Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
File:                     323830343a336230633a3a2f33322d3333203d3e20323636313236.roa (raw, json)
Hash identifier:          b78eH9iE1lP2ssDkb0TNloMMWzmhsxuPlTJnnpjNVZo=
Subject key identifier:   31:C8:E2:9C:E1:87:FB:80:15:6C:1C:98:EC:82:7A:CF:9F:F6:55:7E
Certificate issuer:       /CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
Certificate serial:       5C8A47A14169EAAA5883E530E53F101685B58D6F
Authority key identifier: A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa
Signing time:             Thu 26 Dec 2024 22:13:39 +0000
ROA not before:           Thu 26 Dec 2024 22:08:39 +0000
ROA not after:            Thu 25 Dec 2025 22:13:39 +0000
asID:                     266126
IP address blocks:        2804:3b0c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl
                          rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:47:a1:41:69:ea:aa:58:83:e5:30:e5:3f:10:16:85:b5:8d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D522AC61898562D95EA2A986B1B1C2668D51B1
        Validity
            Not Before: Dec 26 22:08:39 2024 GMT
            Not After : Dec 25 22:13:39 2025 GMT
        Subject: CN=31C8E29CE187FB80156C1C98EC827ACF9FF6557E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:45:15:9a:68:66:52:42:09:51:fe:34:36:
                    1c:5f:7d:d3:d4:f2:98:20:a0:3d:26:79:7a:5e:4d:
                    ce:57:72:c4:a6:5b:f6:74:70:a6:92:7e:bb:89:05:
                    76:c5:82:0b:d2:b2:fe:b4:56:37:df:59:68:11:c3:
                    a5:f4:64:93:38:09:64:e5:09:ce:d7:b7:d5:e8:78:
                    38:81:ab:45:dc:ad:df:24:49:f2:d4:70:49:f9:4a:
                    66:bf:9b:68:d0:83:fe:51:f5:98:a5:2d:3d:61:ed:
                    88:c6:fc:07:1c:39:bd:30:11:10:0e:87:6e:ae:cc:
                    0d:c9:65:25:92:f9:f9:b6:8a:28:b2:1e:75:25:a9:
                    e2:88:a4:be:48:09:cf:c3:36:3c:87:42:d3:46:3b:
                    9e:68:7d:15:29:01:49:2e:ec:7b:73:5e:5e:a3:88:
                    b7:3d:0a:f2:08:68:a9:11:1b:47:fd:7a:2b:aa:73:
                    52:f5:98:5b:3c:46:2d:38:39:ea:68:0c:58:4d:60:
                    c8:c5:af:05:1f:6f:10:91:a4:07:8c:08:bc:3c:b9:
                    5f:8c:e2:77:da:72:fd:33:bf:76:15:d3:66:40:4e:
                    e9:58:ef:78:a7:f9:44:96:77:29:79:83:84:e7:5c:
                    01:bf:87:98:6a:cd:e8:61:fe:1b:9a:c1:2e:0b:b8:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:E2:9C:E1:87:FB:80:15:6C:1C:98:EC:82:7A:CF:9F:F6:55:7E
            X509v3 Authority Key Identifier:
                keyid:A8:D5:22:AC:61:89:85:62:D9:5E:A2:A9:86:B1:B1:C2:66:8D:51:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/A8D522AC61898562D95EA2A986B1B1C2668D51B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8D522AC61898562D95EA2A986B1B1C2668D51B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTHyFSJhEH39oMriuPHcYju3qCbhCwDTHTeTwPMpocbP/0/323830343a336230633a3a2f33322d3333203d3e20323636313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:ba:3b:c6:3f:e7:ec:af:39:a3:fa:29:09:23:0d:4c:c1:
         2f:d3:28:ca:1b:1b:69:78:1a:19:eb:31:0a:43:40:e5:21:84:
         6a:58:1f:3f:36:0e:40:da:c9:a6:dc:39:47:ee:4a:43:2b:f8:
         0a:65:f0:ee:c8:23:9d:7e:f0:72:9b:c3:5c:46:7c:46:d5:30:
         66:db:57:02:91:80:38:3a:50:26:e6:88:0b:3d:82:02:6f:a7:
         94:b0:94:c2:35:f9:ba:bf:54:d0:65:dd:41:3e:58:09:b7:01:
         04:76:22:2a:a5:10:65:e9:e8:ea:e4:32:42:d4:ba:06:78:61:
         ad:da:5b:db:d0:8c:8f:9c:9e:0f:a8:90:1b:e5:22:f9:dd:4f:
         b6:bd:7b:e7:9f:d1:c9:dd:71:00:c2:ef:44:d8:11:c4:f7:23:
         70:db:9c:3b:8f:8b:f7:99:65:5f:b3:4c:50:2e:a6:6a:8e:d8:
         b2:84:34:d3:e1:fe:43:7a:00:db:9d:2b:d8:ca:57:23:b9:c4:
         74:56:0c:50:51:85:fe:47:24:1e:f5:ee:80:87:07:91:b8:88:
         dc:50:2e:25:8a:81:37:de:e4:6f:4e:09:d5:10:a8:f4:72:f8:
         c3:b6:a9:30:d5:d5:9a:88:3d:20:c0:39:e9:40:28:b9:c9:ba:
         a3:3f:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:46:36 2025 by rpki-client