Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa
File:                     323830343a336530633a3a2f33322d313238203d3e20323636353730.roa (raw, json)
Hash identifier:          asG31nf7xi1Ii9/mHLSKNx95ThmDCHDrD3qiXYp9WOM=
Subject key identifier:   EC:AA:9E:00:C2:1E:21:E4:BA:34:41:8D:17:31:56:C4:DE:E1:A4:B4
Certificate issuer:       /CN=DB613224E23644FA8E07FCFF041E61E5F92034E5
Certificate serial:       5F9BE825EE521DEA4B9C2F291B566B4229DDCDA4
Authority key identifier: DB:61:32:24:E2:36:44:FA:8E:07:FC:FF:04:1E:61:E5:F9:20:34:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa
Signing time:             Tue 18 Mar 2025 18:27:24 +0000
ROA not before:           Tue 18 Mar 2025 18:22:24 +0000
ROA not after:            Tue 17 Mar 2026 18:27:24 +0000
asID:                     266570
IP address blocks:        2804:3e0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.crl
                          rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 04:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9b:e8:25:ee:52:1d:ea:4b:9c:2f:29:1b:56:6b:42:29:dd:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB613224E23644FA8E07FCFF041E61E5F92034E5
        Validity
            Not Before: Mar 18 18:22:24 2025 GMT
            Not After : Mar 17 18:27:24 2026 GMT
        Subject: CN=ECAA9E00C21E21E4BA34418D173156C4DEE1A4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:6f:01:7c:4f:c1:03:28:9a:c3:c4:1c:01:
                    82:1a:3f:10:a9:b8:ea:2d:63:15:ec:7e:53:7d:12:
                    dc:77:60:68:eb:b2:5a:c9:6c:5a:c9:78:55:56:88:
                    ca:5d:75:82:80:e3:7e:4a:7e:a5:60:52:d0:d3:3b:
                    a4:67:22:c2:51:db:c3:c0:ce:32:3d:15:34:ff:d1:
                    2d:00:95:d6:09:7d:4d:45:89:b8:aa:4a:9b:96:ad:
                    0e:99:15:82:f0:39:eb:4c:67:96:01:6a:5b:a3:84:
                    66:bc:08:b4:4c:ee:6c:6d:79:74:65:e9:e5:d4:ed:
                    22:2c:e0:b9:b7:2b:a0:55:d5:31:16:1d:e6:2a:cc:
                    fc:74:c4:b1:fd:dc:31:e7:6d:ab:79:08:90:d3:bd:
                    79:07:04:d7:60:a5:1e:7a:b9:f9:0e:35:f2:b5:3e:
                    df:8b:90:41:e6:11:79:bb:52:12:6c:c9:67:29:74:
                    80:e1:17:0f:2c:79:4a:b1:cf:a7:23:52:f8:c9:cc:
                    3b:e5:a0:f2:85:b3:62:70:9d:e5:ca:cd:52:5d:9c:
                    b2:18:5e:78:29:53:79:1d:d2:36:67:49:0e:47:32:
                    a5:97:8a:af:cb:5c:02:1b:ab:04:65:27:68:52:ac:
                    df:a7:56:dd:74:f4:72:5b:dc:5f:e4:b0:80:09:8d:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AA:9E:00:C2:1E:21:E4:BA:34:41:8D:17:31:56:C4:DE:E1:A4:B4
            X509v3 Authority Key Identifier:
                keyid:DB:61:32:24:E2:36:44:FA:8E:07:FC:FF:04:1E:61:E5:F9:20:34:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB613224E23644FA8E07FCFF041E61E5F92034E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YraE5Qbd1C4bVzqnU3yr3FxevFaJ8V6RTffwgXa5ZMi/1/323830343a336530633a3a2f33322d313238203d3e20323636353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:a1:33:cc:59:ce:74:73:4f:e5:f0:e8:3d:c2:4e:c3:b7:
         78:0f:b3:c9:b1:d2:a6:c6:3d:f4:2e:72:57:cb:79:a4:63:9d:
         1e:da:39:64:c7:55:8b:c7:98:5b:5e:9d:3f:8c:c6:9b:9c:97:
         ae:fc:11:b7:97:fb:71:74:5f:9a:a9:4f:7a:3f:a2:70:74:e6:
         94:46:f3:5a:d4:52:65:af:d7:20:8f:06:0a:65:94:1c:aa:ed:
         e1:18:76:8b:cd:74:05:67:a0:40:43:0d:29:0c:70:aa:a3:d7:
         f1:e4:28:40:eb:9c:d2:91:9b:de:35:f0:13:95:3c:06:36:b3:
         34:93:ca:86:ba:d4:d4:e8:df:6b:ff:d8:7c:6a:8d:44:e7:1d:
         53:fd:6c:f1:e9:29:aa:41:c1:96:bb:dc:89:30:78:1b:2a:5a:
         79:9e:01:4e:45:5b:3a:e4:66:3b:7f:66:71:40:45:cf:06:12:
         bb:54:21:3a:dc:72:67:e6:0a:cc:6e:59:81:95:e6:b7:c6:dc:
         b0:99:f6:75:4a:5b:b8:77:34:14:77:c8:ec:77:3a:79:83:69:
         62:dd:18:df:67:98:1c:18:cb:47:63:ce:10:d9:16:95:dc:e7:
         bf:d4:33:78:39:c8:ee:71:7c:1a:ab:21:f3:c9:4c:78:f1:ab:
         44:05:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:58 2025 by rpki-client