:56 2026 GMT
        Subject: CN=A46037349201BD73D84EBF16AE455D3FABDF7B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:81:1f:b2:c9:a1:a2:4d:4e:52:6b:d8:d2:
                    a6:34:cc:41:76:72:e4:ec:3e:63:c4:22:66:a4:b4:
                    46:3b:ea:de:a8:b4:6d:7d:1a:7c:51:8e:9f:03:22:
                    fc:7c:7f:28:72:5a:65:04:b2:41:b9:bd:1e:43:16:
                    64:1c:5f:ce:12:f5:d0:41:28:ca:7d:65:20:91:13:
                    0f:16:33:f4:e5:bb:f8:03:b2:d8:75:fe:b6:48:4c:
                    40:83:e9:f3:ae:57:14:6a:d4:05:da:3e:d9:6f:7c:
                    3f:e3:80:05:3c:13:19:a3:b0:da:4b:5f:be:5f:bd:
                    cd:a8:3c:f2:78:d8:29:53:68:4b:46:2a:d4:b5:02:
                    94:2e:3e:3c:b3:cb:7f:09:c2:3a:2d:09:93:19:e7:
                    1c:22:29:55:5d:d7:a5:c3:78:db:11:f6:a0:92:3d:
                    2a:99:58:10:6d:e3:6f:7a:54:0c:2d:83:43:4d:bf:
                    a8:db:9d:10:b8:8a:d5:13:b6:1f:d4:18:75:9e:90:
                    08:fc:df:53:fe:c2:63:6c:98:da:34:f5:95:be:72:
                    ce:da:0c:92:a7:d1:21:35:97:e6:47:bc:90:a0:4c:
                    7b:8c:32:d9:40:3d:8d:5a:f9:f5:f3:46:10:3c:66:
                    a8:9d:3f:45:2c:53:c7:5a:62:a4:b2:22:c3:05:31:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:60:37:34:92:01:BD:73:D8:4E:BF:16:AE:45:5D:3F:AB:DF:7B:45
            X509v3 Authority Key Identifier:
                keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/323830343a346638343a383030303a3a2f33332d3333203d3e20323638333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         49:05:60:66:07:14:a1:01:a1:a6:91:8a:1e:c5:9d:3c:96:cf:
         de:b6:91:f6:14:36:3c:02:96:54:d6:b6:e8:55:47:b5:5f:92:
         6b:d5:7b:9f:04:6f:6c:1d:6a:ac:3b:7a:23:2f:a9:cc:e6:d2:
         13:2c:c6:1b:1a:f4:8d:56:21:62:3c:37:bb:60:34:8b:30:bc:
         6d:67:30:88:7a:13:4d:d8:06:b2:4e:67:c2:cc:31:49:80:ee:
         7b:c5:6d:a4:f9:ea:a2:1f:fe:0e:62:a8:1e:47:3e:c8:23:d6:
         c3:31:ee:b7:51:8b:66:30:d5:13:65:02:a7:6a:6d:b0:9d:83:
         e7:a8:bd:c2:99:dd:84:e5:84:7a:27:2e:a1:74:28:24:99:4f:
         7e:2f:c3:36:83:de:42:7a:78:49:ee:06:de:a6:1d:94:90:88:
         78:b0:4c:21:62:2a:2c:14:3b:9f:f6:bb:cf:0a:7b:3d:96:98:
         13:27:19:70:ae:86:3d:49:04:ea:d7:c8:7e:74:eb:e7:0d:c0:
         33:2f:d1:26:54:fa:5d:9f:be:15:12:21:da:9b:5b:e0:4d:a3:
         d7:f5:aa:27:c1:49:5a:96:f3:c8:91:28:2d:39:5b:c8:82:72:
         f6:d9:7a:e9:ca:43:cc:eb:f5:1f:0f:90:ee:5b:3c:27:c4:f4:
         c3:40:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:40:26 2025 by rpki-client