Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a633030303a3a2f33342d3334203d3e20323639323534.roa
File:                     323830343a363163303a633030303a3a2f33342d3334203d3e20323639323534.roa (raw, json)
Hash identifier:          ifCOVGoxYag+JgBj/8bwfs5OhPeT8sG7+b8xoFpG4s8=
Subject key identifier:   9B:BA:51:38:1E:88:45:2A:B5:34:B2:67:96:60:9E:DF:CF:83:1B:8F
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       0B0B1E952BFA611ED9E389F6B1789E4008DFD651
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a633030303a3a2f33342d3334203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:46 +0000
ROA not before:           Mon 10 Mar 2025 13:44:46 +0000
ROA not after:            Mon 09 Mar 2026 13:49:46 +0000
asID:                     269254
IP address blocks:        2804:61c0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:1e:95:2b:fa:61:1e:d9:e3:89:f6:b1:78:9e:40:08:df:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:46 2025 GMT
            Not After : Mar  9 13:49:46 2026 GMT
        Subject: CN=9BBA51381E88452AB534B26796609EDFCF831B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:7e:9d:30:ed:50:be:f2:42:84:69:a1:f0:
                    a9:b9:5a:90:24:3e:72:78:ff:24:87:83:dd:55:8f:
                    58:16:b2:83:b0:6d:11:21:87:0d:d3:24:54:d0:82:
                    89:49:0d:3d:f4:54:c1:6c:3c:52:8b:d6:35:40:79:
                    b7:06:6f:21:9c:9a:10:46:9e:00:c7:4f:e9:49:f7:
                    1c:07:f5:ab:e5:e7:28:2b:d1:56:2b:b9:f8:1d:f8:
                    94:46:6f:65:7e:2d:ae:59:0c:f2:53:f1:7f:0a:44:
                    a1:7c:e1:94:44:53:01:5f:bb:6f:7b:d9:e5:8f:6e:
                    fa:e7:62:19:e2:5d:a2:ab:3e:ad:28:52:67:76:21:
                    63:a9:3d:22:84:02:89:ea:a8:f9:f7:75:af:a1:56:
                    2e:1d:df:8f:8b:78:5d:24:7d:51:74:ff:51:17:95:
                    d5:2f:56:cf:81:7c:98:e6:a4:d0:14:d7:c8:90:89:
                    d8:d5:bc:8e:6c:59:99:cc:01:07:5d:31:34:1e:38:
                    ec:e4:32:b8:aa:3b:96:af:dc:64:57:ba:bd:37:cd:
                    17:e7:29:b0:d0:ad:5c:58:0b:5c:40:07:be:6f:b4:
                    ec:5f:05:c0:3f:19:f2:c8:47:39:a4:52:69:95:ee:
                    b2:69:d1:7e:cd:46:e5:46:b9:5b:a1:1b:80:60:08:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:51:38:1E:88:45:2A:B5:34:B2:67:96:60:9E:DF:CF:83:1B:8F
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a633030303a3a2f33342d3334203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:8b:92:17:3c:32:50:9d:42:68:4b:08:3f:03:04:83:47:64:
         f8:52:09:a3:ad:51:44:eb:a2:f1:d2:af:35:d1:81:2a:c7:b0:
         34:ce:be:38:fc:db:55:00:a8:0a:9f:92:68:0b:91:84:83:d1:
         f9:d5:e5:3a:4d:9e:41:a3:6d:74:48:d3:a0:6d:8c:d4:68:a9:
         8a:a5:fe:1d:92:fc:38:e4:27:6e:95:c8:63:04:55:e0:1a:44:
         3d:0b:1f:94:b9:74:ea:e9:64:3e:06:da:99:42:7e:53:57:d7:
         74:8b:b1:1a:08:9c:5e:6b:d2:c5:7a:a0:98:1e:7e:81:88:58:
         85:84:d3:90:53:3d:1d:55:dd:10:d1:be:92:9c:73:9b:fe:03:
         ae:22:3a:f0:59:ab:8e:0b:1f:5d:1b:44:7a:53:c3:d0:c2:ee:
         a7:40:c8:df:d6:f9:cd:06:68:5e:e3:c7:6a:88:36:c5:97:75:
         b5:ef:38:1a:bf:fa:e8:ac:96:f2:46:70:6b:c8:c0:f7:a7:b6:
         42:fe:4a:27:50:10:69:06:00:d7:1e:f0:e1:30:8d:fb:3f:5a:
         83:b2:bf:8a:82:31:4c:b3:3b:b7:77:e7:26:43:f1:af:f5:8c:
         bd:ab:96:44:29:ca:b6:3b:17:94:08:7b:c7:b7:1c:f5:3f:ae:
         06:fc:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:33 2025 by rpki-client