Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa
File:                     323830343a316165303a3a2f33322d3634203d3e203631363936.roa (raw, json)
Hash identifier:          MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=
Subject key identifier:   F6:24:71:1D:9A:66:5E:6F:91:A2:49:2B:FC:84:3D:C2:97:78:EF:2A
Certificate issuer:       /CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Certificate serial:       52C109C3EC913B9C154473D6018E0D732C447C7B
Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa
Signing time:             Wed 16 Apr 2025 10:22:37 +0000
ROA not before:           Wed 16 Apr 2025 10:17:37 +0000
ROA not after:            Wed 15 Apr 2026 10:22:37 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c1:09:c3:ec:91:3b:9c:15:44:73:d6:01:8e:0d:73:2c:44:7c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
        Validity
            Not Before: Apr 16 10:17:37 2025 GMT
            Not After : Apr 15 10:22:37 2026 GMT
        Subject: CN=F624711D9A665E6F91A2492BFC843DC29778EF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:1d:7c:2a:58:5b:43:cc:9d:cd:76:e2:0c:
                    b8:c7:20:9e:21:d4:f9:2e:31:68:a5:c3:70:f8:dc:
                    cc:9f:a3:52:e5:46:40:6d:ac:6d:4b:20:44:94:4e:
                    e6:36:05:ef:43:b9:b6:06:db:9b:16:eb:b5:35:c1:
                    99:f1:35:e0:7c:83:3e:90:77:d6:bf:1a:f4:cf:45:
                    fc:6a:8b:48:a6:df:e1:ea:c3:f6:8b:a3:ec:10:e0:
                    f2:64:a1:5e:6c:b7:70:57:59:77:77:46:43:bd:5c:
                    d2:fb:f0:c4:50:6f:a0:dd:b7:ca:55:6e:05:58:da:
                    7c:15:bf:b8:95:33:95:23:12:c0:af:35:d5:a9:2e:
                    f9:1f:54:10:b4:f4:78:fc:54:60:7c:89:fe:5b:53:
                    5d:e8:e2:5c:dd:6f:27:3b:ed:02:90:c1:10:54:e8:
                    e7:88:57:b0:ab:2e:50:52:c0:fa:e4:c6:85:9a:9b:
                    6d:1f:1d:45:c3:4d:39:51:ce:18:6f:b3:b2:01:66:
                    8b:48:b7:20:96:1a:6a:c9:db:1c:3e:66:99:95:df:
                    8b:a2:65:f1:80:e1:9b:ad:c9:46:6e:05:d5:06:c8:
                    70:5c:18:f2:67:d8:15:fc:75:ff:1e:88:ad:cb:da:
                    6b:a3:b3:31:fc:35:2a:b1:a2:fc:13:a9:db:78:d4:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:71:1D:9A:66:5E:6F:91:A2:49:2B:FC:84:3D:C2:97:78:EF:2A
            X509v3 Authority Key Identifier:
                keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33322d3634203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:6b:ee:f0:c1:ea:89:d8:bd:f6:1f:85:85:a7:f6:43:7f:
         70:4d:ac:3f:d7:88:3a:0f:81:5f:57:a1:53:01:7f:af:26:8d:
         c6:75:60:b0:51:9c:a4:64:3a:15:8a:34:40:8a:1b:a3:2b:a8:
         63:bb:a0:c8:91:92:74:24:87:84:05:50:60:77:98:d8:fe:1d:
         fe:19:4a:dc:bc:9e:4a:f4:5a:0a:7c:61:4c:92:63:8d:21:f2:
         e3:33:20:07:5f:84:cc:33:6b:e9:57:ce:af:40:6a:cd:8b:06:
         70:1b:bd:06:6b:d2:36:fd:97:82:dc:f2:3e:5c:e6:49:93:13:
         52:f2:2d:4d:33:94:5d:6c:8e:18:0b:f5:44:63:94:18:41:da:
         95:84:cd:56:50:fd:22:06:1e:08:f9:8a:1b:3e:fe:30:5d:d0:
         b3:1c:05:67:e7:0d:d0:ed:68:a0:84:3a:ba:35:d2:52:3e:ac:
         f7:8f:f2:77:fc:87:04:01:c5:31:9c:f1:4e:3b:1e:85:d7:80:
         52:26:e9:74:5a:40:20:b4:4f:24:07:13:43:66:e6:be:df:49:
         22:42:76:9b:bd:44:b2:be:16:30:87:07:01:e2:59:14:58:81:
         62:f8:5a:a9:6a:60:6b:81:ab:12:42:7c:e9:47:fc:a9:f9:06:
         54:39:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:17 2025 by rpki-client