Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          6si3Rge7MNtyAHnhEzTfqQ2A3poWhMm/f64sJmDvmOE=
Subject key identifier:   EE:67:C3:71:C4:34:56:08:DF:30:EF:0B:F0:34:79:08:DF:38:DC:B4
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       57D7CA96761E940827AACC55E5C6313951E756EB
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:38 +0000
ROA not before:           Thu 13 Feb 2025 20:45:38 +0000
ROA not after:            Thu 12 Feb 2026 20:50:38 +0000
asID:                     263059
IP address blocks:        2804:934:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d7:ca:96:76:1e:94:08:27:aa:cc:55:e5:c6:31:39:51:e7:56:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:38 2025 GMT
            Not After : Feb 12 20:50:38 2026 GMT
        Subject: CN=EE67C371C4345608DF30EF0BF0347908DF38DCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:15:25:dc:bb:85:47:53:84:44:34:93:87:
                    6d:ec:1a:2d:8c:51:37:80:18:14:2f:39:aa:42:18:
                    57:82:6d:a1:27:87:8b:91:02:30:3b:bf:46:fc:db:
                    6c:06:19:8d:18:8f:68:18:3c:f9:ee:1f:8e:c7:31:
                    4b:c6:87:a0:9b:61:e7:98:22:7d:9a:a2:08:74:2d:
                    02:8d:d3:fc:07:6b:b1:d0:6d:84:7d:d1:6d:4e:90:
                    f2:62:39:85:d4:88:e1:90:96:da:e7:47:50:b5:06:
                    e7:6e:f6:45:44:e6:42:f0:2c:19:8c:0a:50:f6:49:
                    96:35:1f:31:55:49:af:88:81:fe:34:2b:25:f6:48:
                    bd:14:a9:a5:a9:ae:c1:e8:2c:13:74:d3:82:33:f5:
                    94:c8:0d:3d:fe:ca:38:03:48:a8:f1:31:c5:fc:b5:
                    32:52:af:13:7b:39:34:91:d7:ef:11:7b:a1:f3:c4:
                    03:ba:b1:b0:61:a6:01:20:94:96:bb:3d:c1:9a:03:
                    c0:71:6b:ee:cd:a4:a9:cc:0b:9e:99:f9:44:aa:eb:
                    a5:92:0b:dd:38:ec:ef:66:e9:fd:0b:f4:a2:a3:53:
                    6d:5d:fe:6b:93:aa:23:b0:0d:d7:40:69:2d:12:bd:
                    be:86:8b:29:41:37:aa:ff:4e:4d:e7:28:da:72:6d:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:C3:71:C4:34:56:08:DF:30:EF:0B:F0:34:79:08:DF:38:DC:B4
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:b2:0b:25:d8:96:08:d6:0a:83:43:37:a3:8b:2f:07:da:2f:
         ae:b8:1e:74:dd:8f:cc:eb:c3:eb:4a:b9:45:4b:e0:37:45:b2:
         d5:7b:eb:6d:fc:4d:bd:71:81:8c:dc:89:e1:8d:1b:64:9a:eb:
         90:43:f8:e9:28:d1:40:fd:d5:bd:9c:a8:84:61:f5:22:0a:da:
         3f:dc:56:f7:1e:98:55:22:6a:9e:30:b8:a8:c6:de:2f:7c:83:
         8f:f2:07:32:08:af:c5:4d:56:71:b6:60:51:d7:18:3c:98:c4:
         24:f7:c8:9d:36:53:37:91:ae:0b:3a:ad:2d:25:bf:b7:d0:01:
         9f:f3:4d:2d:16:5f:2b:7c:05:c0:b7:1a:4d:c6:ad:4e:f2:93:
         e8:b5:5a:c1:5b:27:ba:16:48:6b:82:96:7a:fd:17:58:ff:2c:
         49:b4:d9:6c:7d:b0:42:31:71:a6:80:e4:d2:16:91:93:d2:c2:
         9b:db:7a:06:c1:45:c5:5a:eb:2f:1e:0b:72:36:34:94:86:8a:
         06:04:ee:cc:29:8e:91:05:5f:e9:ef:88:33:e3:ec:ee:38:90:
         91:dc:82:50:14:91:be:9e:ff:32:e4:99:d1:3f:6f:eb:06:a6:
         50:34:86:9f:c5:d3:17:56:08:6a:8d:ae:15:43:75:b3:21:dd:
         90:7e:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:05:59 2025 by rpki-client