Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          qr383gLbpN2wE+Gb86RNPkkyJKeozeWhyNGPZ4oAv2Q=
Subject key identifier:   F5:05:0F:F2:B1:57:7B:C9:F2:C1:55:DF:56:59:5A:67:13:9E:67:5E
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       6AF397549884FA8181FAB031AC7FA376C16C2CCA
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f3:97:54:98:84:fa:81:81:fa:b0:31:ac:7f:a3:76:c1:6c:2c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:79:ae:f7:f6:81:d1:54:e4:c7:10:3c:8a:
                    0c:26:db:52:66:0b:2a:ac:62:ad:fc:98:30:5f:89:
                    f6:38:89:94:10:eb:c0:9b:89:fe:ea:2c:b4:3a:fa:
                    60:90:00:46:16:2f:9f:a9:81:61:1c:a0:a5:d4:9e:
                    26:0f:2c:9b:07:10:06:b1:9a:49:29:44:ee:92:27:
                    f3:eb:9e:75:f9:d4:52:94:c3:a4:7d:b5:fc:84:34:
                    5b:d0:4d:88:e4:e2:1d:f1:62:33:0d:68:25:a1:a4:
                    b8:cc:38:9c:fd:43:03:7f:cc:48:7d:1a:d0:1b:39:
                    d3:15:f4:82:fa:cc:0a:c7:c4:c3:3c:2f:f4:97:f1:
                    73:13:3b:70:b2:99:eb:09:02:29:0f:31:32:0a:4f:
                    19:e5:4a:02:87:6f:49:e8:2d:fb:a7:af:13:32:a6:
                    2f:c4:62:20:5b:49:93:f3:bf:e5:f4:35:95:da:7b:
                    8f:d0:6a:7b:bd:38:48:0c:ab:2f:91:c6:15:34:d7:
                    4f:e8:e1:63:36:ab:d3:a7:7d:36:69:24:4f:75:ab:
                    ff:bb:fe:a7:4e:ce:7e:cb:07:51:f5:a8:63:36:eb:
                    37:2b:b3:b6:aa:98:78:f4:65:96:be:2a:d5:41:2a:
                    64:93:4d:1b:ca:fe:24:d5:4f:bf:cd:7e:f9:49:fd:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:0F:F2:B1:57:7B:C9:F2:C1:55:DF:56:59:5A:67:13:9E:67:5E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:46:e9:b6:a9:f5:fb:17:12:01:89:52:e8:f5:b7:7d:39:
         0c:a5:3e:81:54:45:1d:e6:41:b0:2d:f0:2e:dd:38:aa:80:47:
         2d:72:01:e9:f3:ff:f4:89:6b:36:dc:4a:a8:22:75:64:69:1e:
         9d:99:82:a2:4e:ad:96:b4:ae:a5:6e:6c:47:fc:cc:69:02:ab:
         48:bc:c5:2d:2b:b8:00:98:8c:97:7c:e8:c0:ac:3e:56:a9:93:
         04:3b:c6:24:a8:dd:b3:7f:66:58:50:1a:9a:97:5d:49:a2:ab:
         0f:8f:c1:b8:35:8a:32:f3:5e:2a:0b:5a:01:53:db:02:64:97:
         8a:f0:01:de:a7:9a:c2:86:95:72:8e:ce:87:ab:53:a1:99:d9:
         79:1b:4e:41:b0:9f:8a:4a:63:b9:e6:a4:6f:01:c3:1d:93:03:
         05:a4:f0:a4:e9:76:e1:10:a6:74:40:8a:f0:f0:1e:07:e3:8f:
         45:1e:1e:28:1b:77:32:90:2c:fa:4a:f1:67:cb:16:96:b6:90:
         ee:75:ba:1a:97:d1:4c:a9:41:2a:ac:fa:97:89:a0:5b:6d:8c:
         2f:81:0a:10:e5:4d:79:90:b3:9e:f6:cd:be:b1:32:0f:d0:1d:
         ee:a6:26:82:b7:73:91:d8:57:b7:8d:28:a1:d1:95:f4:b2:67:
         f7:46:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:37:04 2025 by rpki-client