Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa
File:                     323830343a363634383a3a2f33322d3332203d3e20323639353436.roa (raw, json)
Hash identifier:          IQsB4trOqRiSwT/0zl8VAaHPB1ZonM4kRH5gkSbLqCk=
Subject key identifier:   5D:F5:BE:77:42:55:EE:F4:F2:7F:DD:E5:51:29:7F:FA:A9:17:5C:0B
Certificate issuer:       /CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A
Certificate serial:       5E13897D306B177AC7D80F1D04A26211E89115F6
Authority key identifier: 6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa
Signing time:             Thu 06 Mar 2025 00:33:05 +0000
ROA not before:           Thu 06 Mar 2025 00:28:05 +0000
ROA not after:            Thu 05 Mar 2026 00:33:05 +0000
asID:                     269546
IP address blocks:        2804:6648::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl
                          rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:13:89:7d:30:6b:17:7a:c7:d8:0f:1d:04:a2:62:11:e8:91:15:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD814792FB1672D1ADDDB89AA31CD78ED6B642A
        Validity
            Not Before: Mar  6 00:28:05 2025 GMT
            Not After : Mar  5 00:33:05 2026 GMT
        Subject: CN=5DF5BE774255EEF4F27FDDE551297FFAA9175C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:a0:61:5d:6a:a4:16:47:6b:39:5d:c5:93:
                    b4:c8:58:b1:e4:14:ef:52:74:cd:24:af:bf:95:de:
                    98:36:e9:35:49:c5:39:f8:b5:55:28:0d:ba:39:64:
                    64:ca:33:04:f8:64:18:0f:47:c7:20:ae:a2:5e:69:
                    04:5d:8c:ae:8e:d1:e4:bf:55:e7:55:6e:6c:b9:99:
                    2a:86:d2:a1:a5:0f:3d:da:fe:d1:b4:fb:7b:be:c0:
                    5e:27:4d:5d:96:84:f6:d4:b1:89:03:45:e2:1a:0c:
                    5d:10:aa:16:45:87:ec:a9:18:2f:7c:72:bf:2d:a2:
                    84:53:90:32:eb:bb:3d:8b:9d:3f:eb:5d:8a:35:d0:
                    2e:8c:e4:5a:64:e0:bf:3d:06:4f:54:3c:db:98:6f:
                    cf:84:ce:49:34:6f:f2:c6:af:13:cf:d8:66:65:37:
                    64:66:e7:02:ad:51:20:31:02:98:1e:f7:15:de:68:
                    0c:50:fd:00:09:0e:c5:4d:66:e9:73:3a:74:0b:ab:
                    15:74:ef:84:8f:d5:df:1d:4b:f0:19:80:ea:88:c7:
                    1b:81:a3:2c:71:36:1e:60:5c:91:94:87:32:4f:1f:
                    13:26:0c:ac:24:df:8a:02:1c:a8:c4:5e:5f:b9:a2:
                    e5:b9:90:9d:89:33:0f:f7:74:b6:fd:3e:f4:45:9e:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:BE:77:42:55:EE:F4:F2:7F:DD:E5:51:29:7F:FA:A9:17:5C:0B
            X509v3 Authority Key Identifier:
                keyid:6C:D8:14:79:2F:B1:67:2D:1A:DD:DB:89:AA:31:CD:78:ED:6B:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD814792FB1672D1ADDDB89AA31CD78ED6B642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/1/323830343a363634383a3a2f33322d3332203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6648::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:19:db:96:d6:d1:05:3b:3f:90:ea:01:e7:88:82:6e:5c:03:
         20:aa:64:80:15:bf:89:e5:82:e2:6c:77:99:fd:99:f9:58:63:
         70:74:14:13:9b:09:56:1e:3c:99:97:a5:01:e4:25:05:a3:ce:
         4f:01:a0:5c:55:00:23:e1:75:d0:f8:ed:d5:7d:3e:2e:8e:69:
         78:2b:16:ea:37:07:17:36:0f:84:c7:65:53:f8:0b:e3:8f:99:
         a7:e2:69:bf:14:71:f9:2f:eb:a6:3c:29:a9:6a:85:95:c6:94:
         3d:06:1d:23:41:3f:4e:27:a3:b5:c9:99:2e:1a:ac:36:fd:94:
         cd:fd:40:70:13:9c:44:bb:39:06:05:26:72:94:55:ad:60:ce:
         c3:ba:e4:e4:13:2f:c0:6a:4b:f9:f2:84:91:2b:64:01:04:35:
         58:3b:21:1b:e0:cb:43:71:e0:81:c9:d5:58:cd:a9:0a:ca:3d:
         fd:9d:97:78:b3:78:97:9d:3c:36:39:10:45:12:32:8c:4c:f6:
         0b:9a:1d:ec:d9:de:1f:d1:2b:f9:c6:1f:70:7e:e5:95:6c:4f:
         05:85:8f:90:31:5d:74:d8:e3:ac:53:df:65:7e:e9:06:77:0f:
         28:f6:33:87:72:29:b8:7a:fc:a0:d7:3f:2f:30:19:5c:37:23:
         be:4e:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:58:35 2025 by rpki-client