Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa
File:                     323830343a323634383a3a2f33322d3438203d3e20323634333337.roa (raw, json)
Hash identifier:          nfCalan+e4/d5v8efDIgRl7g41qh13V4JE3S6UeJpKo=
Subject key identifier:   F2:64:19:C0:8E:71:D1:D2:B1:3E:77:2E:89:60:7C:42:CA:B8:4A:03
Certificate issuer:       /CN=06349A469EC117DBF7704A58DBFDA72CD102D680
Certificate serial:       7A688D528E3CB4164D0A0337107E202DC8A711E8
Authority key identifier: 06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa
Signing time:             Fri 21 Mar 2025 15:58:55 +0000
ROA not before:           Fri 21 Mar 2025 15:53:55 +0000
ROA not after:            Fri 20 Mar 2026 15:58:55 +0000
asID:                     264337
IP address blocks:        2804:2648::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.crl
                          rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 23:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:8d:52:8e:3c:b4:16:4d:0a:03:37:10:7e:20:2d:c8:a7:11:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06349A469EC117DBF7704A58DBFDA72CD102D680
        Validity
            Not Before: Mar 21 15:53:55 2025 GMT
            Not After : Mar 20 15:58:55 2026 GMT
        Subject: CN=F26419C08E71D1D2B13E772E89607C42CAB84A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:f3:05:2f:9a:a3:f0:28:3b:03:6a:d4:27:
                    42:9d:da:d1:2c:5b:01:72:32:65:74:2a:77:ce:55:
                    81:d5:4e:ec:66:4d:b6:e1:68:1f:76:34:93:1e:b9:
                    a4:d2:f9:62:38:d0:ad:7d:94:e2:93:c1:31:2f:cd:
                    31:63:a7:52:78:17:e6:07:b4:33:c4:5f:a3:9a:63:
                    25:8a:74:67:86:a8:ce:16:d1:af:a9:8b:77:ed:92:
                    a4:ed:ae:bd:be:e7:9a:54:3d:22:da:40:9c:53:ca:
                    e5:7e:d4:c6:a6:5f:98:be:f2:9a:e0:69:e8:56:7f:
                    0f:bc:fa:0f:11:1e:37:97:7f:e1:b3:5f:08:cb:aa:
                    26:cb:04:66:ea:d9:3b:42:7c:dd:22:8a:ee:10:02:
                    51:89:71:ed:5f:4e:67:84:d6:df:53:df:f7:5d:51:
                    ce:1f:fa:6c:eb:b8:2c:c4:ed:0b:d3:fe:e0:27:45:
                    2f:a8:a1:57:05:4e:f6:d7:49:4b:de:0a:40:59:ec:
                    4a:8b:ee:4d:6f:04:b7:7a:60:91:bf:b7:62:f5:24:
                    73:64:e0:da:d0:c2:3e:47:ae:5d:0d:63:2c:ec:5b:
                    c2:09:1d:a4:7b:4d:17:3e:a4:8a:08:c5:05:72:98:
                    bc:b6:c8:db:ee:cb:3c:fe:cc:0f:5e:b0:0a:45:58:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:19:C0:8E:71:D1:D2:B1:3E:77:2E:89:60:7C:42:CA:B8:4A:03
            X509v3 Authority Key Identifier:
                keyid:06:34:9A:46:9E:C1:17:DB:F7:70:4A:58:DB:FD:A7:2C:D1:02:D6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/06349A469EC117DBF7704A58DBFDA72CD102D680.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06349A469EC117DBF7704A58DBFDA72CD102D680.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6s1T4cJePUaspW8HK8CBD2eFDvGQxTxzPGAb8DqReJnZ/0/323830343a323634383a3a2f33322d3438203d3e20323634333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2648::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:ae:51:51:03:c1:f2:a9:4b:9b:81:e2:f5:79:04:92:f8:
         9a:30:47:79:f9:3a:4a:6a:34:51:a4:33:45:6e:25:f3:92:01:
         8d:4b:f5:14:2e:54:24:be:31:a4:46:fc:70:67:41:74:4a:f1:
         69:92:6b:d8:24:7c:a5:fc:a1:df:ad:72:72:96:bd:f2:95:5e:
         4c:87:06:7a:57:bc:7c:b1:e0:7e:cb:34:e0:b8:86:0b:d1:45:
         81:26:f2:3a:07:93:b8:ca:6b:10:f1:fd:e9:45:f2:88:56:8f:
         f2:9c:eb:bb:1f:b6:39:32:d5:1e:dc:dd:c5:c7:9f:77:da:02:
         72:c1:79:f8:80:2f:1a:2b:ec:93:c5:ac:42:5a:d7:f4:f9:52:
         6e:f8:4f:f8:f5:92:06:0c:0f:54:a1:ef:2f:c0:c8:28:95:91:
         c5:6c:99:bc:ea:dc:3c:c6:8e:7e:1f:ac:7d:df:89:a6:7d:55:
         2d:6b:1e:4a:2b:ec:1c:99:6c:05:67:43:af:37:6b:bb:a8:63:
         ba:9f:d5:c9:0c:e5:cc:d4:63:49:b9:1b:7c:92:39:48:c6:a9:
         0b:64:9f:5f:90:43:73:08:64:cc:bc:ed:94:8c:e2:ae:a8:0a:
         77:07:dc:0e:b5:df:f9:7e:33:4f:97:9a:64:47:63:64:80:0e:
         6d:02:a0:2e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUemiNUo48tBZNCgM3EH4gLcinEegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYzNDlBNDY5RUMxMTdEQkY3NzA0QTU4REJGREE3MkNE
MTAyRDY4MDAeFw0yNTAzMjExNTUzNTVaFw0yNjAzMjAxNTU4NTVaMDMxMTAvBgNV
BAMTKEYyNjQxOUMwOEU3MUQxRDJCMTNFNzcyRTg5NjA3QzQyQ0FCODRBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJPMFL5qj8Cg7A2rUJ0Kd2tEs
WwFyMmV0KnfOVYHVTuxmTbbhaB92NJMeuaTS+WI40K19lOKTwTEvzTFjp1J4F+YH
tDPEX6OaYyWKdGeGqM4W0a+pi3ftkqTtrr2+55pUPSLaQJxTyuV+1MamX5i+8prg
aehWfw+8+g8RHjeXf+GzXwjLqibLBGbq2TtCfN0iiu4QAlGJce1fTmeE1t9T3/dd
Uc4f+mzruCzE7QvT/uAnRS+ooVcFTvbXSUveCkBZ7EqL7k1vBLd6YJG/t2L1JHNk
4NrQwj5Hrl0NYyzsW8IJHaR7TRc+pIoIxQVymLy2yNvuyzz+zA9esApFWCAxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8mQZwI5x0dKxPncuiWB8Qsq4SgMwHwYDVR0j
BBgwFoAUBjSaRp7BF9v3cEpY2/2nLNEC1oAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnMxVDRjSmVQVWFzcFc4SEs4Q0JEMmVGRHZHUXhUeHpQR0FiOERxUmVK
blovMC8wNjM0OUE0NjlFQzExN0RCRjc3MDRBNThEQkZEQTcyQ0QxMDJENjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MzQ5QTQ2OUVDMTE3REJG
NzcwNEE1OERCRkRBNzJDRDEwMkQ2ODAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZzMVQ0Y0plUFVhc3BXOEhLOENCRDJlRkR2R1F4VHh6UEdBYjhEcVJlSm5aLzAv
MzIzODMwMzQzYTMyMzYzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzMzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQmSDANBgkqhkiG9w0BAQsFAAOCAQEAmdGuUVED
wfKpS5uB4vV5BJL4mjBHefk6Smo0UaQzRW4l85IBjUv1FC5UJL4xpEb8cGdBdErx
aZJr2CR8pfyh361ycpa98pVeTIcGele8fLHgfss04LiGC9FFgSbyOgeTuMprEPH9
6UXyiFaP8pzrux+2OTLVHtzdxcefd9oCcsF5+IAvGivsk8WsQlrX9PlSbvhP+PWS
BgwPVKHvL8DIKJWRxWyZvOrcPMaOfh+sfd+Jpn1VLWseSivsHJlsBWdDrzdru6hj
up/VyQzlzNRjSbkbfJI5SMapC2SfX5BDcwhkzLztlIzirqgKdwfcDrXf+X4zT5ea
ZEdjZIAObQKgLg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:33 2025 by rpki-client