Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          pkciq98rc5X2ERI2fQUh/QXQjiY4bPRbSuZupqj2WYk=
Subject key identifier:   09:31:9A:E9:D0:D0:EC:97:F1:9C:8C:4E:54:BF:60:D4:17:38:5C:13
Certificate issuer:       /CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
Certificate serial:       037C27E56B6CEE7DAB40BBACD0913C85092191D1
Authority key identifier: A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Mon 10 Feb 2025 19:20:54 +0000
ROA not before:           Mon 10 Feb 2025 19:15:54 +0000
ROA not after:            Mon 09 Feb 2026 19:20:54 +0000
asID:                     263940
IP address blocks:        2804:2818::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:27:e5:6b:6c:ee:7d:ab:40:bb:ac:d0:91:3c:85:09:21:91:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00894A4159E2748ED3F950641ECEA8A9D01128D
        Validity
            Not Before: Feb 10 19:15:54 2025 GMT
            Not After : Feb  9 19:20:54 2026 GMT
        Subject: CN=09319AE9D0D0EC97F19C8C4E54BF60D417385C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:f1:e9:2f:be:60:d1:2c:ab:6e:35:c0:3b:
                    14:b0:a9:d6:1c:23:99:e9:c1:69:11:ef:88:45:4c:
                    c2:37:92:ea:54:c4:33:70:05:c1:87:c6:1e:f9:6d:
                    4e:b8:74:ff:cd:06:62:47:96:b0:b6:55:95:e4:1a:
                    ca:9f:d0:3f:40:93:35:00:d5:a0:55:d4:53:37:69:
                    a6:48:30:39:f5:ab:71:46:de:5a:7b:0e:77:8a:4d:
                    e8:7f:40:d3:18:8b:5b:6c:f0:4c:91:91:a4:2a:2a:
                    cf:87:a3:6b:9e:36:2f:ab:9c:e8:17:e3:79:df:9c:
                    03:d8:33:c9:2d:6a:15:0a:11:8e:54:59:fa:48:70:
                    b9:31:3f:9f:af:e3:00:b4:c2:01:46:b8:f3:01:55:
                    40:99:0f:a9:c7:d4:ed:e3:06:e8:40:4f:f6:13:30:
                    3d:0d:a3:04:39:ee:8c:c8:f7:89:b2:7e:25:3e:a9:
                    f6:03:5e:41:1b:e1:e6:30:90:db:c9:97:38:45:29:
                    50:e6:a0:af:8f:73:6f:8b:99:28:b0:d9:0d:42:e2:
                    7a:f0:17:fb:6d:8c:1c:30:3b:bd:c6:90:c9:1d:4a:
                    51:63:b1:8d:77:f8:19:50:ea:eb:70:1c:7a:9e:a8:
                    52:9a:14:90:ac:b0:c9:b4:e2:9f:53:42:57:28:bc:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:31:9A:E9:D0:D0:EC:97:F1:9C:8C:4E:54:BF:60:D4:17:38:5C:13
            X509v3 Authority Key Identifier:
                keyid:A0:08:94:A4:15:9E:27:48:ED:3F:95:06:41:EC:EA:8A:9D:01:12:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/A00894A4159E2748ED3F950641ECEA8A9D01128D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A00894A4159E2748ED3F950641ECEA8A9D01128D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:af:f8:a5:06:cd:12:93:34:52:60:87:af:a6:34:5d:31:94:
         2f:f7:d4:b2:dc:f8:81:a6:6b:92:31:11:09:f9:29:12:ca:8c:
         c5:9a:c8:0d:bb:13:70:fe:a5:7d:10:38:87:31:46:89:2b:19:
         51:bf:96:7c:d4:8e:97:12:d7:93:f0:b8:a3:f3:ac:09:73:a1:
         e7:34:51:02:7c:69:be:73:a3:f0:be:46:5f:fc:f3:39:27:4a:
         a5:c8:de:cf:d1:25:d0:d9:64:3a:86:d1:77:55:f8:95:40:52:
         7c:ee:5b:42:33:42:c7:4f:c5:32:cf:b5:0b:0f:cf:1a:59:df:
         de:93:6b:28:6e:26:c7:f9:0c:6e:31:e2:41:c0:21:fa:97:17:
         ef:19:dc:2b:df:24:d2:58:cd:a5:89:16:45:3a:32:33:4d:2e:
         1c:a5:70:a0:0c:3f:6d:c1:7c:11:9d:bc:1a:c4:cd:73:4d:85:
         24:60:81:72:51:43:62:7d:ab:01:81:ce:41:c1:38:4b:44:80:
         d2:9a:63:d0:8e:79:2a:54:44:99:a0:cc:a9:97:ba:82:46:46:
         69:df:d5:7f:63:68:cc:85:4f:c8:09:dc:f8:c1:4b:04:0b:1f:
         db:aa:5b:62:a3:e5:0b:42:5a:0c:fd:f5:48:ce:d7:36:57:4d:
         6a:74:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:45 2025 by rpki-client