Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          +G6jQcfpH2UqLYkgLX6GnQcED4Ub16/7P3osVPxaK+A=
Subject key identifier:   6C:DA:7B:38:91:3E:93:A3:BF:09:BA:EF:5F:62:4E:35:E1:FE:34:51
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       7F479136ED4928CC20DA48DB3C7DCAD0C8886D6A
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 13:59:59 +0000
ROA not before:           Wed 15 Jan 2025 13:54:59 +0000
ROA not after:            Wed 14 Jan 2026 13:59:59 +0000
asID:                     270760
IP address blocks:        2804:70fc:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:47:91:36:ed:49:28:cc:20:da:48:db:3c:7d:ca:d0:c8:88:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:54:59 2025 GMT
            Not After : Jan 14 13:59:59 2026 GMT
        Subject: CN=6CDA7B38913E93A3BF09BAEF5F624E35E1FE3451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:db:97:e7:9d:aa:77:66:fc:68:c9:4e:2f:
                    a0:c3:1f:18:f5:c9:b0:f2:b9:a8:48:e2:82:ef:fe:
                    2e:f1:45:77:d5:fd:5a:1d:60:94:0f:6a:26:95:7d:
                    0c:6c:35:3e:4d:4a:89:82:2c:46:3a:58:f2:eb:8d:
                    f9:f2:33:5e:71:73:35:60:48:d6:a5:fd:39:13:3b:
                    a7:f9:c5:e1:78:da:c1:ad:48:48:9e:a1:cb:5a:70:
                    61:af:b8:98:6c:45:23:51:3f:54:f8:22:d5:49:ab:
                    b0:bc:31:44:27:8b:50:ba:59:ff:c9:02:99:b2:47:
                    6f:b2:a1:40:ab:42:47:a6:1b:61:e9:73:58:ad:85:
                    8f:82:30:05:06:86:7c:30:4e:68:c5:41:96:19:66:
                    62:dd:c8:92:fa:6d:33:98:93:e4:0f:3c:72:24:fc:
                    ac:e7:7a:41:8f:9b:5f:f2:b5:2e:cc:e9:22:da:35:
                    f6:03:3e:5b:a2:a8:39:cb:e8:43:26:59:2c:2b:fa:
                    dd:5d:f5:1c:34:48:59:51:54:a4:85:2e:65:f5:6d:
                    10:32:15:bd:f4:fd:0f:e9:b9:d5:78:f4:4e:23:be:
                    44:a2:c2:26:97:1e:3f:46:25:dc:d5:2d:56:c0:03:
                    3c:02:85:fa:02:62:79:67:f9:8b:db:eb:84:4f:f5:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:7B:38:91:3E:93:A3:BF:09:BA:EF:5F:62:4E:35:E1:FE:34:51
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:8d:2c:82:26:30:a6:40:84:1a:a2:67:df:be:75:88:f0:
         f9:8b:26:67:ec:d9:72:f8:c0:c4:3d:86:87:e0:20:4e:4c:d9:
         db:f9:f1:3e:9e:e1:b4:9a:e9:2a:d7:12:6c:ec:11:e4:bd:10:
         b7:a9:8b:e6:9a:33:e6:ed:14:18:00:0c:58:92:1b:4f:75:c1:
         67:55:38:1b:15:6b:f4:c8:ad:83:56:cc:37:15:32:09:50:a2:
         f2:91:49:ed:0f:e2:f6:a0:98:4e:a3:36:9a:66:09:34:2f:48:
         ae:97:ba:d7:20:53:70:a3:00:e1:e9:62:b6:e9:f1:bf:a6:75:
         5a:2a:86:55:17:35:c7:94:0b:df:43:4c:f9:5c:a4:ae:64:cc:
         e2:f9:16:7b:06:6b:a7:ee:96:87:3c:40:25:38:22:66:bc:7a:
         04:ff:b4:d8:6f:fb:59:67:0f:35:a1:75:7b:89:7e:9e:b8:f1:
         44:4e:4f:39:92:35:d4:3f:bd:b3:a2:2e:26:58:b0:19:6e:31:
         f8:9e:59:a3:32:4f:dc:38:80:99:8f:40:41:af:e8:80:e2:df:
         43:5f:17:db:6c:78:0b:95:e3:50:fc:15:32:ca:46:7e:6b:c8:
         11:fc:cb:d1:fd:d6:bc:21:ed:16:18:ab:14:6d:3b:45:7e:e7:
         82:18:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:00 2025 by rpki-client