Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          JHOf/lbL6opcPx/+rYYwNcGp3Bcnv3bQAySHnnDz9Xo=
Subject key identifier:   E3:C0:AD:EB:7B:CE:71:12:BE:BF:C2:B8:DD:A9:28:7B:81:27:A5:3E
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       70E028EED3EE1A3179CE9914AA75804540641041
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e0:28:ee:d3:ee:1a:31:79:ce:99:14:aa:75:80:45:40:64:10:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:4c:24:25:b6:4c:3d:12:59:4d:3f:f2:ee:
                    dd:02:26:09:b2:2f:e7:19:05:bd:6a:01:bd:57:f5:
                    45:20:72:2e:28:f8:cf:76:93:2d:c6:e5:ab:05:00:
                    4a:7a:50:8d:08:19:80:45:8f:d1:80:7b:a0:c9:5e:
                    76:b5:4d:d7:2f:1d:1c:0d:ec:c0:ff:b2:5e:c7:4a:
                    16:02:7b:93:9c:a6:0c:5b:87:4c:05:41:49:8b:4e:
                    75:72:81:12:2e:d3:a3:21:b5:18:33:f5:63:23:d7:
                    cd:a3:89:8b:1e:df:13:f5:af:a4:1a:01:fe:72:5b:
                    4c:e8:2b:cb:96:80:1d:e3:e2:9f:10:47:64:88:8c:
                    6e:b6:93:19:7d:c7:59:4c:57:a4:38:ac:d4:cc:68:
                    78:ae:0d:0d:a4:60:b5:e2:e9:5e:7f:ec:63:b5:ac:
                    73:25:24:c8:7e:ff:6d:c2:e2:a9:c0:e9:c5:ad:05:
                    37:3a:1d:72:01:bb:34:ad:24:1b:39:37:63:e4:75:
                    78:01:f1:27:63:bb:a3:97:fc:a3:84:e5:eb:eb:1d:
                    04:79:83:41:3b:93:43:59:ee:e8:17:92:55:a9:8a:
                    50:ed:55:c0:b8:4d:a2:53:b1:d1:a5:59:dc:3b:6a:
                    db:08:f2:e3:50:91:10:39:71:79:93:df:d2:b5:7b:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:AD:EB:7B:CE:71:12:BE:BF:C2:B8:DD:A9:28:7B:81:27:A5:3E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a343030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:65:29:1a:56:cc:7b:d5:b8:40:c6:de:cf:67:43:e2:f8:
         e3:3e:8b:b6:be:f8:db:60:86:12:db:b8:ed:87:77:83:4c:54:
         cb:e8:7c:77:2d:9e:e8:2a:f6:91:16:97:c6:be:19:c9:d5:92:
         38:7a:b2:c2:6a:07:9c:cf:1e:e0:ae:5e:09:92:e3:ce:33:48:
         3b:49:4f:31:d9:66:a4:0f:a3:d5:38:5e:6b:c8:a9:de:8a:b6:
         d2:4e:e6:f8:5c:3c:38:ed:f9:86:bb:5f:b3:22:a8:31:e0:e7:
         e8:b2:e3:1a:2a:6f:f3:de:52:4b:ac:01:47:ba:f1:27:30:b8:
         99:c0:af:a2:91:aa:51:7c:7d:5b:38:82:d0:d8:62:64:ba:c6:
         ce:dc:a3:a2:ca:62:90:23:b4:15:30:fe:64:54:16:c7:fd:fd:
         4e:46:82:af:bc:96:68:a5:5b:d5:55:44:01:62:64:af:e8:c6:
         21:c5:8d:ae:d7:4e:c6:92:78:d2:00:2a:f7:26:1c:0b:a1:ac:
         be:11:83:24:d6:ba:45:41:f1:a1:7d:f0:34:59:3e:f7:81:fe:
         9b:4d:bc:d1:89:1f:3c:da:4d:87:aa:a9:a7:25:9c:22:78:ad:
         c0:84:86:89:b9:3e:25:6a:05:f3:46:52:6d:de:c6:cd:b4:5c:
         8a:c2:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:21 2025 by rpki-client