Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
File:                     323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (raw, json)
Hash identifier:          bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=
Subject key identifier:   CD:46:5E:79:48:84:8E:8B:94:E1:9D:EC:01:E7:E7:0B:BA:2B:71:83
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       15625002A38E6FED04A0C2B7424B49E7C23E7412
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
Signing time:             Sun 05 Jan 2025 10:49:20 +0000
ROA not before:           Sun 05 Jan 2025 10:44:20 +0000
ROA not after:            Sun 04 Jan 2026 10:49:20 +0000
asID:                     269053
IP address blocks:        2804:5ebc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:62:50:02:a3:8e:6f:ed:04:a0:c2:b7:42:4b:49:e7:c2:3e:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Jan  5 10:44:20 2025 GMT
            Not After : Jan  4 10:49:20 2026 GMT
        Subject: CN=CD465E7948848E8B94E19DEC01E7E70BBA2B7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:81:6e:39:a6:96:b8:a9:8a:75:12:1b:72:
                    29:6e:39:4b:44:e2:32:0f:c7:30:55:51:37:d5:66:
                    5f:03:d6:15:71:72:27:44:cd:58:db:b2:5b:58:eb:
                    17:a8:d1:fa:b9:8a:38:b6:3b:6f:62:ae:15:bb:0a:
                    8d:3e:63:5d:5f:02:03:64:20:37:2b:f6:f2:91:6a:
                    86:28:36:ab:fe:d8:91:62:75:28:5b:8a:62:f2:9e:
                    10:15:9c:f8:74:7d:23:31:18:16:0f:ea:f2:9d:a0:
                    35:91:63:85:81:40:25:07:3c:79:e4:b4:ab:48:54:
                    7d:9c:3c:d8:16:eb:d0:b7:e7:88:fd:5b:8f:3c:b4:
                    39:c6:19:2d:5b:fd:69:e7:66:af:9a:f5:81:c1:2e:
                    71:6f:24:c8:f1:8c:6a:e3:75:0e:50:6c:d7:97:a8:
                    df:6d:eb:5d:f4:21:44:8b:ed:58:f4:53:e9:d5:32:
                    12:d6:c1:58:ff:26:c0:af:c7:6b:45:5f:e7:34:8b:
                    5a:a1:5f:d9:9a:74:61:25:92:a1:e5:45:0b:e6:cb:
                    11:38:c2:e9:1a:66:a0:65:57:bf:ab:fd:fe:36:31:
                    d4:2a:4e:ed:bb:00:12:67:03:86:61:d7:be:29:78:
                    b8:27:82:02:75:de:17:04:be:55:d2:d4:55:bf:e3:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:46:5E:79:48:84:8E:8B:94:E1:9D:EC:01:E7:E7:0B:BA:2B:71:83
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:4b:4c:d8:d5:50:f6:be:8a:f2:ed:80:98:25:7e:7d:76:
         bb:67:d6:78:e1:77:f8:83:d2:9b:c7:8f:7b:e0:dc:52:31:70:
         3f:0d:29:a1:74:7a:f6:97:ee:5e:8f:3a:2a:99:76:d7:e7:79:
         b7:30:b4:33:f5:04:e7:c2:96:66:e7:ce:58:80:26:97:f8:28:
         ea:80:44:54:15:ea:2e:3a:db:a6:d3:4c:ea:a7:c3:7c:cb:02:
         b1:36:88:b9:f9:f0:66:3c:9a:07:a6:9c:d7:86:8e:a9:c1:12:
         b9:11:19:3c:cf:49:6b:ab:a5:61:06:47:0b:b9:98:56:74:6e:
         be:7c:5a:e3:dc:9b:c3:24:67:3a:5e:1f:5f:6c:f0:01:38:a1:
         5d:d0:f8:7c:d5:27:ca:fc:29:e4:b6:3d:29:b6:90:b5:73:5e:
         b6:ca:e8:95:bc:bb:ac:3f:83:64:72:39:cd:65:b0:87:c3:89:
         d0:b0:18:4c:23:d1:37:7d:88:71:6f:d0:9e:ba:1d:0c:04:17:
         1d:59:ad:6c:63:54:48:5a:87:0c:0c:8e:5e:ec:e8:85:96:53:
         75:d1:9f:7a:1c:1c:c7:ab:81:5b:68:3e:bd:92:1d:12:49:41:
         75:c4:e3:2f:91:f8:47:57:ca:a8:38:a8:8d:39:fe:23:79:99:
         8d:46:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:46 2025 by rpki-client