Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          tHJ8/AKC1oEoFLgEpDKUE3PgDLY1yS8ZxpX7IJa+Shs=
Subject key identifier:   2B:65:1E:54:3C:B1:58:F3:DD:95:EC:20:22:D3:2E:21:9C:E6:41:03
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       6CD8BBECAFD723206FD2BB9872A07FDBEAE9B901
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 14:00:24 +0000
ROA not before:           Wed 15 Jan 2025 13:55:24 +0000
ROA not after:            Wed 14 Jan 2026 14:00:24 +0000
asID:                     270760
IP address blocks:        2804:70fc:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d8:bb:ec:af:d7:23:20:6f:d2:bb:98:72:a0:7f:db:ea:e9:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:55:24 2025 GMT
            Not After : Jan 14 14:00:24 2026 GMT
        Subject: CN=2B651E543CB158F3DD95EC2022D32E219CE64103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:0b:5e:b4:a9:fe:be:fe:62:6b:19:11:b5:
                    d2:56:cf:67:1e:1d:94:2d:94:60:fc:ac:86:eb:91:
                    7b:a0:a9:e5:c5:b9:4d:05:6d:fa:3d:4c:ee:d2:a9:
                    e2:95:24:32:75:c8:7a:14:06:76:4a:8f:cd:69:ee:
                    79:72:a2:6f:51:fe:13:c9:d0:6f:c7:b6:43:fe:ad:
                    93:3b:d7:ff:95:78:60:77:2d:91:dc:c4:10:3c:ff:
                    d3:5c:5e:86:16:55:97:4d:27:44:f2:60:3b:7b:a3:
                    e3:a2:43:e6:4d:e8:21:39:a0:94:29:5f:b1:61:85:
                    ea:8e:e7:e9:29:82:4f:56:18:fa:dd:f0:90:22:bc:
                    0d:f1:73:cc:ff:cb:2d:6d:cd:47:89:ce:4d:63:49:
                    de:69:52:b5:f9:09:53:3a:d4:b1:d1:89:ba:4e:49:
                    57:00:23:30:31:47:47:da:e7:bb:37:d5:37:fb:34:
                    de:fa:8a:dc:23:5b:a2:1b:df:12:c3:57:f4:ea:1d:
                    49:2f:b8:f2:eb:85:93:5f:79:1b:f0:29:a3:f5:3b:
                    bc:1f:bf:38:b5:77:56:44:4f:eb:ed:54:8a:26:f5:
                    8a:b1:fb:da:39:19:60:27:fa:bb:a2:7b:68:c3:ba:
                    25:5a:f6:e8:33:bb:e1:2c:ca:7d:b1:65:90:cb:32:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:65:1E:54:3C:B1:58:F3:DD:95:EC:20:22:D3:2E:21:9C:E6:41:03
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a653030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:63:e5:99:41:25:3a:07:3e:f8:22:cb:74:b0:9d:e6:2a:
         37:9b:d9:0c:0c:75:1b:03:8d:2e:c3:b9:3c:7e:a3:d9:d2:b8:
         bb:e2:7c:cf:eb:11:b3:07:9b:ef:4b:3e:75:20:0e:dc:35:1f:
         5e:6d:1b:0f:9f:43:4a:05:e7:8f:ee:f1:23:68:49:eb:da:95:
         5c:bb:61:a6:89:67:05:21:cb:bc:f9:2f:b8:29:2f:a1:9d:49:
         fd:8e:fe:c9:c4:fa:c3:91:24:41:95:f1:70:7e:aa:11:8e:6c:
         2b:eb:68:01:0b:d6:ba:31:4a:0c:ee:17:aa:92:3d:91:a4:82:
         0f:28:75:49:52:6d:c1:27:ec:22:79:9d:0b:f6:14:ca:16:7a:
         7f:5a:81:aa:af:06:10:9b:f0:f0:a7:96:75:24:40:72:57:d8:
         7b:53:a1:57:c9:37:a1:74:cf:11:a3:36:3d:46:2b:a0:34:6c:
         7a:c3:7e:0b:c7:85:1b:9e:c7:de:1d:d0:74:bb:87:e9:30:d1:
         0c:86:ed:dc:de:0b:11:97:b3:87:f7:4e:f6:59:02:a9:d6:bb:
         4f:91:02:1d:ab:ea:9c:15:94:ad:08:c2:7b:0e:6f:bc:dc:9e:
         33:29:b8:db:8e:bd:3b:43:15:e5:16:71:7e:b2:b8:e2:f9:11:
         ab:11:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:37 2025 by rpki-client