Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa
File:                     323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (raw, json)
Hash identifier:          i3cBezF8IApSQaQqjUBcgOAnsqNsV9UdV/mGucW8iO4=
Subject key identifier:   B9:6B:39:03:66:72:8D:E0:9C:2D:40:55:98:7F:B5:EA:EF:AE:5D:4B
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       7449711C0A5F6DA08511E4D4574DD3325F3B1683
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa
Signing time:             Mon 14 Apr 2025 20:14:58 +0000
ROA not before:           Mon 14 Apr 2025 20:09:58 +0000
ROA not after:            Mon 13 Apr 2026 20:14:58 +0000
asID:                     269298
IP address blocks:        2804:6274::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
                          rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 23:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:49:71:1c:0a:5f:6d:a0:85:11:e4:d4:57:4d:d3:32:5f:3b:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: Apr 14 20:09:58 2025 GMT
            Not After : Apr 13 20:14:58 2026 GMT
        Subject: CN=B96B390366728DE09C2D4055987FB5EAEFAE5D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:ba:4d:f0:5f:04:79:74:b7:ac:d0:e6:f9:
                    fd:96:a5:c6:7c:3c:d0:5a:ec:4d:73:73:ba:cb:b9:
                    44:37:a7:f7:76:33:91:aa:3b:aa:e3:db:cc:d0:3e:
                    77:df:60:4b:3e:b2:87:d5:a4:de:11:19:ea:98:fa:
                    bf:0d:d9:f3:38:aa:aa:29:e8:a2:f6:a0:d4:c9:60:
                    a5:c9:c8:5c:90:49:e9:9f:1c:98:0e:97:8c:23:7c:
                    58:90:2b:a4:44:9f:b1:a8:9f:4a:21:3f:0d:40:85:
                    16:0c:ed:3e:bc:4a:4f:bc:13:ad:90:b1:17:9d:0c:
                    ae:07:76:1e:21:92:8d:80:75:ce:2d:00:49:f9:dd:
                    c1:f2:d9:20:23:7a:c5:d6:ee:0e:b4:61:5b:43:c1:
                    87:23:68:d1:5c:a1:3f:5a:d7:f7:ae:5c:f6:f8:c7:
                    9a:53:95:b6:1f:b2:79:ea:7d:69:5c:00:81:4f:d5:
                    77:1f:a4:e4:fe:17:81:ef:fc:ab:fd:6e:7b:fa:1a:
                    7a:b4:06:c3:70:33:73:01:14:cb:58:57:cf:32:8f:
                    cb:3f:3e:2a:bb:ac:75:01:0f:ee:1b:b2:b9:43:1e:
                    30:8f:6f:68:a7:e3:2a:8a:b7:80:a9:34:f3:a7:00:
                    77:06:7c:f3:97:f2:39:e0:c2:e7:2b:29:57:61:0e:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:39:03:66:72:8D:E0:9C:2D:40:55:98:7F:B5:EA:EF:AE:5D:4B
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6274::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:00:0c:a9:61:06:cd:3c:c0:ea:c0:f4:cf:3b:cd:45:2b:a5:
         f6:f3:a8:82:a6:e6:7c:ed:c2:55:f2:db:b2:ab:8c:65:f3:1b:
         66:d5:10:c6:d6:9b:0b:bc:72:00:00:89:24:7f:14:79:c1:8f:
         56:f8:9b:fb:3c:9f:fa:2e:ac:3a:78:23:33:f6:77:87:ff:6f:
         61:f0:51:56:3c:aa:4f:53:8e:e5:6b:5c:1c:2d:9e:55:5d:58:
         83:5f:2b:69:55:69:b5:e2:73:ea:cf:0e:4f:5a:87:ee:a7:bf:
         ac:dc:6d:44:3f:54:0e:a4:96:0f:82:23:81:b3:82:61:fd:bb:
         ef:b3:1a:71:57:fd:d8:3c:72:06:15:ac:47:1a:22:b7:9f:05:
         66:a6:49:9f:bb:20:fa:78:b7:5a:94:bf:ac:d6:4a:e8:3e:cb:
         13:13:cf:dd:8f:d5:6a:02:36:4a:2c:ee:b5:37:6f:21:e0:f1:
         57:ce:22:9f:3d:44:c7:97:1b:91:c8:d0:da:76:dc:bf:14:b2:
         1d:dd:91:14:24:2c:92:0b:bf:fa:33:99:6d:10:5f:bd:51:e1:
         f7:2c:64:0f:77:63:60:95:20:34:33:88:4a:dc:0b:54:c4:75:
         51:34:42:70:90:1c:9f:43:15:fb:ee:e5:01:f9:07:8b:fc:5a:
         43:2a:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:22:45 2025 by rpki-client