Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa
File:                     323830343a336430343a3a2f33322d3332203d3e20323636323438.roa (raw, json)
Hash identifier:          B739vLpeXl09S147b83JE44smthhYa7NQOlVmZRa/oI=
Subject key identifier:   9A:7B:47:B2:C5:35:6F:74:B8:9E:4D:75:AC:88:49:AE:3F:8B:51:3E
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       120ACC2CC167DB9931BAD5FA5486985483685580
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266248
IP address blocks:        2804:3d04::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0a:cc:2c:c1:67:db:99:31:ba:d5:fa:54:86:98:54:83:68:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:85:98:e3:28:f3:e2:8d:18:a8:04:a2:0b:
                    d0:bd:7d:4f:49:56:6c:11:68:60:e1:85:d0:a7:7f:
                    c2:63:0d:76:b8:1b:5c:c4:6e:7c:ab:4b:ab:46:64:
                    ac:50:77:33:7e:36:0c:1c:89:61:28:4a:3b:f1:11:
                    0c:8b:01:e4:34:a2:8d:0b:35:7e:52:55:be:88:3b:
                    8d:16:f5:ba:da:66:6e:ee:0b:9b:c1:5c:e0:2d:52:
                    96:df:b5:a1:0e:92:b9:8e:65:18:d7:e5:0d:02:96:
                    1b:27:81:40:de:e3:57:61:5e:c9:27:dc:74:92:3a:
                    1e:fc:f5:90:fb:f7:5c:a2:0e:6d:0c:27:4a:da:e7:
                    3e:1c:89:f0:b3:12:ae:c1:4c:aa:cb:1a:00:a7:ba:
                    4e:e5:ae:81:58:0b:a7:a7:5a:61:4e:e5:01:dc:6d:
                    17:6f:b9:c2:4c:78:08:68:93:f9:d2:7e:6e:d0:bc:
                    d1:74:6c:c6:81:00:ab:98:78:9a:82:db:4f:f4:47:
                    e1:e8:18:6c:b5:a5:87:f1:61:7e:53:f4:d7:19:c1:
                    1c:4c:4f:b5:40:9a:a9:57:93:06:4b:34:36:de:7b:
                    66:95:a5:ea:2c:67:1c:bb:2b:fd:0e:89:8d:af:8c:
                    22:e3:f7:c6:35:38:fb:b2:ce:d7:ea:c8:be:71:28:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:47:B2:C5:35:6F:74:B8:9E:4D:75:AC:88:49:AE:3F:8B:51:3E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a3a2f33322d3332203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e7:62:17:95:43:a4:35:db:a6:80:8b:38:f9:20:e1:b8:00:
         64:e1:c5:c6:c2:06:40:d1:52:c4:18:7b:34:b2:cf:a8:e0:7c:
         41:35:11:52:66:91:30:77:fc:68:ce:20:70:ad:19:aa:69:d4:
         59:2e:a6:0a:0c:15:91:f0:b5:74:18:58:ab:88:e2:f6:04:8e:
         b4:29:4f:0c:c6:40:99:7b:70:ab:54:ab:f1:71:56:a3:2c:f3:
         dc:2a:7d:de:85:ab:3c:41:d7:b5:06:e9:0e:d4:ba:d5:c4:8d:
         89:c8:35:26:33:e6:c5:16:00:c9:5a:01:5c:56:e9:89:4d:ba:
         a5:24:6b:4d:ad:0d:b5:cc:12:21:84:26:33:20:df:4a:5b:fa:
         1c:6e:bd:97:66:db:69:75:d0:99:f7:bc:07:67:c2:4b:c3:a5:
         6a:17:84:1f:ec:01:44:7b:b0:fe:c0:50:be:d5:21:17:38:66:
         18:ec:78:0b:4a:65:29:10:f8:b8:d7:86:d5:d9:4e:01:22:35:
         35:69:6b:e2:dd:40:37:de:2e:d0:92:d1:82:8e:09:46:0a:e8:
         ef:04:38:af:b1:13:07:33:50:e9:06:20:0d:38:03:e8:0a:a8:
         b0:21:4f:b9:17:ef:3c:84:96:bf:0e:85:46:8e:39:1a:fb:66:
         40:19:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:12:49 2025 by rpki-client