Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          /qNIVuQCYehaZdPI+ARzaQSz87Jwlf1YOipudBjgj0o=
Subject key identifier:   A6:F2:B6:94:89:FA:76:3E:68:14:EF:63:18:09:83:AC:E6:62:91:F1
Certificate issuer:       /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial:       67EBD2FB051A328CBEF63EA06607C00BC6309DE5
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Fri 21 Mar 2025 19:04:22 +0000
ROA not before:           Fri 21 Mar 2025 18:59:22 +0000
ROA not after:            Fri 20 Mar 2026 19:04:22 +0000
asID:                     273663
IP address blocks:        2804:8a58:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:eb:d2:fb:05:1a:32:8c:be:f6:3e:a0:66:07:c0:0b:c6:30:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
        Validity
            Not Before: Mar 21 18:59:22 2025 GMT
            Not After : Mar 20 19:04:22 2026 GMT
        Subject: CN=A6F2B69489FA763E6814EF63180983ACE66291F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:7d:fa:1c:7f:35:6e:f2:36:ed:f5:dc:a5:
                    9f:8d:74:34:c3:aa:5c:07:5d:22:6c:ea:ab:20:bf:
                    2a:4c:6e:c7:67:eb:71:85:b2:f4:4f:34:54:95:16:
                    e2:cf:4e:af:60:dc:22:6f:ee:41:3b:a3:2b:75:74:
                    73:95:fb:bb:4e:cc:4c:cd:87:af:45:0b:0d:e7:f9:
                    95:cc:b3:8b:af:bc:35:5f:16:00:61:d3:dc:44:c5:
                    27:2c:4b:75:8b:ad:38:86:32:12:98:0a:e9:75:a4:
                    b9:eb:b2:2f:6b:ab:56:32:3c:0f:02:88:57:b6:ef:
                    05:c9:04:04:3b:c0:2a:4a:b6:6d:42:84:7a:e6:e2:
                    6d:74:ea:ee:0e:84:e5:15:53:73:14:e7:d2:a8:32:
                    a0:67:d9:3c:c9:df:c5:aa:d8:aa:cb:5e:88:6b:8c:
                    75:51:4d:88:95:90:38:79:16:0e:b0:6c:89:95:17:
                    88:b2:80:d8:84:ee:ff:c2:da:29:31:f7:ea:57:a3:
                    26:49:aa:dc:ea:a5:63:46:7b:ae:64:15:df:62:d2:
                    ea:ba:7e:b8:99:df:d1:17:f9:3c:9d:73:35:30:c6:
                    9c:40:cd:9b:50:7b:df:61:3b:70:57:d0:54:1d:a8:
                    b5:1a:ed:ae:4d:b3:25:61:e8:60:94:01:2b:e7:89:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:B6:94:89:FA:76:3E:68:14:EF:63:18:09:83:AC:E6:62:91:F1
            X509v3 Authority Key Identifier:
                keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:66:a8:7e:e3:05:bb:6f:02:d7:b0:b2:7d:6f:8d:a7:bc:78:
         78:ed:bd:79:bc:3f:bd:13:df:bc:1f:f7:d4:5a:0b:2f:3b:9c:
         18:86:d5:ac:cf:b1:c9:c5:5b:dd:37:68:bf:7a:00:5a:61:f5:
         de:b2:bb:61:59:bc:7b:1f:1e:a9:d9:ce:ac:6e:90:6e:fa:f9:
         79:5d:82:c6:7a:c7:1c:0a:26:bd:38:fe:17:b9:7a:22:aa:c5:
         bc:fc:bf:ec:ff:1a:f2:f9:22:04:35:34:87:96:90:7d:95:9f:
         39:39:1d:9d:46:d2:5b:88:34:0d:85:7f:2c:c2:9c:9f:9f:e3:
         09:40:8c:37:98:82:ae:e1:93:7b:29:28:15:3b:fa:c1:d5:d7:
         2e:f1:95:4b:73:0c:a8:43:ba:5a:8a:a6:35:59:89:64:9e:f9:
         5c:11:19:44:8a:25:55:7e:c7:14:37:36:1f:b1:2f:90:96:77:
         ee:39:03:0e:25:e7:81:0b:86:c4:5b:00:1d:fd:6e:1c:36:6a:
         c3:37:81:88:0f:be:64:65:53:dd:f9:c4:74:26:0f:78:47:62:
         96:b6:91:3d:f4:dc:af:0c:c7:22:1e:59:bd:2f:6b:38:1b:b2:
         46:c6:3b:61:24:71:9d:98:ec:8e:01:a4:ee:ea:7a:3f:3b:47:
         24:2b:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:12:48 2025 by rpki-client