Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
File:                     323830343a383661383a3a2f33322d3332203d3e20323732363538.roa (raw, json)
Hash identifier:          4Wve8rrQyvXRaWHDbm6YxZLkom3e2sKuQg46NJyqVZw=
Subject key identifier:   E1:24:AE:4B:14:F8:98:20:1C:CA:92:D1:C3:1D:C7:6C:4E:6D:EE:0F
Certificate issuer:       /CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
Certificate serial:       26707C7BD35478E0FBF72442B14C810AC7A87B84
Authority key identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa
Signing time:             Fri 07 Mar 2025 06:13:33 +0000
ROA not before:           Fri 07 Mar 2025 06:08:33 +0000
ROA not after:            Fri 06 Mar 2026 06:13:33 +0000
asID:                     272658
IP address blocks:        2804:86a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl
                          rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 07:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:70:7c:7b:d3:54:78:e0:fb:f7:24:42:b1:4c:81:0a:c7:a8:7b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D
        Validity
            Not Before: Mar  7 06:08:33 2025 GMT
            Not After : Mar  6 06:13:33 2026 GMT
        Subject: CN=E124AE4B14F898201CCA92D1C31DC76C4E6DEE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:67:04:64:29:61:03:c9:61:02:59:00:80:
                    43:8c:b7:8a:9d:a9:cc:53:05:1d:e4:58:14:78:e2:
                    6e:ce:5c:3a:35:ec:a2:66:8d:69:29:66:b6:d2:39:
                    20:22:7a:c1:fa:93:5f:89:9f:ae:76:dd:29:54:fb:
                    b7:cf:38:43:fd:f9:01:3a:95:21:f2:a3:2f:79:aa:
                    85:cc:96:e4:e7:9c:42:e6:4f:90:53:d5:58:8b:ac:
                    9c:30:ff:8b:00:73:eb:bc:4f:de:46:70:f5:86:06:
                    47:47:8e:ab:11:f1:bf:4d:c9:9e:9c:98:8c:6e:ff:
                    6b:d3:cd:c4:7c:86:9b:65:d3:00:7f:3d:5c:98:42:
                    17:9c:aa:2c:a1:1f:ec:8d:a9:38:c8:f3:41:64:33:
                    5c:d6:14:0a:6b:95:d6:f9:37:5c:35:e8:44:55:5b:
                    50:14:8c:ce:77:b2:f5:9b:b1:b3:d8:99:5f:d2:28:
                    51:49:da:7b:af:c9:aa:bc:cc:59:3a:3c:d6:67:56:
                    4f:a7:8d:ed:c4:25:d9:f0:da:ca:4a:ab:24:77:25:
                    1c:02:97:8e:ab:c8:29:3f:bb:e3:d8:76:7e:88:7e:
                    c8:0a:34:9a:3d:d4:20:16:e3:ae:d7:09:e7:ea:41:
                    15:e7:08:4b:43:28:c4:9d:fd:18:b6:74:4d:6a:bc:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:AE:4B:14:F8:98:20:1C:CA:92:D1:C3:1D:C7:6C:4E:6D:EE:0F
            X509v3 Authority Key Identifier:
                keyid:B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/323830343a383661383a3a2f33322d3332203d3e20323732363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:93:e0:c0:4d:68:21:60:01:6f:99:15:29:b9:c1:15:63:
         69:dd:92:26:10:c2:b8:ca:a1:9e:b1:96:86:6b:00:8e:b5:fd:
         0e:6a:3c:bd:50:49:41:24:74:19:4a:42:e9:55:b6:28:14:d5:
         c8:d9:d9:5f:fa:eb:35:4e:67:7a:11:bf:dc:1d:6e:a7:18:f7:
         b6:9b:d4:5a:55:18:a5:9d:58:f1:ff:9d:c9:68:9c:a8:1e:1f:
         f7:65:f5:27:3d:e6:73:35:76:ba:c6:30:2e:87:83:f0:01:6d:
         8c:93:66:ec:21:89:f4:61:45:ff:92:e9:c6:db:33:85:71:57:
         5d:ba:e8:47:d0:da:e1:9d:e6:76:5a:f8:17:75:d6:42:ac:33:
         54:e3:8a:1d:d5:a5:8f:43:2c:1b:de:d5:30:ca:b0:b2:27:68:
         26:8f:15:7b:f5:9e:a7:be:d2:05:6c:4d:02:ec:98:fe:be:a7:
         bd:0e:d7:32:8c:c7:f0:19:49:d4:53:c9:11:db:de:f1:e1:e1:
         3d:d2:f4:3c:26:d5:a6:d5:8d:f2:19:20:10:97:a9:55:e5:03:
         18:e4:29:98:0d:4e:44:45:5a:ff:df:8f:1d:f0:7a:85:f6:6d:
         ba:06:74:3e:37:1b:2e:43:a9:c1:11:af:a5:e8:b7:da:7b:40:
         24:78:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:06:12 2025 by rpki-client