Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa (raw, json)
Hash identifier:          x4EOsLw0hhQ65lota8rX2pTO2AwVgEy52+wrIKxM1sk=
Subject key identifier:   BA:F0:A8:59:51:3D:27:BC:DA:94:D8:C9:A4:E0:5A:68:19:6C:2D:8F
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       3866FC6E829725DA4D568694A2032385CE84DC58
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:66:fc:6e:82:97:25:da:4d:56:86:94:a2:03:23:85:ce:84:dc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:90:10:c9:7c:de:fe:9d:1b:cc:42:f3:85:
                    2e:95:99:19:20:a0:61:d2:e6:e8:16:ba:d3:7c:82:
                    79:a7:bc:58:5f:08:2b:61:35:2b:fd:75:9f:07:65:
                    0b:1c:f2:02:94:06:fd:02:68:37:d4:0a:ee:07:22:
                    df:c7:12:f2:bd:46:df:ae:79:9a:f2:89:54:50:eb:
                    e0:b8:f4:f0:4e:2d:38:73:14:a1:e0:12:33:6d:af:
                    ea:4f:d9:9d:45:3d:0c:4b:08:35:2d:1d:d5:c5:23:
                    61:39:75:94:4d:93:86:e0:98:76:e6:bd:a3:5c:58:
                    ad:72:e3:64:7a:e4:25:a8:40:c3:ab:72:fc:8b:a0:
                    20:41:fe:ed:42:95:df:e9:95:62:83:9a:7b:eb:1d:
                    7a:5a:df:23:56:ce:51:df:f1:a4:d7:02:17:d4:16:
                    2b:b7:09:98:28:6f:25:bb:b4:4c:6c:6c:51:74:f7:
                    e4:37:88:1c:81:3c:62:76:5e:e8:e6:00:ff:ec:60:
                    cc:39:e1:6c:3e:03:f6:34:b7:9e:8e:dc:9c:79:a1:
                    28:1d:da:e4:e2:94:d3:30:ee:a4:b6:8a:cd:e3:a4:
                    a5:55:80:58:c1:61:11:3a:81:4e:8a:69:81:0e:c4:
                    fc:6d:e1:d9:ee:66:b1:04:4c:10:0a:e9:09:57:ff:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F0:A8:59:51:3D:27:BC:DA:94:D8:C9:A4:E0:5A:68:19:6C:2D:8F
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33342d3334203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:cb:83:53:8f:a6:b3:c2:ac:e1:7f:3e:1b:aa:2f:3a:e6:
         89:7b:5e:56:5d:52:3e:45:f6:24:0e:46:d9:2b:af:c2:c6:fc:
         f9:19:d1:1b:46:13:db:a0:91:2b:c3:1a:4c:c9:d9:80:d6:34:
         54:79:ba:ed:fd:94:2d:33:e2:0c:60:67:f0:fd:64:c4:16:61:
         29:82:97:b1:92:d5:6e:36:56:06:10:80:6a:6b:60:8f:42:d1:
         cb:a5:24:74:b1:6f:28:95:81:3f:11:0e:b3:2d:9d:10:9d:2f:
         44:a2:23:2e:13:33:eb:8b:7f:79:5f:9f:2c:ee:d1:d2:85:50:
         35:55:46:37:35:91:3c:bc:c4:37:bb:e0:ac:55:88:91:70:8e:
         48:ca:a8:f4:be:41:0d:c6:1d:ff:b8:3c:2b:21:18:45:e2:d3:
         0b:be:57:5d:74:cc:75:c6:eb:69:74:26:a0:6a:c8:e7:94:af:
         18:c7:c9:ae:40:be:a7:2b:2d:cd:57:a9:38:4b:cb:af:08:63:
         1f:a6:fc:3c:db:16:f3:d6:94:09:a9:e2:9d:60:58:1c:14:7b:
         c8:71:1a:a6:2f:70:79:35:11:5b:a7:e2:39:5f:85:32:80:e6:
         6a:29:22:37:f6:33:52:e9:15:69:db:84:cf:73:bd:02:5f:84:
         00:14:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:16 2025 by rpki-client