Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a343030303a3a2f33342d3334203d3e20323733363539.roa
File:                     323830343a386134383a343030303a3a2f33342d3334203d3e20323733363539.roa (raw, json)
Hash identifier:          Ak37u4BEWdF2aZGlaHdG88rhMg3MJxHrQN4hw/zH9E4=
Subject key identifier:   15:14:24:4A:3D:D3:96:24:EF:9F:2D:7F:BD:18:54:4B:70:B6:80:23
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       14C4000B9F0780464C79F34EC66B533E9A9209CE
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a343030303a3a2f33342d3334203d3e20323733363539.roa
Signing time:             Tue 14 Jan 2025 19:56:46 +0000
ROA not before:           Tue 14 Jan 2025 19:51:46 +0000
ROA not after:            Tue 13 Jan 2026 19:56:46 +0000
asID:                     273659
IP address blocks:        2804:8a48:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c4:00:0b:9f:07:80:46:4c:79:f3:4e:c6:6b:53:3e:9a:92:09:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Jan 14 19:51:46 2025 GMT
            Not After : Jan 13 19:56:46 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:9a:5c:19:1e:5e:6e:9a:85:e6:ed:6b:27:
                    38:f0:fb:e7:74:0a:cd:04:94:f8:2d:2b:59:96:d3:
                    8b:ab:69:27:7d:d9:75:e1:b7:f3:eb:b9:13:8a:b3:
                    04:8b:76:0d:e9:ee:82:1a:ca:2c:52:93:06:dc:66:
                    9d:43:7a:30:33:eb:da:c9:45:9f:88:cd:e8:4d:27:
                    67:f7:9b:8d:7a:04:9d:17:e3:d3:b5:5c:85:c4:3d:
                    fa:e7:37:ba:54:b1:d5:32:32:df:50:fb:0b:dc:6c:
                    ea:32:0f:af:a8:09:f1:4e:ac:b0:6d:ac:17:63:95:
                    f7:15:67:e5:96:98:28:3b:5e:17:4c:67:89:5c:d9:
                    c3:82:80:a8:04:73:82:fd:58:e4:fb:2a:f7:dc:85:
                    98:de:b2:b8:18:72:d1:59:bc:34:69:ad:c7:c7:b3:
                    f3:17:18:27:4a:a3:10:2e:dd:f5:29:a5:8d:8d:95:
                    7a:ac:ae:52:7a:c9:4e:3d:1b:f8:6d:9e:54:66:6b:
                    9b:a9:c9:0a:63:ff:33:bb:82:b8:c1:06:80:39:af:
                    ea:d1:7d:4b:f6:b9:78:46:bb:2c:11:4e:84:65:c0:
                    8c:db:95:47:b2:6b:e5:0a:6b:29:be:4a:34:41:ce:
                    bc:55:1a:38:16:f7:1b:b7:a7:57:19:9e:79:09:ee:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:24:4A:3D:D3:96:24:EF:9F:2D:7F:BD:18:54:4B:70:B6:80:23
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a343030303a3a2f33342d3334203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:83:fe:fc:8a:0c:85:d8:58:eb:b4:66:9b:60:45:80:42:32:
         f8:c5:96:c1:bf:9f:26:57:c0:7d:05:a5:c3:a0:c9:81:79:b4:
         af:fa:fc:02:8a:ef:d1:69:53:e4:7d:32:d1:50:a6:22:f0:a6:
         e9:b2:f9:9a:0b:cf:1a:bf:28:f8:a6:eb:75:5a:8f:cb:67:42:
         15:41:91:a3:65:bd:7a:bf:bd:f4:f8:ea:6c:c3:13:1c:59:e3:
         1e:74:14:3f:17:98:35:ed:25:2c:a4:17:2f:13:9e:d9:f9:7f:
         aa:4d:5f:6e:60:f0:30:bd:09:ca:b9:8e:01:7f:00:fe:a9:13:
         de:55:d4:6b:17:1d:e9:d1:38:24:34:ea:19:59:77:95:f3:b8:
         e9:57:73:c8:74:96:87:95:34:db:4c:64:99:d8:40:36:09:1f:
         37:3c:92:ed:d8:68:8c:42:8d:38:95:32:ab:7b:f5:aa:24:14:
         61:73:f7:ec:3e:d2:be:45:f8:b1:8c:63:e9:1f:3a:c4:3b:31:
         a2:b4:63:2a:82:57:87:48:af:51:04:cf:6c:64:05:62:08:37:
         ad:51:07:ee:b9:5e:81:89:40:6a:20:23:f9:6f:96:c3:92:a0:
         f4:d1:6d:09:5b:41:08:31:7d:09:14:a7:05:0c:3c:5c:84:fe:
         e2:f3:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:21 2025 by rpki-client