Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33382d3338203d3e20323639323632.roa (raw, json)
Hash identifier:          hy5mzvz7WK9hhHjxBPVKpIFXKIHuKFdH8thjuKLkARg=
Subject key identifier:   18:0E:24:83:1A:7F:CC:60:48:99:1B:F8:FB:BD:C0:AA:AD:AC:D4:6F
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       059F67B2695E4CBBDF725C8F87B4A93C254BE82D
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa
Signing time:             Thu 06 Mar 2025 08:16:22 +0000
ROA not before:           Thu 06 Mar 2025 08:11:22 +0000
ROA not after:            Thu 05 Mar 2026 08:16:22 +0000
asID:                     269262
IP address blocks:        2804:61e0::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:67:b2:69:5e:4c:bb:df:72:5c:8f:87:b4:a9:3c:25:4b:e8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Mar  6 08:11:22 2025 GMT
            Not After : Mar  5 08:16:22 2026 GMT
        Subject: CN=180E24831A7FCC6048991BF8FBBDC0AAADACD46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:cd:a7:09:52:5e:77:c4:1a:e9:a2:06:e9:
                    ca:75:ed:47:0f:5e:26:fd:6f:b1:d0:3b:31:84:d6:
                    b4:4a:61:8a:be:15:5f:9c:24:02:a2:0e:6e:c7:54:
                    d2:19:a6:a9:47:f7:64:63:58:69:98:f3:2b:5c:f0:
                    15:23:6c:d3:49:fc:24:f9:aa:e8:7d:14:2c:53:07:
                    4c:0c:96:2e:92:32:79:ee:09:ae:99:bd:e9:c7:ff:
                    22:ae:98:75:28:65:7c:db:35:2a:fc:c1:60:17:ee:
                    49:cb:f8:7d:d1:b2:36:00:a8:29:29:de:ca:fe:44:
                    e2:25:1e:7b:df:c4:70:50:6c:cb:9e:63:50:94:17:
                    38:10:1b:ae:3d:25:51:47:57:7f:77:dd:52:ae:bf:
                    f3:a1:eb:ea:7c:71:c5:f8:49:f0:1b:00:5d:bd:33:
                    29:e9:8c:53:dd:43:25:26:73:3a:92:70:58:be:50:
                    e6:ae:39:88:42:3a:df:f2:b8:9f:21:be:d9:95:d7:
                    c3:82:96:6d:7a:db:4e:ca:18:93:b4:6a:a6:06:34:
                    6b:8c:9e:58:1c:a9:bc:17:b4:06:e6:dd:10:2e:69:
                    33:92:52:db:d9:86:3f:4d:3a:f3:71:84:40:76:eb:
                    c6:5a:a6:99:aa:81:b7:10:e3:5b:a8:97:3e:2c:f5:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0E:24:83:1A:7F:CC:60:48:99:1B:F8:FB:BD:C0:AA:AD:AC:D4:6F
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33382d3338203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/38

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:3a:c5:41:c4:4c:ed:43:44:4f:44:f4:0d:8f:7b:b1:80:
         10:6b:fc:ae:61:9c:da:94:00:39:81:76:9e:0e:4f:f1:f9:aa:
         2c:df:eb:4e:35:ff:83:16:ee:3b:f0:72:97:b9:e1:c1:5a:7d:
         15:15:3d:9e:57:79:5c:4e:6c:9f:81:99:95:f6:f1:9f:2d:6c:
         ef:28:ca:f6:6e:59:13:cc:1b:3d:83:00:d4:26:88:ea:b1:77:
         57:0e:22:0d:29:e0:83:69:49:44:0d:7f:7a:62:db:e2:4d:cb:
         c6:bf:45:47:15:f8:96:5c:e7:9a:ba:0e:6c:3f:62:9f:79:df:
         1d:7e:1d:2e:37:24:2b:dc:2a:a3:c6:93:e4:5c:35:06:23:bc:
         45:16:d0:06:a0:a6:19:be:e6:97:57:57:95:83:e2:28:3f:9f:
         29:b4:e4:a4:75:f4:d8:cb:77:9c:da:16:ef:1a:9e:e6:d7:a5:
         77:77:e4:6b:fe:7c:60:6d:4e:c7:cc:cb:6c:3a:dc:d1:ef:bc:
         c8:e8:57:80:7e:38:5e:84:20:67:6b:f3:f9:e0:ed:83:45:ab:
         c1:a5:0a:89:da:c3:19:88:a4:e3:41:e0:fc:32:05:dd:49:d4:
         9b:b2:d1:2d:ff:99:1b:a4:0e:db:a8:70:f0:06:a5:3d:9a:80:
         1b:ac:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:32 2025 by rpki-client