Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          ReBLTq9HKHy42lSCzn+clfw8YPu+zCEore/zprC/c3Q=
Subject key identifier:   94:DD:82:66:0F:A5:B2:38:90:0C:DC:4F:52:34:31:DE:2D:9C:E4:23
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       08DE1997DCC8AC7944E20C3CD6427F3B533828CD
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 14:00:09 +0000
ROA not before:           Wed 15 Jan 2025 13:55:09 +0000
ROA not after:            Wed 14 Jan 2026 14:00:09 +0000
asID:                     270760
IP address blocks:        2804:70fc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 19:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:de:19:97:dc:c8:ac:79:44:e2:0c:3c:d6:42:7f:3b:53:38:28:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:55:09 2025 GMT
            Not After : Jan 14 14:00:09 2026 GMT
        Subject: CN=94DD82660FA5B238900CDC4F523431DE2D9CE423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:8e:3d:ee:a8:4e:e1:9a:bf:e3:e2:21:52:
                    50:11:ad:4f:61:58:d5:29:c4:b1:ad:2c:0b:e2:51:
                    2d:74:e7:3f:b9:ce:09:0d:a3:c8:0b:1e:e5:04:05:
                    e5:61:fd:c4:7a:1e:7e:ee:13:61:99:25:7c:15:15:
                    d9:bf:8c:f5:f2:bb:48:47:3e:31:7b:d6:0b:88:a4:
                    07:3d:c8:c8:1b:ef:71:00:5e:02:d6:94:d8:24:9f:
                    89:61:eb:d1:93:06:37:c0:74:97:71:49:23:9d:4c:
                    ad:6f:03:12:a9:84:2f:b6:cc:9e:cc:60:37:b8:9f:
                    fe:cc:eb:71:39:38:33:e2:e8:fc:1c:05:0c:36:99:
                    5b:18:10:6e:2b:7a:04:20:7a:c3:73:9f:c8:1d:e6:
                    df:89:77:c6:46:8c:ed:3a:ca:51:c9:36:be:89:df:
                    ea:5f:91:19:cd:4a:ee:45:08:5a:95:b1:fe:d2:a9:
                    e0:6f:60:82:8b:43:ee:cc:6b:2c:dd:1e:79:bc:88:
                    da:95:15:8c:bd:e5:a7:9a:b4:92:b8:63:ed:e1:50:
                    bc:df:3b:76:b3:ca:5e:88:fd:fe:c5:95:12:01:ff:
                    51:e5:60:5a:e9:c4:52:4a:fc:91:75:a4:bc:87:1e:
                    43:7a:17:9e:ad:90:66:e8:4b:2f:f0:22:72:b8:c3:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DD:82:66:0F:A5:B2:38:90:0C:DC:4F:52:34:31:DE:2D:9C:E4:23
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:83:7c:2f:c6:3b:0c:cd:54:7a:cb:1f:24:2c:27:e7:c9:f7:
         bd:cc:4b:7e:14:03:b2:44:b4:95:23:1e:ab:50:2c:e5:f1:44:
         7b:a1:87:6d:d5:5c:cd:f6:d3:ba:a6:61:31:e6:7f:dc:18:b7:
         b8:4a:1a:02:74:5e:8d:e3:4c:c2:27:f3:9f:8a:ab:65:74:36:
         83:90:ed:d4:11:b2:e3:9e:7b:3c:cd:f1:2a:4a:bb:45:e2:d3:
         c0:08:bb:f2:ee:54:01:07:fb:d0:7c:43:e4:d0:20:40:5c:64:
         c1:37:89:d5:32:7a:b8:79:f7:63:7d:90:2e:df:52:bd:b8:53:
         e9:a3:de:87:d9:bf:22:91:44:5b:6c:ef:0f:2e:cb:2a:a9:4d:
         4b:09:fc:0b:03:4b:19:b1:47:29:af:3c:55:65:49:37:7c:38:
         46:64:c4:01:9e:80:67:86:fc:c1:b5:ea:8a:c1:8e:c4:ac:82:
         fc:53:0d:48:9c:0a:5a:d9:77:7f:dc:9d:f8:24:5f:63:08:09:
         07:20:f7:ef:e7:b8:4b:07:40:33:a5:03:f6:b5:c4:a2:f3:9a:
         23:0a:80:dc:99:2f:72:d5:a5:e9:a8:e8:52:d4:fb:7a:bb:96:
         1e:e2:0e:53:94:f4:da:84:06:78:60:26:62:0c:20:1e:a1:81:
         a0:e6:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:16 2025 by rpki-client