Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          +R97TXbAee+LAbmM6iVVwNhV1vp/rSuzg0eKpWytbHw=
Subject key identifier:   2A:FD:FE:E4:36:4B:B9:32:73:08:DB:D7:05:4E:45:32:F1:7F:59:C2
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       1BC5CB8316ED87937691C8B7831346A780EDA14C
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 14:00:15 +0000
ROA not before:           Wed 15 Jan 2025 13:55:15 +0000
ROA not after:            Wed 14 Jan 2026 14:00:15 +0000
asID:                     270760
IP address blocks:        2804:70fc:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c5:cb:83:16:ed:87:93:76:91:c8:b7:83:13:46:a7:80:ed:a1:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:55:15 2025 GMT
            Not After : Jan 14 14:00:15 2026 GMT
        Subject: CN=2AFDFEE4364BB9327308DBD7054E4532F17F59C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:30:9a:77:32:52:ca:dc:30:65:fb:20:80:
                    d5:65:b3:05:b8:17:dc:0b:ee:d0:31:f7:ee:24:67:
                    6b:06:3d:bf:06:7c:20:c2:ef:96:cd:6c:6d:12:0d:
                    3e:14:a5:2c:11:71:3b:d1:b3:df:b3:b0:c0:15:21:
                    8f:67:2c:aa:13:c6:e4:02:41:f5:f0:15:b5:76:fc:
                    07:6d:6f:de:4d:55:f7:5a:f3:87:b6:43:4f:2d:86:
                    c7:3b:2c:9b:58:3d:81:f5:7d:c9:db:9b:f6:07:1a:
                    5e:de:d0:b2:6e:c8:ef:e4:11:a6:f4:51:2c:97:3d:
                    83:57:e7:b9:e2:59:1b:66:19:dc:62:a0:08:ea:20:
                    16:b6:c2:06:1a:77:36:09:cc:cb:0f:b5:71:47:02:
                    62:44:f9:1a:15:e0:49:f3:ec:01:cc:7d:91:85:f1:
                    0d:b5:bb:e3:c5:dc:9a:80:63:4d:a4:78:7e:75:f7:
                    4e:f1:a7:10:64:1f:d5:49:f9:48:a5:df:8b:ce:0a:
                    30:7f:07:32:a8:7b:d2:b1:0c:1c:de:d2:e8:fe:34:
                    a5:38:db:6a:59:6c:9e:87:24:20:cf:60:fb:85:7b:
                    4c:0d:da:c4:e4:2b:7d:cb:96:df:21:94:3b:87:68:
                    00:4b:08:d6:61:70:fa:de:25:14:02:c6:b4:33:f9:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:FE:E4:36:4B:B9:32:73:08:DB:D7:05:4E:45:32:F1:7F:59:C2
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:d8:e4:65:33:32:68:dc:c2:93:80:29:c8:4b:dc:85:68:
         56:fe:5e:00:ca:8d:44:d2:9a:5f:29:4b:a6:d8:c3:bc:93:9c:
         ff:2d:67:0c:58:b5:c8:70:95:d2:ae:92:cd:22:f3:c2:2b:a8:
         85:33:54:45:5c:ca:e1:f2:b9:32:a0:67:a9:b1:7c:93:e0:60:
         d6:74:72:6a:07:d4:a2:9a:f1:52:ed:d1:c1:a2:e4:e5:3d:84:
         94:bb:e4:cc:cb:32:bd:65:08:7e:e5:44:92:93:09:de:31:c4:
         08:51:3f:ac:ec:81:9c:7a:9d:aa:d6:66:0a:58:4b:83:71:48:
         74:6e:f1:a1:cb:b8:a0:e1:03:60:ea:4b:72:c2:48:07:ef:09:
         47:ea:6c:bc:d9:09:93:4c:e2:88:76:29:30:ce:d0:80:02:c8:
         af:53:93:e1:87:63:c4:d7:c3:f6:a7:a0:5d:72:83:1e:fc:5c:
         36:cb:3c:ea:ca:fc:a3:fc:bf:06:9e:d1:a3:8a:8c:b5:21:d9:
         82:26:6f:6d:48:aa:61:19:87:22:9a:ac:6c:93:1c:2f:7f:9e:
         88:8f:69:fc:ae:52:f6:e7:1c:e1:da:13:de:76:b2:bb:a8:90:
         42:62:2d:2a:1b:e0:b7:e4:09:fa:00:ad:d4:73:d0:ed:13:8a:
         c3:30:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:25:51 2025 by rpki-client