Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33322d313238203d3e20323639323032.roa (raw, json)
Hash identifier:          3ThjkWBctYbxwpx0vNJNQPNjLvMFhYBGZx3j+59fA3g=
Subject key identifier:   DB:2B:D5:1C:80:AE:D5:83:4E:9B:C3:10:68:0E:01:1B:29:A1:11:08
Certificate issuer:       /CN=6178852478628997DE5CA084FE91AA8EC0E630B0
Certificate serial:       7F1C55FDFE964DF353506D7CDA1D9D287DB138F2
Authority key identifier: 61:78:85:24:78:62:89:97:DE:5C:A0:84:FE:91:AA:8E:C0:E6:30:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6178852478628997DE5CA084FE91AA8EC0E630B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa
Signing time:             Tue 28 Jan 2025 15:58:50 +0000
ROA not before:           Tue 28 Jan 2025 15:53:50 +0000
ROA not after:            Tue 27 Jan 2026 15:58:50 +0000
asID:                     269202
IP address blocks:        2804:60f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/6178852478628997DE5CA084FE91AA8EC0E630B0.crl
                          rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/6178852478628997DE5CA084FE91AA8EC0E630B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6178852478628997DE5CA084FE91AA8EC0E630B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:55:fd:fe:96:4d:f3:53:50:6d:7c:da:1d:9d:28:7d:b1:38:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6178852478628997DE5CA084FE91AA8EC0E630B0
        Validity
            Not Before: Jan 28 15:53:50 2025 GMT
            Not After : Jan 27 15:58:50 2026 GMT
        Subject: CN=DB2BD51C80AED5834E9BC310680E011B29A11108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4c:c5:0c:64:e0:b0:d2:21:e4:de:65:c3:cf:
                    32:52:2f:30:f1:99:e4:c5:3e:85:00:f7:1c:dc:05:
                    02:91:00:22:70:2d:8f:4d:32:30:f4:97:fd:e4:e4:
                    12:c0:21:92:d7:3a:67:a4:18:71:57:4c:97:6b:a1:
                    1a:55:0b:b3:61:2d:82:9e:14:6c:fb:6e:dd:9a:0b:
                    ed:10:ea:22:50:61:83:eb:b3:bb:81:61:81:80:34:
                    03:3e:4e:37:08:14:b5:c1:4f:1d:55:46:b3:f9:30:
                    d9:bd:2b:51:c8:07:52:15:b7:40:14:f9:eb:af:d1:
                    26:f8:92:75:75:91:5a:5d:5d:14:fb:c5:b5:40:86:
                    28:e4:0a:5f:97:af:1e:ee:23:ef:e8:08:21:75:51:
                    be:f4:a4:5b:1a:58:2e:a7:63:da:4e:3f:65:2a:76:
                    d5:c7:af:c4:1c:8e:63:a0:33:b3:17:2c:11:7c:5e:
                    95:61:74:4a:68:40:6d:75:36:9d:13:1b:1f:57:2b:
                    f8:e8:3e:dd:78:ba:d7:8f:29:a4:91:2e:64:41:92:
                    1c:3f:5d:1e:5b:60:94:ce:cf:88:f5:96:1b:7a:27:
                    e2:7d:8e:a4:fc:66:a8:63:74:69:b3:00:d4:0f:a1:
                    57:61:34:28:fb:44:26:75:ed:96:80:d8:f1:b1:50:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:D5:1C:80:AE:D5:83:4E:9B:C3:10:68:0E:01:1B:29:A1:11:08
            X509v3 Authority Key Identifier:
                keyid:61:78:85:24:78:62:89:97:DE:5C:A0:84:FE:91:AA:8E:C0:E6:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/6178852478628997DE5CA084FE91AA8EC0E630B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6178852478628997DE5CA084FE91AA8EC0E630B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a3a2f33322d313238203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:67:e6:f8:96:9f:67:87:af:6c:39:88:0b:dd:54:32:ce:
         68:f6:c8:e7:75:8e:4c:a7:42:29:23:8b:84:6f:da:05:3c:ce:
         cc:c3:ba:19:d2:17:af:ff:2c:17:c9:f6:1d:a8:f4:90:cf:89:
         3b:47:80:ca:a2:cd:e0:7c:9d:00:e6:f5:1c:31:ef:b9:ec:65:
         19:30:6f:5e:98:d2:a4:36:86:f7:1b:fa:b1:1b:48:38:ae:a0:
         78:16:db:a1:3e:68:6f:1e:c0:bc:74:b3:63:bd:16:72:73:de:
         dc:83:a1:0e:12:5e:f0:f5:87:a5:a5:09:a2:be:59:1e:e5:c5:
         96:2c:53:e7:1a:e0:6a:c1:31:af:e0:5f:7f:19:b9:ae:16:45:
         01:1f:16:40:08:79:dc:65:e9:4d:6b:a5:94:e9:f2:9f:96:f8:
         7e:28:c3:c1:e3:f6:0a:5f:ac:82:13:1f:15:ac:2f:15:07:31:
         98:78:11:92:f1:a0:e6:95:c6:6f:5f:24:e2:d9:0f:1d:73:ca:
         15:c8:b8:43:73:d5:22:5a:3c:b0:54:96:14:68:70:e4:f6:f2:
         78:03:52:79:03:cd:4b:e7:30:7b:22:29:ce:4b:b2:46:5d:81:
         3b:fa:1a:da:a5:07:d9:a6:8f:79:51:17:d3:e5:7b:0c:75:91:
         51:30:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:46:08 2025 by rpki-client