Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa
File:                     323830313a38653a3a2f33322d313236203d3e203131393933.roa (raw, json)
Hash identifier:          QTyQBZ733vQOjAQ54iKT9mIjMtmKYCmxF7klK6Pe2cw=
Subject key identifier:   C3:8C:C3:69:68:1F:BF:A2:C5:55:92:84:92:5C:A8:11:57:3F:FD:3D
Certificate issuer:       /CN=6321913B8F265DB266263684C1BC420640061E1A
Certificate serial:       6C6CB1F97AC69A251EA90F27026605C32FB89404
Authority key identifier: 63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa
Signing time:             Thu 06 Mar 2025 06:23:45 +0000
ROA not before:           Thu 06 Mar 2025 06:18:45 +0000
ROA not after:            Thu 05 Mar 2026 06:23:45 +0000
asID:                     11993
IP address blocks:        2801:8e::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl
                          rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6c:b1:f9:7a:c6:9a:25:1e:a9:0f:27:02:66:05:c3:2f:b8:94:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6321913B8F265DB266263684C1BC420640061E1A
        Validity
            Not Before: Mar  6 06:18:45 2025 GMT
            Not After : Mar  5 06:23:45 2026 GMT
        Subject: CN=C38CC369681FBFA2C5559284925CA811573FFD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b7:26:80:f4:9f:cc:61:38:c5:37:52:fa:11:
                    06:11:df:ca:2b:e1:24:84:53:73:12:89:cf:ab:c7:
                    04:89:df:26:70:17:b8:af:1c:9f:6c:23:31:fa:e4:
                    2c:ee:59:c1:40:1d:4c:23:40:06:45:69:84:71:a9:
                    a4:dd:79:15:61:63:c3:c4:ab:7b:8e:23:89:3c:3b:
                    9f:70:e2:c6:49:c9:cd:b6:d2:42:8e:20:fa:2a:9a:
                    42:92:dd:c8:d2:77:96:c9:1a:ae:3f:6f:38:35:d1:
                    93:12:f5:66:75:d0:2f:4d:63:ff:9f:5c:27:c3:0a:
                    a1:05:7e:b0:04:f5:bb:df:7e:d6:b5:db:10:f2:64:
                    0f:2f:27:a5:15:2c:7c:d5:b5:e8:8b:80:5c:af:15:
                    84:32:82:a5:da:c1:61:fd:12:62:3b:9a:49:4b:04:
                    de:ee:c4:b7:a5:a4:27:e2:ad:03:31:5c:76:f4:f0:
                    f7:39:62:27:a3:79:c8:69:00:2b:4b:8b:b2:73:09:
                    59:c3:85:3b:f2:70:da:21:76:03:c8:f2:37:4a:5c:
                    0f:3b:0d:49:37:c3:86:9b:c8:6d:fb:cd:07:b4:ee:
                    00:ab:65:b1:7e:a6:09:44:c4:67:a1:6e:a9:1e:b4:
                    b6:18:48:a7:fa:1e:65:e3:ee:0f:6c:15:23:74:1f:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8C:C3:69:68:1F:BF:A2:C5:55:92:84:92:5C:A8:11:57:3F:FD:3D
            X509v3 Authority Key Identifier:
                keyid:63:21:91:3B:8F:26:5D:B2:66:26:36:84:C1:BC:42:06:40:06:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/6321913B8F265DB266263684C1BC420640061E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6321913B8F265DB266263684C1BC420640061E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Ks7LfYpwwyCjRYRMQmkCCJ2267dZ5ckheV7HKRRREJY/2/323830313a38653a3a2f33322d313236203d3e203131393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:8e::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:68:d4:4c:d9:2d:16:9e:50:be:e5:4c:0c:38:35:8c:e8:3e:
         da:0f:59:da:2d:44:63:82:c1:e4:07:3a:d9:12:cc:b7:71:4e:
         ec:38:38:17:9f:23:c3:8e:b4:95:45:bf:88:e5:13:f3:20:53:
         87:65:96:93:ab:a2:87:56:26:6a:fb:c6:a1:e0:26:9f:61:f7:
         f7:7e:9a:01:d3:fa:4c:b9:f4:e9:dd:7c:5d:62:51:99:62:2a:
         b1:98:51:af:ca:74:5d:f0:95:8d:07:65:c2:09:5e:59:83:2c:
         fc:dd:e7:a2:64:ad:01:72:f3:cb:8b:c9:f5:34:72:dd:53:1e:
         4c:3e:ef:f1:d8:c0:a5:af:fd:8a:21:91:7d:8e:66:27:ba:ce:
         2d:5a:64:66:53:0f:00:96:a3:60:f0:eb:25:59:e2:7a:9a:ad:
         56:bb:be:55:4c:c2:63:6f:d9:91:54:8e:57:c4:c8:06:f6:77:
         46:ea:ad:5e:4a:0d:8d:39:f4:94:65:8f:94:fb:a5:eb:73:61:
         67:23:a2:96:00:b0:e6:e5:cd:e5:01:7f:2c:46:3c:bc:99:7f:
         e5:8b:63:bd:bd:21:37:e1:b1:4e:0c:df:fd:e7:89:20:7b:f7:
         bf:18:65:36:48:89:54:b6:c0:fd:48:53:7c:68:9a:27:71:b5:
         f7:13:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:08 2025 by rpki-client