Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383035303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383035303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          UO1hE9j3YkVAfR+eM04nNin6vnGn04vszueFPImDQpI=
Subject key identifier:   CA:6E:0A:77:29:F5:F8:8C:DF:E2:76:31:29:30:DC:6C:22:49:4D:C7
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       4ABAD2AD3CE62762618BB1506346626004523256
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383035303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Thu 27 Mar 2025 18:04:38 +0000
ROA not before:           Thu 27 Mar 2025 17:59:38 +0000
ROA not after:            Thu 26 Mar 2026 18:04:38 +0000
asID:                     264479
IP address blocks:        2804:203c:8050::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ba:d2:ad:3c:e6:27:62:61:8b:b1:50:63:46:62:60:04:52:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Mar 27 17:59:38 2025 GMT
            Not After : Mar 26 18:04:38 2026 GMT
        Subject: CN=CA6E0A7729F5F88CDFE276312930DC6C22494DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:7b:f4:ba:f6:3b:69:5e:27:8f:b0:8e:4e:
                    11:fa:e3:22:04:08:71:a9:fc:86:dd:e9:67:9d:24:
                    04:80:ad:6c:e6:83:af:45:3e:4c:c9:0c:ef:5c:1b:
                    6a:62:17:61:0d:a1:ae:d0:85:74:ea:45:dd:a9:dc:
                    bf:8d:3d:54:07:3e:f1:94:c5:3b:18:99:91:e8:a3:
                    05:5a:2d:fc:c7:0b:e6:2c:2d:5c:24:8e:f3:a0:0a:
                    4d:3d:6b:91:2c:b8:82:df:c5:90:a0:1a:c5:bc:6d:
                    7c:0f:4e:80:3b:17:d4:71:bb:a9:db:ac:8b:e6:e5:
                    f9:42:6a:fe:9c:39:8f:9f:dc:3c:44:41:57:9e:e6:
                    3c:21:14:15:57:c1:51:0c:bf:77:0c:b0:ca:f6:0e:
                    33:1c:49:9d:5b:65:21:d1:3b:38:91:e2:68:ce:f8:
                    c8:9d:53:52:f2:0b:c0:3b:15:f7:20:65:83:cf:94:
                    ec:1a:6e:48:05:8e:8c:5f:ef:9b:7d:fe:00:39:0e:
                    5f:1b:2e:8a:5f:58:13:df:6d:47:96:55:5d:0f:49:
                    6e:f8:37:be:db:52:fe:9c:1a:ba:d3:58:87:bb:d6:
                    f5:b8:72:97:36:94:86:5d:7f:00:80:36:b3:ca:8f:
                    13:2c:d8:da:f0:e1:69:74:86:97:03:c4:ae:9b:38:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:0A:77:29:F5:F8:8C:DF:E2:76:31:29:30:DC:6C:22:49:4D:C7
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383035303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8050::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:71:97:b3:81:f4:d5:dd:a3:05:36:e9:39:d8:28:ec:64:1d:
         26:31:5d:87:14:f1:99:0b:84:2c:fd:59:4e:a8:c7:e3:d3:57:
         a5:e8:92:38:57:89:7f:18:2f:06:45:15:10:19:4b:04:c3:3d:
         97:28:16:fe:32:64:6f:08:c1:d6:0b:b3:99:59:94:d1:73:13:
         dd:84:62:12:b9:58:c1:95:5d:d1:12:3d:de:d4:4e:ca:81:40:
         d8:f9:b6:e4:44:8a:1b:a5:77:de:98:ea:f1:1d:22:77:68:d6:
         a8:5e:b7:4d:ad:bc:77:e7:57:d3:c1:9c:c4:51:d4:d9:cf:a3:
         b9:02:56:83:dc:00:a0:d9:33:ae:2f:da:5f:76:cf:aa:cf:20:
         70:71:c9:9f:6c:5e:ff:0d:0f:5a:bd:a9:d6:55:77:d3:45:fb:
         48:73:89:38:78:dc:a2:29:be:22:76:fa:59:ab:ff:1a:6d:49:
         4d:d5:88:ca:91:8a:31:95:84:48:b3:62:eb:bb:2f:0c:b9:f4:
         08:5c:69:63:c6:65:0d:81:8b:6d:2c:ee:43:3b:a3:a8:35:13:
         8e:c4:02:c2:4c:b3:e9:3b:14:85:3d:d1:ee:8e:d5:52:37:7f:
         20:fd:a2:3b:19:5d:75:6f:be:12:d5:f5:f2:b4:91:b4:a1:38:
         c9:9b:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:36:46 2025 by rpki-client