Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa
File:                     323830343a343831343a3a2f33322d3332203d3e20323637303936.roa (raw, json)
Hash identifier:          cic2qXoc1sD88mnn5LIo9zkStlfq6DSG7Qrc0UxWsEM=
Subject key identifier:   A4:A7:31:69:D9:30:B4:3A:E9:CC:97:4F:32:22:1B:72:BC:3B:25:0C
Certificate issuer:       /CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
Certificate serial:       1474455B58CD43D8B6372D8E9CDBE652E99DBA6D
Authority key identifier: 6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa
Signing time:             Wed 04 Dec 2024 16:31:15 +0000
ROA not before:           Wed 04 Dec 2024 16:26:15 +0000
ROA not after:            Wed 03 Dec 2025 16:31:15 +0000
asID:                     267096
IP address blocks:        2804:4814::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.crl
                          rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:74:45:5b:58:cd:43:d8:b6:37:2d:8e:9c:db:e6:52:e9:9d:ba:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
        Validity
            Not Before: Dec  4 16:26:15 2024 GMT
            Not After : Dec  3 16:31:15 2025 GMT
        Subject: CN=A4A73169D930B43AE9CC974F32221B72BC3B250C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:dd:60:ec:7f:cd:83:31:70:2b:d5:4d:06:
                    e5:d9:f4:f2:68:9f:19:a7:5e:bb:15:37:ee:8f:9b:
                    ab:6a:87:8a:08:96:7f:ee:5a:0d:48:89:e7:58:d0:
                    c2:ee:97:d4:32:7d:29:87:04:f9:7d:76:9c:9c:10:
                    c3:ab:2b:85:b7:ac:35:1f:a8:60:ad:eb:30:41:10:
                    9a:63:25:05:16:d9:e0:ad:24:87:8d:1d:3c:f7:09:
                    e8:62:8e:80:14:b2:41:03:49:92:8a:21:02:c4:05:
                    19:bb:da:96:b3:17:21:5f:33:ac:d9:b2:c7:e9:6c:
                    08:b0:26:ba:26:49:ca:6f:56:d4:eb:7b:54:4d:0c:
                    e8:78:bf:e9:b9:bc:89:ad:71:5c:95:05:40:8e:75:
                    cc:95:50:12:0b:3c:8b:96:71:46:39:45:aa:33:95:
                    b2:8f:e2:78:03:7c:61:89:86:2c:c6:1b:4a:d3:28:
                    4a:b6:1e:48:19:b4:27:52:b4:d3:4a:be:25:fe:25:
                    83:de:23:a7:ee:bc:e6:43:40:fb:cb:1a:8f:fa:1f:
                    08:a6:b4:28:03:74:6d:89:24:b9:d7:3f:b1:41:80:
                    81:71:b5:be:f0:39:46:e1:3e:61:a1:63:65:cc:2b:
                    fe:7d:7e:8d:13:4c:d2:4b:9f:c9:22:13:50:47:43:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:31:69:D9:30:B4:3A:E9:CC:97:4F:32:22:1B:72:BC:3B:25:0C
            X509v3 Authority Key Identifier:
                keyid:6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4814::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:cc:1e:fd:fc:f3:90:50:34:c3:0e:33:0b:4e:2d:dc:eb:
         c4:5e:19:ec:98:8e:1e:0f:58:fe:8e:cb:71:32:39:a2:f2:79:
         ac:7f:21:3b:de:36:8d:c0:18:87:6c:b3:44:e3:2f:a1:7d:12:
         26:12:0b:49:45:30:8b:b3:f4:13:60:47:dd:ea:72:18:d1:4e:
         b9:6b:04:4d:2b:b1:df:c9:b5:56:ab:b8:82:c5:63:c6:81:f3:
         fb:4c:d9:03:2b:bc:6b:31:46:fa:1d:e3:12:70:37:af:94:b3:
         98:55:30:d6:e1:4b:d9:50:32:16:e2:12:df:31:6c:28:fe:5a:
         4e:d8:7b:39:c8:86:73:20:17:46:89:de:8e:12:eb:c9:9c:5b:
         3c:f8:c4:7b:b9:2b:e4:e9:d1:11:46:04:fc:5c:04:43:04:15:
         65:83:08:c0:55:c9:30:6e:99:1e:e9:53:0b:e0:86:d4:c5:2f:
         d7:bd:bd:a7:2c:c8:29:9b:7e:f2:06:0b:1d:c8:a2:03:03:38:
         d9:f3:8d:79:eb:50:00:03:be:2c:b9:dc:0c:40:a3:a3:aa:2b:
         4b:97:4e:f2:2a:c4:be:02:45:77:30:f0:0a:ef:43:fd:fc:21:
         15:d4:fa:d2:40:fc:65:32:74:a9:e0:fb:51:f7:45:5a:f6:38:
         32:d6:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:11 2025 by rpki-client