Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa
File:                     323830343a3666343a3a2f33322d313238203d3e20323632353339.roa (raw, json)
Hash identifier:          fTudzJcfDbKAzw2BjLo13FtFZepr6eSASAZ9FVm74gg=
Subject key identifier:   10:6B:46:DF:F0:63:A2:A8:93:28:11:9C:96:68:A1:69:F7:F8:E5:75
Certificate issuer:       /CN=5BBAA26A1B1C199630D76AA2B81403371285F562
Certificate serial:       69362BC11AB3144307151EC43CA3587853900B90
Authority key identifier: 5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa
Signing time:             Mon 24 Mar 2025 20:00:19 +0000
ROA not before:           Mon 24 Mar 2025 19:55:19 +0000
ROA not after:            Mon 23 Mar 2026 20:00:19 +0000
asID:                     262539
IP address blocks:        2804:6f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl
                          rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 12:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:2b:c1:1a:b3:14:43:07:15:1e:c4:3c:a3:58:78:53:90:0b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BBAA26A1B1C199630D76AA2B81403371285F562
        Validity
            Not Before: Mar 24 19:55:19 2025 GMT
            Not After : Mar 23 20:00:19 2026 GMT
        Subject: CN=106B46DFF063A2A89328119C9668A169F7F8E575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:04:1e:eb:6f:bd:b2:5e:47:16:c2:76:30:
                    6b:4d:40:55:39:34:eb:11:c0:30:da:cc:7c:4d:91:
                    31:b5:fd:17:f4:02:c7:63:10:bc:c8:48:f4:2e:84:
                    24:3d:fc:77:d1:e1:57:06:4e:12:95:9d:28:72:2c:
                    2a:fe:cd:7d:2f:51:bc:b7:e3:0e:42:c5:90:4c:53:
                    d3:2d:ec:d1:94:f4:e2:2b:26:5b:88:47:32:e9:7d:
                    03:7c:f8:90:54:a5:18:dc:83:6a:88:d8:e9:da:8a:
                    39:d0:63:f0:f6:3d:2e:d0:c0:13:7e:40:45:4b:be:
                    86:56:b8:b8:39:52:35:c6:65:03:20:70:6e:07:7d:
                    f2:5a:30:df:49:4b:bc:c8:58:53:2c:69:b3:76:95:
                    b8:19:e0:ac:5f:6b:d9:f0:31:4f:bd:6d:ff:69:fc:
                    49:2b:32:cf:75:08:ed:00:ba:b6:24:b3:84:e5:f1:
                    62:6f:96:3b:ed:38:fc:24:a6:46:7c:51:98:9e:0a:
                    0e:33:29:8d:32:90:59:26:39:2c:da:10:7f:24:af:
                    2c:b9:d3:e7:86:c0:74:c7:e7:b6:27:2b:a2:db:6e:
                    35:27:83:d9:7c:c0:07:37:91:79:69:d8:f2:62:04:
                    61:c4:d3:5c:32:db:6a:89:ce:4d:88:44:8c:c9:14:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:46:DF:F0:63:A2:A8:93:28:11:9C:96:68:A1:69:F7:F8:E5:75
            X509v3 Authority Key Identifier:
                keyid:5B:BA:A2:6A:1B:1C:19:96:30:D7:6A:A2:B8:14:03:37:12:85:F5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/5BBAA26A1B1C199630D76AA2B81403371285F562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BBAA26A1B1C199630D76AA2B81403371285F562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/323830343a3666343a3a2f33322d313238203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:00:00:0c:46:13:64:f2:c6:30:4b:8f:5e:97:98:2e:60:
         01:c8:85:db:22:9b:6e:8c:a5:04:ef:33:b2:1e:72:97:6e:18:
         5f:e4:64:ed:a4:71:22:3e:72:50:bd:5b:27:b2:e2:1d:e6:12:
         63:57:e6:65:8e:49:5b:15:d4:2f:88:70:dd:ff:95:32:68:44:
         1a:fa:fa:54:e9:67:71:22:b1:a8:11:8e:34:6a:df:38:dd:03:
         d7:6b:da:1e:2f:95:ac:67:e2:a6:64:f0:30:f8:97:c8:14:62:
         1d:68:52:e7:f6:ad:70:93:87:ea:e2:55:04:c6:71:d5:69:8f:
         18:4d:9c:ac:f6:1a:fe:72:e1:85:f1:ab:72:ed:e1:74:da:ba:
         c2:2e:52:7f:3f:f8:6d:d2:2e:83:5c:ee:48:bc:ad:51:99:32:
         fc:c1:3d:31:60:85:f3:e1:af:ab:7f:b9:8d:8f:06:d1:61:a4:
         80:62:7d:b5:56:65:40:19:da:7f:d8:da:69:76:dd:e4:c8:95:
         6f:ff:7e:e9:dd:f4:7a:1d:f2:f1:38:0d:d8:a9:ab:88:ee:09:
         b1:19:35:ab:33:46:74:a9:2d:16:c5:23:2e:0b:a6:af:1b:78:
         e6:de:44:ec:ba:2f:0d:1e:61:6c:c0:99:25:30:64:e8:5e:81:
         07:13:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:35:02 2025 by rpki-client