Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d3438203d3e203238323534.roa
File:                     323830343a3631383a3a2f33322d3438203d3e203238323534.roa (raw, json)
Hash identifier:          k5xg5BW4duY14gPslrLVnExcQeDQUvfa1TXjgohsh0c=
Subject key identifier:   C7:D9:DD:9A:A0:73:F4:5D:E8:EA:CD:29:2C:67:53:49:F6:91:F7:35
Certificate issuer:       /CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
Certificate serial:       09DFD92F585F33E609EAEDB30528CC9CF318AD2E
Authority key identifier: 91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d3438203d3e203238323534.roa
Signing time:             Thu 16 May 2024 18:56:59 +0000
ROA not before:           Thu 16 May 2024 18:51:59 +0000
ROA not after:            Thu 15 May 2025 18:56:59 +0000
asID:                     28254
IP address blocks:        2804:618::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl
                          rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:df:d9:2f:58:5f:33:e6:09:ea:ed:b3:05:28:cc:9c:f3:18:ad:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9151E1075CB8CA7782315512A362C4E53B9BDB13
        Validity
            Not Before: May 16 18:51:59 2024 GMT
            Not After : May 15 18:56:59 2025 GMT
        Subject: CN=C7D9DD9AA073F45DE8EACD292C675349F691F735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:c0:f3:9e:9e:8f:1b:66:7f:5d:0c:71:75:
                    a1:99:01:12:83:c6:82:ac:da:7a:c1:c7:14:a3:43:
                    2a:17:61:d6:c6:8e:bc:61:7e:a3:4e:5b:a3:d8:08:
                    89:31:56:1f:04:6b:c3:af:37:18:d5:22:27:e5:b5:
                    4b:39:6e:95:73:fc:e6:9f:ea:21:2b:42:43:80:b1:
                    ac:c1:5c:56:55:26:b9:f9:a5:2d:c9:93:1a:62:41:
                    c4:88:aa:e6:3c:c9:8c:52:d6:28:58:f0:ff:c6:72:
                    92:c8:97:20:24:51:be:22:15:35:a1:e3:1a:5a:3a:
                    11:1a:f3:2e:64:95:8e:e9:fc:e4:cc:21:0d:f4:70:
                    5f:35:b7:5a:3c:e4:ed:74:a1:89:b5:10:4b:6f:58:
                    66:bc:df:82:8c:fd:60:da:31:30:84:74:ae:e7:e8:
                    7f:ed:85:b6:f5:0a:3e:22:4a:66:ca:07:5f:20:98:
                    cf:47:15:b8:89:df:03:55:6b:b1:a7:75:db:a1:d2:
                    1d:9f:7c:9a:a1:e7:cb:e5:4c:28:6c:11:dd:d2:03:
                    0e:16:e2:d6:e7:ed:5b:d9:0f:7c:aa:06:bb:46:29:
                    74:45:07:2a:24:06:4f:16:b6:1e:d6:d7:2d:ce:8e:
                    78:7b:14:4a:95:2d:d7:c6:58:75:81:d8:6f:5b:e0:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D9:DD:9A:A0:73:F4:5D:E8:EA:CD:29:2C:67:53:49:F6:91:F7:35
            X509v3 Authority Key Identifier:
                keyid:91:51:E1:07:5C:B8:CA:77:82:31:55:12:A3:62:C4:E5:3B:9B:DB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/9151E1075CB8CA7782315512A362C4E53B9BDB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9151E1075CB8CA7782315512A362C4E53B9BDB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6joC1427zgnBLc65oqfkzcB3WhBWjFFHBTCr7ypBgZcV/0/323830343a3631383a3a2f33322d3438203d3e203238323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:618::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:ee:2e:36:4e:55:31:0b:e4:65:6d:c4:d2:75:28:71:cb:
         17:7a:12:55:25:08:19:4e:7f:fe:22:f8:3a:00:29:be:92:d5:
         c9:91:7f:a5:28:d7:45:7b:b7:70:7c:82:3c:c4:9e:8e:11:9a:
         0c:0d:3c:a0:e0:c5:7f:1c:69:6b:ae:3d:d7:39:2b:46:77:c1:
         ac:01:73:8d:6f:9f:fb:9b:98:6f:a1:61:54:45:51:f4:84:b8:
         2a:14:01:c4:1e:33:cc:a2:87:ad:4c:8b:2a:1a:4a:d1:b7:c6:
         77:41:98:0b:db:79:a6:d6:41:ab:14:35:db:ca:e7:45:62:e7:
         f8:9d:d2:7d:0c:87:8b:b0:64:c4:d5:e4:2f:02:23:c1:0e:bf:
         04:56:c8:48:37:6f:d1:5e:14:ac:77:c5:36:10:f4:5e:30:8a:
         15:35:01:be:8a:eb:95:24:65:56:43:ca:93:1d:b2:e4:8a:44:
         de:32:2f:db:e7:75:24:e8:92:33:9e:8f:12:16:68:f0:24:a2:
         78:d1:6c:7d:51:22:83:7d:7d:3d:89:fc:b4:65:e7:f0:2c:96:
         52:b6:8b:76:e9:fd:f8:86:27:58:3e:8d:37:f3:c6:7b:9b:78:
         f3:e6:59:67:87:62:47:46:36:a4:8f:d7:f8:83:11:0f:fa:67:
         42:16:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:39 2025 by rpki-client