Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          Bil9omEP3CdtY3QOliGT121tmQH+YIWizWyguiZr6XM=
Subject key identifier:   9A:46:74:4A:BC:27:1D:64:6D:0A:72:91:33:19:BC:E2:C0:1C:08:3F
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       295A7AAA8982A6D37C79C08D9F51D16F9B0596D2
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 13:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5a:7a:aa:89:82:a6:d3:7c:79:c0:8d:9f:51:d1:6f:9b:05:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:97:4e:58:7d:21:44:ef:d3:16:84:9f:7e:
                    d5:38:78:ac:37:fd:29:33:79:ad:7a:87:90:e0:ab:
                    a0:39:8d:1b:4f:d0:77:f8:8f:c4:ba:ff:15:a9:82:
                    8d:cc:52:00:03:19:06:44:d4:47:40:58:67:53:54:
                    00:73:a8:32:4f:3a:7d:68:60:43:2a:ff:fb:5d:02:
                    3f:79:0d:13:97:e2:78:e4:5c:02:5c:a5:34:7b:c8:
                    70:79:62:9e:f0:96:f5:27:ac:9a:42:8d:07:f3:af:
                    9c:e9:7d:33:01:0e:61:b2:2d:9a:06:29:43:ca:a2:
                    a2:37:dc:a0:f9:c6:b7:9c:cf:9b:6c:63:16:4a:0e:
                    b4:69:85:1a:aa:c8:8d:b2:f8:0a:d8:ed:c5:c5:b4:
                    c1:6d:84:34:a1:56:15:3d:49:ab:97:43:77:96:84:
                    0f:e8:62:ec:b1:eb:b9:90:7f:6e:54:9b:ad:67:c2:
                    af:65:3b:13:81:6c:ea:32:7e:ca:40:3b:06:f0:03:
                    3a:a5:07:05:12:56:7e:a3:d3:9e:f6:2a:89:b5:95:
                    e9:81:94:02:1c:9e:ee:3c:60:6c:f0:67:98:b0:68:
                    a9:9e:d4:2c:f9:d8:6a:90:ff:b4:4c:bc:88:96:58:
                    24:dc:41:3d:04:33:5b:7b:33:79:be:8f:19:6b:41:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:74:4A:BC:27:1D:64:6D:0A:72:91:33:19:BC:E2:C0:1C:08:3F
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:24:00:cd:95:50:03:9d:22:84:93:92:da:fe:df:5d:0d:
         74:c7:17:77:c2:7a:f8:69:50:c7:fb:f6:ba:04:18:0e:43:99:
         53:51:72:57:61:e8:38:fd:f7:2e:00:29:dd:1f:af:68:62:79:
         6d:fa:ce:07:ba:87:8a:ca:cf:a5:b0:3b:83:d9:77:d5:62:81:
         ad:c0:27:1d:3c:a3:48:ec:7a:2d:66:42:ee:de:9e:c7:69:0a:
         f4:34:cc:49:1d:d4:c4:41:0b:57:a4:cd:c2:af:fd:d4:a6:fc:
         43:82:8a:a0:e8:84:1e:51:0a:ce:14:bd:f2:92:91:a2:d0:2a:
         ba:d9:22:85:1f:e3:b6:81:d3:49:b4:c3:7a:1c:62:d7:f1:58:
         76:38:3a:f5:5b:b5:3c:f9:05:8e:db:1b:8a:84:9f:74:bf:21:
         6d:a0:56:60:b5:fa:e6:3a:4d:9e:b8:6e:3e:e8:d7:7a:78:ae:
         30:b1:7b:8b:60:96:ef:b0:4a:35:2a:12:a6:47:36:c4:75:10:
         64:68:1f:ec:f3:31:e6:c3:9e:2b:6b:29:16:1b:7b:43:f6:da:
         16:4a:97:67:18:60:89:80:e8:d5:eb:cb:12:1a:df:a9:91:fa:
         fa:0d:00:45:a7:45:cf:6d:42:c3:4f:58:69:16:aa:7f:fc:3f:
         30:ba:2e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:01:56 2025 by rpki-client