Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          cYsCAX71jbb1fcQJsFUm9KcEKgeghLE7ZdD/iwm6JOw=
Subject key identifier:   81:15:FE:69:36:B2:0E:22:2F:36:2F:DF:5F:20:74:94:67:5A:AB:6B
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       2822CC9CD7B40B41565869DBB43FBA8996BA8A1B
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:22:cc:9c:d7:b4:0b:41:56:58:69:db:b4:3f:ba:89:96:ba:8a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:88:d5:07:19:83:99:56:3b:88:bb:4e:76:
                    0f:47:29:ca:4a:76:40:7c:8c:c7:a2:df:1d:86:75:
                    33:d9:a9:b9:71:32:8e:aa:35:08:9f:37:39:4d:41:
                    0a:da:09:3b:27:a5:0a:77:b1:52:3e:81:04:d1:17:
                    39:94:bc:6f:35:ce:ed:45:d1:3f:a8:5d:fb:fe:ca:
                    1b:9f:e7:19:55:2b:8c:54:1c:f4:df:53:15:17:ec:
                    56:46:a9:00:9c:4e:a3:e5:c6:a7:1e:2a:a5:a6:53:
                    c4:70:e5:07:e6:8f:d9:9f:60:8b:bf:18:3d:d7:83:
                    b4:c4:37:af:4a:f6:74:e7:93:4d:29:fd:4d:87:cd:
                    37:74:1a:1b:2a:0b:17:2d:9c:8c:23:ba:97:a4:e1:
                    9f:7e:b5:b2:2f:2a:67:2b:54:de:17:13:63:cf:30:
                    bb:8e:89:51:b1:09:39:80:0a:2f:fc:04:3f:c7:3e:
                    e2:b2:ca:4a:3d:b6:84:1f:af:ab:5a:fc:d9:75:87:
                    3a:b1:f9:e4:af:82:5d:f8:d1:50:42:6e:36:e0:19:
                    46:fd:0d:9e:65:26:d3:60:90:d2:97:44:6f:56:29:
                    40:69:26:41:ec:05:08:35:34:72:af:44:1b:81:81:
                    56:dc:22:94:41:0f:ce:83:d1:f7:10:20:ef:62:7f:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:15:FE:69:36:B2:0E:22:2F:36:2F:DF:5F:20:74:94:67:5A:AB:6B
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a373030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:15:c0:d4:f1:c4:94:6f:2d:49:3c:ec:c9:af:d6:d8:44:92:
         31:e5:8f:69:58:9b:fb:8d:af:14:30:c6:27:74:6e:bd:ce:58:
         4f:30:9b:a8:fe:f1:80:2f:ae:73:f3:6e:78:c9:41:b6:4b:0b:
         87:77:a1:93:63:24:15:96:4f:ca:10:ef:48:32:b1:d3:66:8a:
         9d:6b:33:5c:a3:3d:4c:b4:af:40:74:31:c6:33:82:a7:08:4b:
         84:53:4e:b7:84:71:a0:35:75:f3:51:b4:a9:23:eb:37:58:b3:
         32:81:d8:f6:21:7b:3f:4c:41:2b:74:b0:a1:05:55:da:5b:1a:
         9a:37:4c:fb:69:2b:35:71:c7:27:ee:20:9c:10:e5:ce:fd:ce:
         72:c3:ad:77:23:93:ea:ec:0c:83:6b:5f:32:7f:74:61:3a:f8:
         71:66:92:51:fc:51:18:94:fe:62:8a:3e:15:01:14:07:d3:ec:
         ec:18:63:18:c8:89:46:06:5c:0e:84:b2:11:42:9d:96:63:60:
         82:94:3e:d0:b4:2f:81:21:01:a8:8c:5f:2d:77:9d:27:67:29:
         8d:d8:0f:29:00:f8:2c:a9:ee:2e:52:4d:df:37:9e:45:af:9e:
         4d:46:4d:98:e8:55:9d:5e:1a:98:38:3f:1d:98:74:4d:af:1d:
         86:6b:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:21 2025 by rpki-client