Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
File:                     323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa (raw, json)
Hash identifier:          8IHob+lDrkGj8bsuKhARCOGaZhF9QYGE6Rin5ug5sj0=
Subject key identifier:   BD:94:0F:D2:97:A2:D0:CF:8C:15:C1:D2:1D:FF:D6:2C:E3:3B:50:8E
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       3D993C1B18545CB83DB108FBF8C7CCA55B9BD7DB
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa
Signing time:             Thu 06 Mar 2025 04:33:07 +0000
ROA not before:           Thu 06 Mar 2025 04:28:07 +0000
ROA not after:            Thu 05 Mar 2026 04:33:07 +0000
asID:                     266968
IP address blocks:        2804:4618:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:99:3c:1b:18:54:5c:b8:3d:b1:08:fb:f8:c7:cc:a5:5b:9b:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Mar  6 04:28:07 2025 GMT
            Not After : Mar  5 04:33:07 2026 GMT
        Subject: CN=BD940FD297A2D0CF8C15C1D21DFFD62CE33B508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:29:44:03:99:84:89:e5:6c:73:fc:67:23:
                    6f:74:18:24:f5:30:ac:fd:f7:89:44:e4:75:50:a8:
                    f2:03:52:05:a4:14:8b:76:52:7b:f5:1f:c2:b3:60:
                    db:6a:fe:f0:a9:b5:44:d0:04:89:d3:cc:2c:91:9b:
                    d6:35:b8:03:d6:75:9d:74:7a:8a:4a:25:8d:d1:38:
                    c3:a3:94:31:89:dd:b2:54:b7:86:04:c4:a7:3b:b4:
                    4d:da:c4:1c:de:9b:8f:26:0d:54:f4:1e:0d:fe:66:
                    13:de:5e:e1:9c:12:86:9d:0d:9a:04:07:57:d6:96:
                    13:ee:28:5f:31:2b:e5:d4:93:32:22:f4:8d:ef:ef:
                    47:ad:ae:97:c2:1c:0a:03:eb:d2:45:d4:ba:f9:c6:
                    47:6b:75:7f:66:95:b7:8d:3e:17:cf:cb:d4:e9:d3:
                    27:2d:61:41:15:37:ee:10:8b:85:92:4d:bf:1a:6a:
                    4e:21:65:f1:5a:af:31:d9:95:63:27:f8:04:02:4c:
                    4f:05:5d:b6:46:ce:37:22:51:f3:18:77:64:fe:74:
                    7b:df:f1:3f:01:e0:f0:f0:71:6c:c2:57:78:6a:b8:
                    74:26:1c:54:cd:18:e4:90:fa:3c:4d:80:83:26:5a:
                    ef:e4:3a:6d:c1:b3:75:1e:4e:b0:f9:89:67:d5:8e:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:0F:D2:97:A2:D0:CF:8C:15:C1:D2:1D:FF:D6:2C:E3:3B:50:8E
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a313030313a3a2f34382d3438203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:c2:83:36:8c:5d:f3:ce:de:c5:87:03:71:6a:07:13:d6:ed:
         96:85:3d:52:6a:33:2f:a1:89:f5:4a:2e:5a:d8:8c:01:fe:ce:
         3c:c7:a6:6f:c1:80:a9:d7:c6:06:9d:a3:7d:a2:27:e5:bf:a2:
         71:9c:26:33:95:05:3c:00:50:59:23:ef:04:01:e1:64:d8:18:
         bf:7d:70:83:89:0c:20:b6:59:0e:67:0a:ef:bf:6f:5f:6b:21:
         58:56:5f:81:02:e7:69:f4:da:d2:13:3a:2a:04:e0:57:e4:d8:
         03:d8:ca:92:80:e0:e0:6c:c9:63:10:f1:fc:c6:79:86:dd:3f:
         79:c6:ae:3b:14:c0:12:e2:44:c4:c5:2c:eb:d5:f9:ee:2b:03:
         70:e0:03:83:7c:d1:fa:bd:03:04:1f:9c:94:ed:97:db:61:dd:
         c0:82:b8:42:9b:7e:bd:87:50:c4:29:e3:11:39:d4:2a:a1:93:
         45:e5:33:01:01:d0:5b:9d:a9:83:f6:8a:55:5c:2e:5a:ff:8c:
         57:a5:ed:6b:86:95:7b:4e:f3:e6:0a:16:01:ff:fc:06:49:10:
         ab:8c:13:e4:fa:81:98:dd:7e:9f:7c:e6:a7:3b:21:93:45:85:
         ff:50:9d:6d:ad:44:40:e9:0a:7a:81:ec:3a:52:9a:c8:2c:69:
         6b:65:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:35 2025 by rpki-client