Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
File:                     323830343a323830303a3a2f33322d3332203d3e20323633393334.roa (raw, json)
Hash identifier:          31Sk0TxSp/i4x8BEM20qtZ+eGQVQ6z3ZLiqQy0i+cdk=
Subject key identifier:   9F:98:5A:C2:06:27:25:5C:22:CB:7C:53:26:F8:EE:BF:56:CF:E8:49
Certificate issuer:       /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial:       1898843B55BB3EFEA4FF394D82D6649941DA1EA5
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
Signing time:             Thu 03 Apr 2025 14:15:15 +0000
ROA not before:           Thu 03 Apr 2025 14:10:15 +0000
ROA not after:            Thu 02 Apr 2026 14:15:15 +0000
asID:                     263934
IP address blocks:        2804:2800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 13:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:98:84:3b:55:bb:3e:fe:a4:ff:39:4d:82:d6:64:99:41:da:1e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
        Validity
            Not Before: Apr  3 14:10:15 2025 GMT
            Not After : Apr  2 14:15:15 2026 GMT
        Subject: CN=9F985AC20627255C22CB7C5326F8EEBF56CFE849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:fa:c1:69:5d:f9:8a:a2:6c:7c:e0:fc:7d:
                    9c:b7:ed:3e:c7:a6:33:3a:0d:44:4b:55:14:6b:ff:
                    d8:d9:82:3d:f7:12:a9:02:b0:d9:f2:3d:dd:0c:be:
                    77:ed:a4:bc:f7:26:64:24:26:bb:bd:17:b0:07:3d:
                    63:77:67:34:d8:d9:64:59:fe:a6:3b:39:84:27:c3:
                    2c:56:ec:dc:12:06:a6:e5:11:d5:00:8f:9b:b1:d8:
                    0d:aa:b3:2e:a9:9c:28:e3:1c:50:39:65:a9:1e:d6:
                    cf:ec:44:3c:45:d3:e7:eb:4e:e8:c2:0d:7d:40:a7:
                    4a:3e:5a:85:77:7c:46:85:61:f8:fb:26:49:7f:81:
                    93:25:75:95:c5:ea:03:79:44:aa:b8:da:d7:f3:22:
                    ed:24:7c:2a:55:15:ea:9e:17:12:13:4e:ad:0d:4e:
                    11:d0:6c:8c:f9:58:bd:80:04:a2:30:cb:b4:7b:15:
                    32:5b:c3:25:6b:19:60:d2:28:8d:4e:b5:54:84:0c:
                    76:63:6f:59:da:39:b6:bf:78:11:eb:2e:be:c5:97:
                    d4:3d:70:ca:12:27:0b:fd:43:06:6e:f9:89:5d:e0:
                    1e:a3:2c:ed:a6:81:23:76:cd:a1:e7:f0:30:7d:e4:
                    dc:0d:c9:95:82:ff:e8:4e:34:ef:5f:a8:9c:bf:8e:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:98:5A:C2:06:27:25:5C:22:CB:7C:53:26:F8:EE:BF:56:CF:E8:49
            X509v3 Authority Key Identifier:
                keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2800::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:6d:6d:8b:d4:99:a0:41:7c:57:44:96:3b:0d:2c:e9:de:
         b8:7a:df:b6:d8:8d:09:c6:8f:56:8a:d6:12:90:92:80:6c:66:
         a3:a4:b9:24:6e:a4:86:0d:69:b6:e7:35:72:49:4d:3e:18:25:
         ea:e9:1c:82:75:eb:15:97:b8:26:18:dd:08:d0:af:f1:76:78:
         30:95:9e:ea:32:f9:fa:b4:59:c9:15:36:c8:cb:9e:d4:56:d0:
         1d:a2:d7:86:14:87:2a:23:cd:9c:92:39:fd:dc:22:64:e2:30:
         30:f5:67:e8:06:80:db:3c:28:7d:1a:95:66:2f:7a:e7:56:e7:
         ca:3c:8a:27:de:97:5f:3d:b5:9a:bd:26:fe:3a:46:8b:ef:8c:
         e4:14:00:d0:24:88:ce:69:6f:68:f0:59:1f:75:f4:76:8f:9d:
         18:56:2e:b5:54:7f:8d:e5:5a:93:98:91:54:e8:10:45:ea:d6:
         29:25:84:d2:3a:3b:71:a1:70:21:df:cf:68:6b:8e:00:d2:ad:
         71:2c:62:b0:70:56:be:55:44:12:c7:98:46:53:32:4e:c7:9f:
         ce:94:37:9c:da:c0:6b:2a:00:db:d8:05:ae:5e:8d:c3:97:8f:
         09:0d:58:8b:98:c6:23:ac:32:58:d2:dc:8a:5d:b0:17:03:16:
         bd:00:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:55 2025 by rpki-client