Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa
File:                     323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa (raw, json)
Hash identifier:          j6/LmM1DqQ/+Bf/sb0iPvo95RXJGtkfL3jQYSobRVEA=
Subject key identifier:   15:66:D6:63:5C:6F:AB:5D:CF:58:D7:51:DD:68:4C:3C:7F:7A:74:8C
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       1820107AB43A84350E49F4F5658626ED9F50BE75
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa
Signing time:             Thu 06 Mar 2025 01:28:08 +0000
ROA not before:           Thu 06 Mar 2025 01:23:08 +0000
ROA not after:            Thu 05 Mar 2026 01:28:08 +0000
asID:                     263961
IP address blocks:        2804:2868:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:20:10:7a:b4:3a:84:35:0e:49:f4:f5:65:86:26:ed:9f:50:be:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Mar  6 01:23:08 2025 GMT
            Not After : Mar  5 01:28:08 2026 GMT
        Subject: CN=1566D6635C6FAB5DCF58D751DD684C3C7F7A748C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:7a:78:2e:32:80:82:3b:3e:72:a1:fd:84:
                    ab:60:e9:73:b3:d9:9c:8d:e2:80:83:0c:0c:17:6a:
                    74:9d:c8:05:68:82:d9:81:7a:cd:6b:a4:ad:38:66:
                    f7:32:82:c9:e5:5e:c9:e0:5a:66:67:85:8d:0e:1b:
                    80:a8:c7:e3:12:6d:60:9f:b0:aa:a1:ee:cc:e9:be:
                    97:12:15:65:d2:27:68:fa:f8:67:3a:19:bf:fb:f0:
                    93:21:d5:c4:68:fb:95:0d:8b:17:ba:97:3d:a0:ea:
                    50:3d:6b:37:28:25:91:2d:0f:d5:0a:4a:3e:c8:55:
                    ff:f9:68:9e:73:47:f9:27:40:8d:e7:7b:d0:f1:f6:
                    df:05:18:78:f5:7d:0d:7e:b2:db:5c:bf:65:c9:af:
                    59:2d:36:ce:78:50:5b:9f:32:25:c7:75:3f:6f:d5:
                    8b:11:cc:fa:b2:bc:40:77:05:a7:95:a3:0b:7a:cd:
                    9c:8d:63:30:2e:e7:a7:67:2a:1b:00:63:5e:fe:50:
                    fd:d8:eb:c8:b0:1b:be:86:87:a7:01:9e:9c:e1:dd:
                    8c:82:a3:4f:57:6b:bd:cd:ee:b4:80:ff:5c:3d:94:
                    ea:46:e6:66:8b:e3:b7:13:ef:ea:b7:4a:c1:4d:28:
                    12:26:75:26:c5:d8:fb:37:9f:71:5c:d7:32:df:50:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:66:D6:63:5C:6F:AB:5D:CF:58:D7:51:DD:68:4C:3C:7F:7A:74:8C
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:90:4b:97:8f:c9:b2:18:21:8c:18:95:d8:42:4d:28:e6:
         72:5a:c5:03:8e:2a:ec:c8:0c:d0:37:d1:63:34:e6:a7:80:81:
         6a:cc:86:3f:32:f4:c1:50:71:3c:e2:5e:93:e5:10:2d:71:64:
         10:57:ac:ad:7b:17:87:c5:6f:b2:06:20:50:45:9d:9a:1e:67:
         66:3b:63:63:29:34:42:27:76:21:6d:de:53:d9:5f:ea:1e:d0:
         a1:e1:ee:b0:06:49:24:b2:c4:b1:8f:84:63:c9:6f:3b:97:c8:
         45:fb:9b:d5:13:76:88:70:76:74:df:78:4f:a1:7f:1a:18:dc:
         d6:4c:31:50:15:21:64:20:49:25:b2:6c:e8:b5:6d:ae:5b:22:
         b0:dd:0c:14:e4:22:7f:2e:30:5b:66:38:c7:c9:7b:52:2a:a8:
         92:fe:d4:53:d0:1f:d9:7e:a3:4f:77:ef:24:24:d3:85:ff:f8:
         4a:30:43:a9:82:c8:7c:76:3b:cd:6d:97:d0:f9:00:b2:27:a2:
         a7:34:a8:f3:a7:53:5d:71:ee:16:62:6a:f3:c3:45:52:a4:cd:
         48:6b:e5:39:3c:c0:a4:87:f7:78:57:86:64:9b:61:dc:66:d6:
         9a:d6:d0:03:50:30:eb:3c:79:55:17:1c:95:20:a0:7b:0b:bf:
         e5:ae:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:08:16 2025 by rpki-client