Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa
File:                     323830343a346230633a3a2f33322d3438203d3e20323637323830.roa (raw, json)
Hash identifier:          WeMzcV0KpVfu3uVkExuUx+l1MUED+V9UAKqRhB9Z89k=
Subject key identifier:   61:7F:E0:B2:D7:EF:11:A9:04:B6:8C:D7:1E:E8:CA:47:E0:09:A4:05
Certificate issuer:       /CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837
Certificate serial:       6092DB67E11B7020A172C5147D44DB994DDF70F5
Authority key identifier: B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa
Signing time:             Thu 03 Apr 2025 20:14:55 +0000
ROA not before:           Thu 03 Apr 2025 20:09:55 +0000
ROA not after:            Thu 02 Apr 2026 20:14:55 +0000
asID:                     267280
IP address blocks:        2804:4b0c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl
                          rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:92:db:67:e1:1b:70:20:a1:72:c5:14:7d:44:db:99:4d:df:70:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837
        Validity
            Not Before: Apr  3 20:09:55 2025 GMT
            Not After : Apr  2 20:14:55 2026 GMT
        Subject: CN=617FE0B2D7EF11A904B68CD71EE8CA47E009A405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:eb:c8:f5:ed:da:ad:d7:90:8f:7c:1c:a6:
                    66:1a:63:83:88:7e:44:04:b7:ba:e7:3e:2d:d6:0d:
                    53:65:5e:85:a5:cf:d7:89:dd:d0:04:1b:62:56:ff:
                    33:5b:32:ca:11:a5:70:80:33:8d:91:bb:3a:b9:94:
                    4b:01:4c:3b:07:9c:71:ff:44:8f:a8:b9:fc:c6:5a:
                    60:f7:48:68:a9:01:ab:0a:80:e6:4a:e2:ae:1e:53:
                    d9:4c:b2:d5:f4:34:b6:3f:e3:78:10:40:fa:63:30:
                    3d:0d:ed:27:bb:f8:97:4e:cb:54:cf:76:12:43:b0:
                    ea:73:a4:5f:64:fa:eb:06:a9:3e:3c:8b:a3:f8:9f:
                    ff:2f:ac:84:1b:62:e9:6b:54:bf:3c:26:34:d6:f3:
                    13:d9:54:8c:76:92:4b:4c:3e:a3:66:75:47:7c:86:
                    fc:9d:82:b9:b0:d6:59:4d:38:73:f0:4d:cc:17:c9:
                    e5:4f:45:64:fb:9b:23:02:bf:fb:6a:21:fe:62:1f:
                    b2:3e:f9:ca:86:5b:49:ae:14:67:e3:3e:81:88:c8:
                    93:fc:d4:c1:95:16:6b:62:b1:67:12:5b:71:0b:fd:
                    c0:60:e1:34:a5:28:fe:95:4d:41:66:b0:25:49:e2:
                    56:63:86:2d:89:6f:a0:91:51:72:8d:1e:9b:db:41:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7F:E0:B2:D7:EF:11:A9:04:B6:8C:D7:1E:E8:CA:47:E0:09:A4:05
            X509v3 Authority Key Identifier:
                keyid:B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/323830343a346230633a3a2f33322d3438203d3e20323637323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:bc:f9:86:44:63:c2:ca:9a:0f:51:e9:70:cd:a3:f6:e2:c7:
         c0:ff:6a:16:27:83:b8:20:69:88:98:b3:fa:40:38:2c:22:95:
         bf:a5:0f:59:0f:0e:3e:07:95:1d:a5:06:33:42:05:25:bc:e5:
         79:32:58:44:9a:39:83:74:34:f0:f9:f6:75:3a:ec:22:53:1f:
         5e:32:0c:d5:4b:4b:96:ce:1d:c3:bd:76:a9:11:b8:fd:1d:62:
         d3:df:9f:06:e5:c4:32:24:9f:70:15:1d:5a:17:d6:20:39:b2:
         bb:32:48:e4:93:18:da:45:df:83:b2:d0:bf:77:5d:8f:1d:fb:
         5a:fe:5f:07:cf:79:d2:61:24:93:a9:47:0a:b3:20:62:66:fd:
         7a:5c:be:e3:3f:99:72:d3:5a:31:47:49:af:dd:8f:00:32:7f:
         12:9c:b4:ca:42:f1:47:18:80:10:ab:6a:f2:e5:ef:aa:ba:29:
         91:12:4e:0d:8e:b9:6b:36:78:73:63:4e:97:50:9b:1b:80:75:
         07:31:82:6b:80:08:41:25:57:83:4a:94:86:4b:e5:63:ba:74:
         2c:1d:af:9f:2e:07:b9:f7:67:11:be:31:f0:7d:26:0b:44:5f:
         b2:4f:4f:3f:51:9a:40:85:3d:79:67:89:93:06:90:26:77:f0:
         d3:a1:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:52 2025 by rpki-client