Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
File:                     323830343a323038633a3a2f33322d3438203d3e20323634343937.roa (raw, json)
Hash identifier:          mX+Ie8Fs8Xmim4Ck6tgEHLqy9143KO4le39eSq2U+BE=
Subject key identifier:   F5:AC:84:62:F7:D3:B3:A2:03:F8:5D:D4:40:A5:FD:68:A6:DC:72:5E
Certificate issuer:       /CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
Certificate serial:       237511D12F6007E2E7794BB2DBAC08CB78BB5E03
Authority key identifier: 99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa
Signing time:             Wed 05 Mar 2025 23:55:16 +0000
ROA not before:           Wed 05 Mar 2025 23:50:16 +0000
ROA not after:            Wed 04 Mar 2026 23:55:16 +0000
asID:                     264497
IP address blocks:        2804:208c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl
                          rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:11:d1:2f:60:07:e2:e7:79:4b:b2:db:ac:08:cb:78:bb:5e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
        Validity
            Not Before: Mar  5 23:50:16 2025 GMT
            Not After : Mar  4 23:55:16 2026 GMT
        Subject: CN=F5AC8462F7D3B3A203F85DD440A5FD68A6DC725E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:ef:9b:71:23:8d:ae:02:57:93:53:90:4e:
                    74:41:c1:54:a6:37:24:7b:e3:1d:05:40:c3:a7:59:
                    c1:99:fa:80:43:4b:5e:2f:cf:d5:31:b8:35:3c:75:
                    44:9c:dd:f0:b0:e8:6a:70:66:b7:f0:5c:3d:be:e0:
                    b5:2a:b5:74:6b:e6:80:f7:3b:ef:12:c3:10:3d:9c:
                    55:d6:03:08:fd:19:d6:a4:ad:36:e7:32:a4:f7:36:
                    bb:5e:ea:1d:3f:8f:24:f8:a3:0a:d4:f5:38:4a:0a:
                    a2:e0:e1:ea:fa:e6:95:c9:10:98:1c:f1:a9:63:5a:
                    f6:87:e6:eb:ee:bb:67:bc:af:43:18:c3:c5:55:c3:
                    85:d2:cb:5c:65:3d:50:f7:58:f3:8c:a7:1d:f2:e4:
                    82:e1:9e:70:ff:a6:ae:87:a2:ea:42:ad:6d:2e:69:
                    12:a0:2d:cb:e8:17:cd:0b:66:a0:a0:37:93:68:b5:
                    cf:43:a8:43:02:a9:54:af:a7:29:64:bc:7c:d4:5c:
                    8a:82:6f:f6:65:ad:30:54:f0:8b:5f:00:96:52:78:
                    79:97:61:f5:44:52:c8:89:d2:34:6b:4c:41:9c:18:
                    51:c5:46:76:ca:21:12:f2:13:45:9c:7b:5f:21:de:
                    75:14:b6:bd:e1:d8:f0:cf:01:41:81:1d:b7:43:6f:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AC:84:62:F7:D3:B3:A2:03:F8:5D:D4:40:A5:FD:68:A6:DC:72:5E
            X509v3 Authority Key Identifier:
                keyid:99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/323830343a323038633a3a2f33322d3438203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:208c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:a8:79:fb:b5:fd:01:f7:5e:a9:d3:26:05:7d:20:b2:21:
         ee:db:ac:e4:da:71:b7:fc:2f:cd:af:3e:ad:a6:99:7f:fc:78:
         a1:04:b0:83:b8:d0:c6:04:c3:f3:2d:d9:f0:99:00:c3:65:ff:
         7b:15:45:31:8e:f0:37:3b:a8:b0:6b:82:ea:e4:64:62:02:e0:
         01:df:fb:f3:ff:f4:e2:f0:5a:78:5f:1c:35:b2:ee:b5:1f:6e:
         58:ac:b8:eb:6a:c3:40:42:c0:e1:c4:b9:a5:c4:6c:0c:a6:9f:
         ba:6c:04:e0:0e:95:48:09:47:49:81:c5:51:1f:53:7f:24:ee:
         46:45:4e:d4:0a:55:74:f2:fc:f3:e8:2e:1f:28:a5:c0:33:8e:
         5d:94:b2:4c:17:0e:7f:b1:6f:41:03:fd:79:ba:2b:78:4e:0e:
         ea:82:ea:4f:c8:b2:e8:fb:0d:1b:6e:dd:84:fb:39:ae:33:92:
         b2:7d:57:58:40:57:1e:3a:94:61:b9:8d:5c:50:76:8b:93:83:
         77:16:c7:f0:dc:93:d3:f2:9f:bf:43:71:26:75:94:aa:c0:c5:
         19:24:75:23:29:d5:43:9d:2a:6b:82:7e:fa:3f:40:79:73:22:
         62:7f:05:83:20:6b:68:76:59:b0:06:bb:e1:e8:15:fa:dc:83:
         fb:44:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:04 2025 by rpki-client