Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a313030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a313030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          pmaOmfsFe+lUBPRbSOIpm9V+badBtjeKZCZHV1ufHuM=
Subject key identifier:   22:18:DC:A1:13:5D:4C:8B:14:CB:C7:11:BA:23:18:43:2C:D2:51:0F
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       1F58478F6470C3672C26499ECB9516D4E88875BA
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a313030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:17 +0000
ROA not before:           Thu 13 Feb 2025 20:45:17 +0000
ROA not after:            Thu 12 Feb 2026 20:50:17 +0000
asID:                     263059
IP address blocks:        2804:934:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:58:47:8f:64:70:c3:67:2c:26:49:9e:cb:95:16:d4:e8:88:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:17 2025 GMT
            Not After : Feb 12 20:50:17 2026 GMT
        Subject: CN=2218DCA1135D4C8B14CBC711BA2318432CD2510F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:dc:51:dd:58:9f:fb:4e:53:8b:c7:8a:c7:
                    1d:2d:59:ca:bb:ad:0d:dd:37:07:41:da:78:8b:b4:
                    92:40:39:de:1f:f0:d2:c2:36:12:11:c1:5f:88:9e:
                    b9:48:65:19:5a:f9:22:a3:d7:8e:80:1c:b3:89:75:
                    db:7f:8e:c4:a4:e3:a2:b7:44:d5:c1:08:2b:d0:07:
                    57:0e:06:82:db:42:92:ed:7b:7e:14:f0:d6:0f:3a:
                    7c:62:06:2e:bf:9f:b0:de:1b:b4:f0:46:14:bf:60:
                    e1:b1:4c:2f:f3:58:b7:03:a4:71:f5:b7:e9:20:96:
                    80:33:80:56:7a:d8:7b:fb:73:ad:94:18:8c:62:f8:
                    28:1e:70:fa:48:e7:b3:f5:eb:98:ca:dd:21:44:8e:
                    9e:34:1a:34:2f:46:1b:96:9e:5b:b5:e0:10:ff:76:
                    87:25:a8:b1:2b:90:3c:2e:09:51:43:18:8b:56:63:
                    78:50:42:58:76:a5:38:c9:0d:8f:b0:42:03:12:1b:
                    2a:f2:cb:c6:f8:1f:78:08:52:48:48:b4:d1:f7:a4:
                    74:66:b0:c7:41:c7:a7:e4:a6:1e:9e:18:01:90:b1:
                    f1:a5:64:ed:1b:d8:5e:29:38:a5:8f:28:cd:d9:25:
                    af:1a:49:5f:01:96:b2:aa:cf:d3:57:c2:8a:a7:47:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:DC:A1:13:5D:4C:8B:14:CB:C7:11:BA:23:18:43:2C:D2:51:0F
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a313030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:c5:bd:75:4e:0c:2a:d1:c0:68:e4:9f:9f:63:1b:ac:5a:
         50:42:4b:a8:c8:7e:35:8f:9b:5d:0c:cd:a4:a1:ee:28:d7:32:
         59:24:60:55:d0:7b:9d:aa:f5:bf:84:ac:7a:95:4e:c1:f6:29:
         da:c7:55:04:75:bc:2d:bd:4c:97:13:5a:48:39:a5:cb:c5:ba:
         8e:41:e6:24:e8:20:95:77:4f:da:c4:3c:ca:9e:7f:cd:61:67:
         a3:99:4c:f1:a7:f3:cd:53:b1:d1:fe:d0:29:b4:36:92:f2:91:
         1d:bb:d8:2e:71:4a:2f:57:a5:45:6e:10:d2:50:af:b9:a8:e9:
         8a:fe:e8:12:00:07:e6:d4:e5:b0:97:2e:df:81:14:98:9f:56:
         6a:cf:7a:e8:90:c6:be:0f:89:e0:49:91:0a:ff:48:57:03:e7:
         12:5c:3a:f1:15:45:21:af:b3:79:b7:ff:45:f9:3e:2d:45:57:
         44:57:61:63:d8:af:73:32:fa:9d:b4:95:47:b5:03:0f:42:cf:
         d5:7c:42:c1:bc:b5:82:72:44:83:c3:76:23:86:24:11:fb:eb:
         c3:27:6a:1d:bd:e6:e4:a2:f1:aa:8b:74:fd:27:34:57:b3:40:
         44:e9:a9:7d:42:89:69:e9:e2:22:99:02:47:0a:02:70:44:19:
         fa:e7:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:03:43 2025 by rpki-client