Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/323830343a6366303a3a2f33322d3438203d3e203532353736.roa
File:                     323830343a6366303a3a2f33322d3438203d3e203532353736.roa (raw, json)
Hash identifier:          wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=
Subject key identifier:   6E:84:26:67:5A:60:BC:8A:B0:7E:07:A5:BD:9A:5D:13:60:7D:8D:87
Certificate issuer:       /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
Certificate serial:       3C6C4E611683AA78B863F643C24C67C1A5FCEA3A
Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/323830343a6366303a3a2f33322d3438203d3e203532353736.roa
Signing time:             Fri 07 Mar 2025 02:27:52 +0000
ROA not before:           Fri 07 Mar 2025 02:22:52 +0000
ROA not after:            Fri 06 Mar 2026 02:27:52 +0000
asID:                     52576
IP address blocks:        2804:cf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 10:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:4e:61:16:83:aa:78:b8:63:f6:43:c2:4c:67:c1:a5:fc:ea:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995
        Validity
            Not Before: Mar  7 02:22:52 2025 GMT
            Not After : Mar  6 02:27:52 2026 GMT
        Subject: CN=6E8426675A60BC8AB07E07A5BD9A5D13607D8D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:38:9a:26:07:0f:eb:90:ac:98:75:fa:78:
                    c4:f9:c6:85:bd:4f:73:c0:4a:07:6c:bf:f8:dd:fc:
                    be:14:86:07:6e:7e:a1:07:2e:90:62:62:87:7e:96:
                    67:8a:e6:f0:7f:e4:4a:58:05:73:8d:cc:6d:ba:8b:
                    42:35:76:22:ec:47:a5:d0:b8:c6:6c:10:87:aa:95:
                    1b:03:2d:eb:3e:a0:ee:ea:03:22:e3:0c:d9:a2:55:
                    9f:05:11:da:f9:95:c5:53:3d:f6:86:c4:35:7d:bf:
                    58:4d:74:57:08:cb:ad:fe:bf:df:06:6e:62:03:6a:
                    97:e9:e8:56:36:f6:04:98:95:59:d5:77:d1:e7:2f:
                    b1:8a:f1:33:05:22:bd:f6:f6:21:a3:99:df:2e:f9:
                    d2:a6:73:9e:1f:3d:b4:2b:bc:4a:21:db:a5:fa:25:
                    bc:37:c6:d1:39:9c:51:8e:a1:08:44:bb:6b:1d:f6:
                    fb:c0:3b:37:eb:b5:e3:b6:9d:1d:f2:22:fe:5a:fd:
                    53:40:e5:0c:82:25:ad:4c:a1:4b:b7:76:65:94:70:
                    87:ca:30:a3:20:1b:ab:2e:e2:f5:f4:5d:bd:31:c7:
                    27:bb:d7:30:c3:ae:9f:a9:42:87:ad:ae:81:b5:df:
                    94:5f:ee:ee:00:ad:34:df:e9:ea:73:43:b9:12:c5:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:84:26:67:5A:60:BC:8A:B0:7E:07:A5:BD:9A:5D:13:60:7D:8D:87
            X509v3 Authority Key Identifier:
                keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/323830343a6366303a3a2f33322d3438203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:f9:9d:e0:24:91:ba:0a:03:7c:4d:e4:46:dd:85:a4:14:
         71:7b:4f:03:0b:06:39:6f:c6:7f:02:68:08:36:0c:c1:b5:c8:
         4e:9e:39:8a:79:58:36:99:0a:f9:81:c9:56:9d:37:57:80:7d:
         38:5e:5f:00:da:38:6f:86:23:2f:32:10:7c:da:c0:b2:67:13:
         48:33:f0:9a:2d:a8:8a:6c:b0:e5:4c:09:aa:61:b7:12:21:6d:
         f0:ea:8d:6b:05:18:74:13:cf:f1:af:a3:58:6c:b1:8c:b0:c0:
         19:2c:4f:3c:94:32:7c:4e:d7:91:ef:99:07:44:d0:85:2f:52:
         12:da:a3:70:d0:3b:3c:ff:28:cb:a4:92:87:26:14:fa:af:d2:
         f6:b5:7d:9f:23:12:2c:97:7a:b8:da:89:f0:34:ed:ff:75:ea:
         77:43:99:70:48:37:0c:d0:b7:b1:67:6f:9b:bf:ed:dc:cb:85:
         54:20:ac:68:68:55:a3:d4:e0:60:6f:4d:fc:d1:d0:55:4e:62:
         0f:53:f8:8b:cb:14:34:9c:fb:0d:e7:e3:e0:66:6e:da:35:f5:
         41:43:e9:77:4c:6d:01:e2:e8:55:8a:3f:cc:01:cf:2d:a0:75:
         72:e5:69:83:89:09:55:f3:13:a9:cd:0d:d8:93:04:34:9b:c5:
         25:74:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:58:34 2025 by rpki-client