Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          wMw8wME9BR4UirCA092IWuWr4cHOIaosIEMuhirX0bM=
Subject key identifier:   DD:83:4A:09:76:E1:B4:58:41:4F:F1:D6:4E:C2:F4:2A:ED:AC:9F:CA
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       58B94EC19CAC060ED3891E7634DE55B66FD20AD4
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Thu 06 Mar 2025 04:33:07 +0000
ROA not before:           Thu 06 Mar 2025 04:28:07 +0000
ROA not after:            Thu 05 Mar 2026 04:33:07 +0000
asID:                     266968
IP address blocks:        2804:4618:3300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:4e:c1:9c:ac:06:0e:d3:89:1e:76:34:de:55:b6:6f:d2:0a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Mar  6 04:28:07 2025 GMT
            Not After : Mar  5 04:33:07 2026 GMT
        Subject: CN=DD834A0976E1B458414FF1D64EC2F42AEDAC9FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:f4:03:66:b6:6c:63:d0:1a:74:8c:00:15:
                    41:19:30:95:19:95:ca:0e:7a:f3:cc:20:4b:ef:d6:
                    e2:f8:bd:cc:6b:bf:54:8a:af:2e:37:9a:5a:ae:6c:
                    ff:96:64:92:8c:54:e6:b3:83:64:fd:6a:0c:b3:b1:
                    cb:25:53:54:b2:ab:1c:2c:97:1a:a8:6c:17:28:33:
                    f6:af:ab:8f:f2:25:98:c2:c5:d8:1e:7a:e2:b1:20:
                    e7:80:bd:ba:28:01:a9:1b:a4:bc:42:69:e3:ac:9e:
                    3e:56:47:fc:c2:9a:ba:44:78:d5:0e:ce:26:a2:8d:
                    ee:8e:22:c4:27:04:e0:54:54:58:e6:28:74:72:f7:
                    8b:58:69:c3:be:98:27:a4:9c:16:da:f7:69:c7:3f:
                    b4:32:1b:72:c6:4a:1c:f6:6d:c9:e1:8f:e6:85:63:
                    65:38:ea:7d:e4:e9:b1:6a:b0:bd:22:48:63:79:0d:
                    8a:83:61:a6:40:d5:9b:8a:c0:f2:65:4e:86:af:c8:
                    2a:47:c8:39:5a:6a:24:16:dd:07:dd:31:90:93:94:
                    7e:0e:98:4c:e6:20:b3:41:16:8b:c5:38:56:20:d8:
                    b4:56:e8:01:b9:5b:36:9d:54:1a:6e:29:39:ac:bb:
                    52:c0:64:22:a8:87:b4:0f:f2:62:80:38:5f:a1:8e:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:83:4A:09:76:E1:B4:58:41:4F:F1:D6:4E:C2:F4:2A:ED:AC:9F:CA
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a333330303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:bd:f0:71:05:de:bc:29:b4:b8:85:93:50:22:1b:87:5b:83:
         94:c4:31:83:4d:59:d7:d6:18:56:7e:3f:19:3a:66:01:27:a6:
         97:5b:5f:d6:91:d0:99:f2:29:92:c7:25:ff:d1:67:b4:43:fb:
         75:5a:9d:19:34:e4:77:2f:15:bc:e4:9f:c4:a2:07:d8:a5:07:
         c8:ae:25:34:70:22:bf:a1:1d:7f:d2:76:53:72:ee:c7:53:e4:
         2d:23:d1:0e:37:63:de:60:8b:56:07:25:0e:e2:7d:ad:92:ce:
         3a:b6:f8:a1:4a:08:35:2a:99:59:d3:04:92:b2:8a:89:3c:ae:
         3b:bb:ac:10:b0:87:ce:3d:bd:d7:6f:53:fd:37:4d:8f:33:f7:
         ed:b8:a0:de:33:a3:05:ea:89:96:19:3f:33:cb:44:2f:aa:c6:
         92:56:e9:ac:a7:54:7d:16:f3:52:3a:b7:fb:b9:c9:79:18:53:
         68:8b:50:fb:a0:df:94:54:fa:00:a7:27:c1:7e:e4:1e:22:6d:
         14:c7:b0:7f:b2:fc:21:7d:22:db:f3:82:f5:8d:c4:2d:e8:ee:
         9d:77:06:fa:ad:57:fd:42:69:3f:48:50:59:b1:5e:2c:e8:58:
         73:f9:a5:01:c2:01:3b:c2:da:fe:c3:cc:31:86:24:79:09:fc:
         f5:35:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:38:00 2025 by rpki-client