Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          W/ykpCv0wiIAEm4cr6BosRPu+iHeavN+XV+awbaT+9E=
Subject key identifier:   B9:9E:F3:12:A6:65:6A:F6:20:DF:11:6A:D6:D1:5E:7D:CE:24:AB:19
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       0BFAC056F013D9F11C004DC3B9FEF2A10440A769
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 13:59:48 +0000
ROA not before:           Wed 15 Jan 2025 13:54:48 +0000
ROA not after:            Wed 14 Jan 2026 13:59:48 +0000
asID:                     270760
IP address blocks:        2804:70fc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:c0:56:f0:13:d9:f1:1c:00:4d:c3:b9:fe:f2:a1:04:40:a7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:54:48 2025 GMT
            Not After : Jan 14 13:59:48 2026 GMT
        Subject: CN=B99EF312A6656AF620DF116AD6D15E7DCE24AB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ef:57:af:93:fa:32:e0:89:50:1e:6f:41:e0:
                    60:ec:3e:0e:e7:80:66:1b:c7:78:5a:72:ba:11:e0:
                    01:c3:63:21:57:a6:67:c0:ff:df:82:f8:a4:1f:59:
                    a4:4e:71:45:d0:e1:73:eb:4d:ef:f6:81:ac:e6:fb:
                    2c:87:ff:ce:d6:47:75:66:ed:f8:73:96:af:79:38:
                    8a:b2:ba:f6:7d:81:e4:e7:d0:0b:3f:3e:bb:2d:fb:
                    5d:45:d4:e2:ed:89:18:41:f8:f9:84:ac:2e:eb:81:
                    0c:3e:7b:00:7c:b9:85:cd:b1:e0:1b:0f:b4:4f:1a:
                    0e:d8:24:97:64:04:1f:2b:38:f7:4d:31:91:c5:06:
                    94:d3:8e:12:15:a7:2e:a7:6c:3b:74:d1:88:64:46:
                    d1:77:5e:57:ea:10:69:f9:96:65:3c:31:5d:de:f7:
                    de:7d:d7:5a:b0:66:f9:0c:e6:b3:bd:bf:21:d0:24:
                    1d:07:f3:57:89:47:70:66:24:db:75:82:ea:e2:56:
                    ee:ed:7d:6e:0e:2b:b9:1e:e2:57:f3:8d:be:80:ef:
                    f8:99:d3:5f:33:3c:c4:66:24:40:d8:be:8c:23:69:
                    9f:0c:36:4a:88:41:f2:ec:e6:7e:1b:34:d0:31:ea:
                    6d:d8:0d:19:72:d9:72:89:21:5e:65:dd:73:b8:bc:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:F3:12:A6:65:6A:F6:20:DF:11:6A:D6:D1:5E:7D:CE:24:AB:19
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:6d:04:a7:0a:f0:40:e0:57:eb:de:ab:a4:db:e0:74:c0:
         6f:d1:d1:23:92:d4:61:0d:74:d6:45:e7:21:b8:46:6b:2d:79:
         f6:b8:96:2e:cc:29:51:cd:d1:bb:74:ef:e0:ab:19:35:ae:b6:
         ba:5a:d6:3d:ac:bd:a9:96:cb:97:1c:85:d8:d8:88:36:0b:01:
         63:96:bc:65:d9:31:fe:90:f8:2c:40:56:8d:60:17:25:36:ec:
         41:06:ac:89:f3:37:de:38:1e:4d:0c:11:a5:1f:9b:78:75:a5:
         e3:f6:0e:25:e0:bf:b7:37:15:4d:0d:bb:cb:7f:6e:f1:00:22:
         9f:03:13:f4:e0:92:df:bd:80:00:fa:45:af:1d:57:f2:c8:ae:
         16:12:b3:be:a1:c3:c8:e8:5c:65:80:1c:bd:61:e2:5c:aa:94:
         8e:56:c2:6b:f5:9c:d8:3d:89:ea:43:3d:da:7e:a3:2b:1e:9b:
         26:34:05:10:b4:d8:dd:dc:3d:6b:69:ef:41:66:f2:87:9d:4b:
         86:d2:0a:7e:42:60:12:b6:ef:62:d5:a8:68:38:7d:62:96:b3:
         cd:36:13:f2:b7:10:53:cf:d9:b6:c5:ab:ad:c3:16:d3:76:d4:
         04:03:82:7b:1d:19:47:3a:0b:3c:a8:71:f8:08:9b:ed:84:e1:
         0a:a4:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:29 2025 by rpki-client