Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a383030303a3a2f33342d3334203d3e20323639343339.roa
File:                     323830343a363461303a383030303a3a2f33342d3334203d3e20323639343339.roa (raw, json)
Hash identifier:          t5szwrapjCeuxMBGJBd/CVPrTaoskj0vcaL4T+OUoOM=
Subject key identifier:   49:11:85:E5:5C:0D:76:B2:8A:D8:2C:39:10:7D:DC:45:97:29:3E:1F
Certificate issuer:       /CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
Certificate serial:       397E67CADD028535ED9C5EAB2BF8F06E2DAB6F29
Authority key identifier: C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a383030303a3a2f33342d3334203d3e20323639343339.roa
Signing time:             Wed 22 Jan 2025 12:55:54 +0000
ROA not before:           Wed 22 Jan 2025 12:50:54 +0000
ROA not after:            Wed 21 Jan 2026 12:55:54 +0000
asID:                     269439
IP address blocks:        2804:64a0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl
                          rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:67:ca:dd:02:85:35:ed:9c:5e:ab:2b:f8:f0:6e:2d:ab:6f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
        Validity
            Not Before: Jan 22 12:50:54 2025 GMT
            Not After : Jan 21 12:55:54 2026 GMT
        Subject: CN=491185E55C0D76B28AD82C39107DDC4597293E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:b6:22:aa:05:6e:a3:50:c8:4e:51:1c:ae:
                    aa:ab:ed:db:94:38:ff:74:0d:85:e0:6d:23:60:d0:
                    87:44:d6:f3:c4:86:df:2e:9e:d9:cb:6d:61:db:e7:
                    90:c2:19:05:b4:87:a7:7a:f3:aa:66:74:91:5b:68:
                    55:d6:45:ab:e5:72:14:04:b5:70:f9:23:cd:e0:d3:
                    89:62:c7:78:82:25:de:0a:6a:1b:14:87:d4:72:7a:
                    12:39:a6:a4:c6:5a:91:e2:50:20:ea:6d:ed:50:0a:
                    ff:c3:8e:8d:ed:67:b1:29:1e:e9:94:03:1e:12:66:
                    12:32:50:a2:5f:0a:68:2e:59:8e:ff:e6:a6:56:ae:
                    66:4b:81:53:b8:1d:50:ad:5e:93:77:ca:2b:99:3c:
                    b0:9c:62:69:dc:27:ed:30:75:ef:78:ce:59:c2:83:
                    b1:ad:9f:de:96:c6:2c:98:05:60:8c:fe:44:d3:ec:
                    f1:97:d3:de:9c:1e:c5:9c:0f:d5:07:2c:ed:80:d8:
                    80:86:5a:06:94:fa:33:b7:f1:72:fd:b0:67:2d:da:
                    32:58:c0:82:4b:80:52:a1:d3:e7:13:60:d9:4a:cb:
                    3f:19:db:95:f2:40:48:70:cb:7f:df:65:b7:9c:3e:
                    46:be:80:d7:fd:be:e6:9d:1b:d6:8c:f0:f2:fc:17:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:85:E5:5C:0D:76:B2:8A:D8:2C:39:10:7D:DC:45:97:29:3E:1F
            X509v3 Authority Key Identifier:
                keyid:C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/323830343a363461303a383030303a3a2f33342d3334203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:d6:a7:3a:a8:37:cd:46:44:1e:1d:33:ff:21:41:7a:45:
         95:43:b6:87:92:dd:92:93:f1:c8:44:57:72:79:16:ae:c4:af:
         61:9c:60:81:cc:56:9a:35:9a:16:89:e5:4f:43:c1:11:2d:6f:
         dc:25:c1:0d:75:9f:df:78:f5:83:10:df:f9:ce:f3:49:7b:79:
         3e:64:3e:34:09:14:f3:48:60:11:14:3a:14:b8:30:29:47:81:
         96:63:b9:c0:29:3c:65:85:a0:e9:9c:ef:71:64:00:de:41:11:
         55:cd:b4:36:b4:d8:a6:14:25:73:e3:f4:74:ba:b7:e9:dd:5d:
         60:d8:4d:f6:df:88:98:9c:34:9e:35:86:4a:b4:e6:4d:91:6c:
         1d:b8:a5:eb:3d:ff:2b:36:3a:01:04:5e:ed:c2:a2:14:23:35:
         6e:e5:c3:dd:fa:54:61:40:ba:66:df:89:6c:d8:63:e2:c0:e0:
         40:43:b2:03:15:23:82:bf:8d:0e:8c:4d:f7:a2:14:15:6f:d1:
         99:dd:71:8c:09:13:db:85:ab:29:bf:fc:68:17:49:5f:bc:04:
         e5:03:07:2e:c2:33:aa:12:1b:61:15:dd:06:d1:2f:a1:4a:06:
         14:3b:34:4b:67:08:0a:e8:2c:cb:c6:4b:06:c4:a6:e9:e5:91:
         d3:39:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:25 2025 by rpki-client