Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
File:                     323830343a386134383a3a2f33322d3332203d3e20323733363539.roa (raw, json)
Hash identifier:          Oz4DPuaQDT7TwdQaXwGha5eFqboTmVQg5g48ybrxzvU=
Subject key identifier:   3F:60:05:A9:DF:CD:88:23:A9:60:E4:43:82:99:92:29:BA:AB:A9:EC
Certificate issuer:       /CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
Certificate serial:       08D2C27B5E0D12FECF6885FC139777BCD84E6608
Authority key identifier: A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa
Signing time:             Tue 14 Jan 2025 19:56:46 +0000
ROA not before:           Tue 14 Jan 2025 19:51:46 +0000
ROA not after:            Tue 13 Jan 2026 19:56:46 +0000
asID:                     273659
IP address blocks:        2804:8a48::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl
                          rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d2:c2:7b:5e:0d:12:fe:cf:68:85:fc:13:97:77:bc:d8:4e:66:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18299AB9A7616C093827EEE6A67FF105E7C632E
        Validity
            Not Before: Jan 14 19:51:46 2025 GMT
            Not After : Jan 13 19:56:46 2026 GMT
        Subject: CN=3082010A0282010100DA50E7A3265B159A727924A58108F3D49E2C656A64CB069EAE5734079680745A26FF39BCA3C0709FEA80497754CF46BA0BF638DCC2E4D636260CBF06F4962D0533AD44EB7154D63F0E45A5074F4D195CD5AC3979CFAFCAE784445276337EBF2A919F31E191C3C0A7D4419FB0C9FD5685B60E6E6D1BDA5102629E5F28D8FEB7C72CA6C42179F3A3051665A5B46C0DEE7D5FF2BC73A54D94B48F04CDB215D81F33569FEBB8487E783C4666C946A46E67D3403C0A77A368212A9DFAD9EA543854544FB1EAFF0EEC8E700592FF4AA94C277F80082AAAFF974979935CE0F58E318A4B7247A9A10DEC96F6D07E448524A3ECF5F2071AC592C64CFB807438E7D81836650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:e7:a3:26:5b:15:9a:72:79:24:a5:81:08:
                    f3:d4:9e:2c:65:6a:64:cb:06:9e:ae:57:34:07:96:
                    80:74:5a:26:ff:39:bc:a3:c0:70:9f:ea:80:49:77:
                    54:cf:46:ba:0b:f6:38:dc:c2:e4:d6:36:26:0c:bf:
                    06:f4:96:2d:05:33:ad:44:eb:71:54:d6:3f:0e:45:
                    a5:07:4f:4d:19:5c:d5:ac:39:79:cf:af:ca:e7:84:
                    44:52:76:33:7e:bf:2a:91:9f:31:e1:91:c3:c0:a7:
                    d4:41:9f:b0:c9:fd:56:85:b6:0e:6e:6d:1b:da:51:
                    02:62:9e:5f:28:d8:fe:b7:c7:2c:a6:c4:21:79:f3:
                    a3:05:16:65:a5:b4:6c:0d:ee:7d:5f:f2:bc:73:a5:
                    4d:94:b4:8f:04:cd:b2:15:d8:1f:33:56:9f:eb:b8:
                    48:7e:78:3c:46:66:c9:46:a4:6e:67:d3:40:3c:0a:
                    77:a3:68:21:2a:9d:fa:d9:ea:54:38:54:54:4f:b1:
                    ea:ff:0e:ec:8e:70:05:92:ff:4a:a9:4c:27:7f:80:
                    08:2a:aa:ff:97:49:79:93:5c:e0:f5:8e:31:8a:4b:
                    72:47:a9:a1:0d:ec:96:f6:d0:7e:44:85:24:a3:ec:
                    f5:f2:07:1a:c5:92:c6:4c:fb:80:74:38:e7:d8:18:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:05:A9:DF:CD:88:23:A9:60:E4:43:82:99:92:29:BA:AB:A9:EC
            X509v3 Authority Key Identifier:
                keyid:A1:82:99:AB:9A:76:16:C0:93:82:7E:EE:6A:67:FF:10:5E:7C:63:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/A18299AB9A7616C093827EEE6A67FF105E7C632E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A18299AB9A7616C093827EEE6A67FF105E7C632E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/0/323830343a386134383a3a2f33322d3332203d3e20323733363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:69:47:94:94:06:b6:7c:cd:57:45:e1:a1:e2:51:00:62:
         1d:05:df:f6:f9:47:cb:56:f8:5a:8a:51:1c:6e:86:da:b1:81:
         20:1b:9a:49:ca:3a:e4:2a:4c:bd:d2:50:bf:d0:da:6e:b3:1a:
         25:7c:85:bb:19:40:e5:75:2d:68:c4:f0:b9:13:79:4c:73:b5:
         35:3c:1d:1c:8f:60:ff:eb:83:69:57:5c:a8:01:f3:70:87:15:
         9a:22:6e:72:55:19:18:61:62:05:8e:50:94:af:4e:1f:54:e4:
         f0:7f:8d:ca:6a:ef:f6:b4:6d:41:8f:ee:98:b3:7d:2e:07:b9:
         78:cb:b7:67:2e:30:1c:de:88:fa:8d:02:26:47:60:f6:b7:d1:
         a2:c8:83:81:8b:7d:3e:37:fc:06:bb:53:67:91:0c:b7:bf:b7:
         12:18:3d:2d:18:35:a9:26:4e:2a:33:a0:9d:6a:ad:26:cd:97:
         4d:4c:a7:f2:50:b1:12:d6:5f:bd:84:af:4e:28:e1:59:a1:34:
         73:e8:10:8e:a4:7b:03:04:86:04:cd:9c:55:67:b3:b4:f5:b4:
         11:dc:ca:d9:75:f9:43:38:d1:14:22:f5:0a:58:a0:34:89:95:
         35:0e:0f:99:f1:6a:a8:38:a1:1e:7c:da:a1:9a:15:5d:8c:ac:
         d5:01:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:58:57 2025 by rpki-client