Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a353034343a3a2f33322d3333203d3e20323638333738.roa
File:                     323830343a353034343a3a2f33322d3333203d3e20323638333738.roa (raw, json)
Hash identifier:          wJn+PDrzDnwR2crWbI2lLOhtjU9+2nBIE2psvT+bcrY=
Subject key identifier:   AB:2E:22:0D:87:CB:2D:0D:B2:C0:76:08:36:D9:99:9E:12:7A:9E:39
Certificate issuer:       /CN=6BB5D47779C998D7924924980F54C2E604962CE9
Certificate serial:       5D7DDD3A0BA4E6A42EC9AD73C576BEE9767B2C49
Authority key identifier: 6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a353034343a3a2f33322d3333203d3e20323638333738.roa
Signing time:             Wed 22 Jan 2025 20:01:32 +0000
ROA not before:           Wed 22 Jan 2025 19:56:32 +0000
ROA not after:            Wed 21 Jan 2026 20:01:32 +0000
asID:                     268378
IP address blocks:        2804:5044::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl
                          rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 19:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7d:dd:3a:0b:a4:e6:a4:2e:c9:ad:73:c5:76:be:e9:76:7b:2c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB5D47779C998D7924924980F54C2E604962CE9
        Validity
            Not Before: Jan 22 19:56:32 2025 GMT
            Not After : Jan 21 20:01:32 2026 GMT
        Subject: CN=AB2E220D87CB2D0DB2C0760836D9999E127A9E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:ad:20:e0:d7:00:2e:dd:7b:24:ef:92:cd:
                    96:9d:3a:9f:4d:9d:89:39:38:16:b3:60:61:97:37:
                    0a:a7:91:a1:25:64:cd:95:6f:5a:a9:38:a1:b4:63:
                    ce:5a:d9:81:a3:18:23:57:7e:81:85:71:60:74:da:
                    32:ba:ef:ce:22:b8:5e:86:80:28:7a:6f:4c:4a:9e:
                    20:d1:47:fb:5d:86:35:4a:89:5b:f5:39:28:41:af:
                    72:13:f4:ec:61:bc:51:95:40:55:f9:f4:6d:53:b1:
                    31:10:8e:d7:76:54:d3:85:ef:4a:b7:4f:9f:71:34:
                    9b:4f:58:85:e6:e5:ab:f3:6e:6a:d7:59:b8:8e:2e:
                    bc:71:23:f9:94:db:58:50:2b:ca:a9:a4:db:5d:be:
                    d6:32:22:a2:62:6f:7e:6a:40:fa:1d:19:2c:10:26:
                    2c:bb:07:bb:76:14:dd:62:59:62:51:8a:7b:1a:e1:
                    f8:b1:a8:f7:92:27:97:91:dd:76:38:82:bc:ab:ae:
                    f0:d8:09:dc:b7:14:c7:77:17:0e:0b:1f:7e:d5:4f:
                    81:27:11:f9:5e:eb:33:e9:7c:24:cc:55:26:31:a4:
                    f1:9c:47:d2:89:03:d5:c8:17:85:11:53:06:83:ad:
                    35:26:55:f4:b6:58:95:58:ce:83:12:ec:fa:2d:03:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:22:0D:87:CB:2D:0D:B2:C0:76:08:36:D9:99:9E:12:7A:9E:39
            X509v3 Authority Key Identifier:
                keyid:6B:B5:D4:77:79:C9:98:D7:92:49:24:98:0F:54:C2:E6:04:96:2C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/6BB5D47779C998D7924924980F54C2E604962CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB5D47779C998D7924924980F54C2E604962CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFeC61ypvTMds8UMuZPpgA3ijbqr51LqjWcfgFo5BQip/0/323830343a353034343a3a2f33322d3333203d3e20323638333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5044::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:03:bb:92:43:3b:2a:8e:ab:6d:64:d8:d8:8d:fb:41:97:
         3a:b4:d3:e6:68:2e:4b:42:d8:34:c2:a9:2f:d5:ce:58:ee:0c:
         f3:2a:e6:02:1a:e9:b6:48:86:f5:4d:9d:7d:f5:6d:7a:fb:d0:
         7c:d5:fa:30:db:13:68:a9:f0:45:78:f7:3b:b7:12:26:96:44:
         1b:4f:7b:c2:6d:e0:66:9e:fb:0d:80:a7:ba:79:57:8d:b8:fc:
         03:82:0b:e5:cb:82:de:5f:fd:85:44:fa:03:f0:ea:e7:3e:c0:
         de:2a:67:2b:77:80:25:da:98:f6:b0:23:6d:99:ab:9d:42:07:
         6f:20:36:91:21:e1:a7:e2:30:95:60:a2:21:42:c0:d2:0e:5f:
         3b:7d:9f:42:a3:75:ca:31:91:95:f8:b3:4b:f5:a0:ff:cd:19:
         86:f2:7e:7e:d8:3f:6a:37:aa:d8:8a:2c:46:a5:ae:98:44:5f:
         1f:59:ba:93:c0:c4:68:a9:f6:6c:48:fb:c6:ca:aa:6c:68:14:
         c2:1e:93:9c:db:f2:69:98:f4:cc:4c:35:e8:e6:a6:57:62:6b:
         1f:b1:07:46:a4:b0:87:77:1f:39:e2:12:65:9b:c5:9f:12:85:
         e3:93:84:20:2b:b9:1d:7b:5c:26:cd:61:60:d9:65:d1:50:8d:
         9d:30:6c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:16 2025 by rpki-client