Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa
File:                     323830343a373136303a3a2f33322d3438203d3e20323730373835.roa (raw, json)
Hash identifier:          HPPkYtZo59XuptMBWEErOA5bmJhK5lsqRiK51bu8Kjk=
Subject key identifier:   47:18:86:A9:C8:58:6A:0B:89:1A:C5:9E:64:98:F8:20:34:26:88:FD
Certificate issuer:       /CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
Certificate serial:       3F9501A539F4B2E40E8D632F0D78FC2B8C5F1E3A
Authority key identifier: 0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa
Signing time:             Fri 07 Mar 2025 05:46:15 +0000
ROA not before:           Fri 07 Mar 2025 05:41:15 +0000
ROA not after:            Fri 06 Mar 2026 05:46:15 +0000
asID:                     270785
IP address blocks:        2804:7160::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl
                          rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:95:01:a5:39:f4:b2:e4:0e:8d:63:2f:0d:78:fc:2b:8c:5f:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Validity
            Not Before: Mar  7 05:41:15 2025 GMT
            Not After : Mar  6 05:46:15 2026 GMT
        Subject: CN=471886A9C8586A0B891AC59E6498F820342688FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:49:fe:29:6c:8c:89:7b:1f:87:ab:df:10:
                    8d:26:22:ce:a7:b7:88:b3:cf:0f:ac:51:d6:58:1f:
                    a0:85:2f:5c:70:78:a7:79:75:ab:8f:64:56:a5:e7:
                    4f:f2:6b:1e:07:3c:87:1e:5f:23:9c:99:6c:b0:0c:
                    34:ed:21:f1:db:65:54:21:20:44:cb:6c:26:09:f2:
                    44:d8:88:4a:ee:15:44:39:ea:6a:9c:03:3f:f1:8b:
                    15:45:46:b9:d6:40:95:de:af:c6:ca:8a:66:15:62:
                    19:bc:8a:a0:1c:65:41:74:bf:8e:f2:94:9f:43:56:
                    c8:55:6d:8f:70:35:1c:1a:e5:20:e1:a1:3e:87:8f:
                    2a:58:3a:62:13:87:3f:f3:d7:3c:df:ea:de:43:9a:
                    c5:ba:ab:ac:3f:32:af:5a:c8:f0:b6:ae:26:f6:08:
                    fa:cb:e7:2f:b5:19:e7:69:40:c4:ed:e3:71:cc:82:
                    77:ba:fe:97:c8:1b:32:5a:01:e0:a0:57:49:65:02:
                    37:fa:58:28:cc:f9:a2:8e:2e:4b:4d:a4:f3:00:4e:
                    79:53:a0:bb:43:23:e4:bd:b8:ff:5b:ca:17:17:a1:
                    b7:18:a3:ae:02:35:77:fd:f0:e6:73:36:9f:56:e5:
                    3d:87:b5:be:31:dd:55:86:9e:3e:bb:48:7f:c9:e4:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:86:A9:C8:58:6A:0B:89:1A:C5:9E:64:98:F8:20:34:26:88:FD
            X509v3 Authority Key Identifier:
                keyid:0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/323830343a373136303a3a2f33322d3438203d3e20323730373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7160::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:16:59:c1:2d:18:70:20:8c:0f:19:5f:1a:ed:b1:40:7d:
         5d:09:58:d3:c0:e3:48:ce:5d:02:a1:1f:3a:0f:2d:af:76:59:
         96:41:1d:e7:3b:49:b2:0f:b9:2c:c6:55:d2:2d:35:89:4e:ae:
         c3:7f:e4:33:a9:fc:58:02:ee:ec:55:02:0f:13:9d:d7:a0:d2:
         d7:6b:86:c1:03:bf:31:4b:e8:6a:0f:bb:33:53:9e:03:d4:54:
         58:0c:66:1f:d7:76:69:1e:c8:45:07:83:2a:10:84:24:38:7a:
         8d:32:77:b3:3b:4b:02:82:a7:f7:73:96:24:e1:14:8a:04:0d:
         ee:ca:a5:99:fc:2b:c3:c3:66:b7:81:04:90:2a:3a:f1:44:01:
         98:a5:7a:3d:47:85:0a:dd:9e:8f:16:a6:2c:de:dc:d6:f9:81:
         a9:64:0b:df:32:f5:a8:a9:11:fd:85:1e:7d:5c:b5:ec:78:23:
         2e:c4:6c:fd:f0:4d:cc:09:8f:d2:33:37:05:6b:a2:00:c9:61:
         cd:d1:70:bd:71:af:89:b4:aa:45:09:38:ae:6a:b6:35:c4:f4:
         38:a2:73:27:20:11:05:a8:f6:a3:99:80:9a:56:b7:ac:1d:46:
         ca:a5:a1:93:39:49:5e:bd:ff:47:2d:16:4c:85:a0:9f:81:83:
         42:49:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:22:51 2025 by rpki-client