Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          jjKzp39BEJU5Ql2jeqKUXrdMnkHNJ6+Zz+dvlpjFhpw=
Subject key identifier:   A5:99:92:20:82:FB:99:CF:5D:E2:0A:36:63:A1:68:44:A3:65:32:4F
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5BB0DC776F979E3FB4CE541F8ABA34A8FFF500BD
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:39 +0000
ROA not before:           Wed 15 May 2024 14:44:39 +0000
ROA not after:            Wed 14 May 2025 14:49:39 +0000
asID:                     264422
IP address blocks:        2804:1e58:9001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b0:dc:77:6f:97:9e:3f:b4:ce:54:1f:8a:ba:34:a8:ff:f5:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:39 2024 GMT
            Not After : May 14 14:49:39 2025 GMT
        Subject: CN=A599922082FB99CF5DE20A3663A16844A365324F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:43:12:dc:02:63:68:3b:5a:e7:b4:24:57:
                    c8:f9:4b:5c:24:85:be:a5:e0:4f:02:81:84:03:bd:
                    4c:3b:ac:24:9a:84:1e:e6:5f:b4:8e:c8:21:b5:7d:
                    b5:91:ac:98:b3:bb:55:9d:f7:dc:29:a4:df:d8:8b:
                    66:aa:80:fa:42:97:24:79:37:d3:7d:fb:a0:1f:12:
                    d7:2e:07:71:8b:07:1f:35:2a:54:2b:41:23:cc:ed:
                    b7:0e:3d:24:cf:06:ca:d5:b2:db:e3:d6:bf:9c:ef:
                    bc:05:ea:46:78:d6:15:0e:5d:00:10:92:c6:18:33:
                    e2:b2:0f:1d:c5:7e:2b:20:5c:e4:e7:b7:d9:92:b1:
                    f9:67:32:17:52:22:11:66:fd:71:a7:9c:be:a2:60:
                    c0:46:24:42:2a:9c:68:44:eb:a4:a6:f3:d2:9e:3b:
                    00:85:42:11:65:c4:68:e0:7d:cf:53:3a:32:74:88:
                    05:27:66:53:3f:29:05:7c:c5:56:0b:9b:45:a9:44:
                    cc:3c:43:0e:72:5d:47:03:18:98:71:1e:6a:d2:52:
                    6a:fd:ad:8a:b2:b6:f9:fe:33:1c:0a:ba:f2:77:ff:
                    c4:e1:7a:43:17:33:92:14:7a:32:77:87:db:28:c7:
                    6c:61:8d:65:a9:1c:b1:8a:9a:67:cd:54:08:56:03:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:92:20:82:FB:99:CF:5D:E2:0A:36:63:A1:68:44:A3:65:32:4F
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030313a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:37:c1:8c:38:f8:ae:5e:27:bf:c7:46:f8:17:07:dd:08:
         99:b6:c9:58:33:ca:6f:af:67:c5:bc:00:76:47:29:66:9d:65:
         90:bc:ef:57:49:74:09:22:92:a6:e5:b6:54:da:44:3f:bd:34:
         72:f4:f9:5e:dd:57:1d:04:2e:76:46:d4:ec:3b:2b:01:8f:cc:
         8e:f4:ae:52:8e:7b:9a:52:43:43:da:2c:0e:73:b4:c5:91:12:
         6c:f5:d4:9d:d3:a3:81:62:d2:cc:bb:13:0e:e1:1c:52:1c:5c:
         04:a8:be:14:40:bc:42:45:3a:55:b6:27:f2:fa:94:dc:89:93:
         c8:92:2e:ee:d2:8a:63:77:d4:ea:87:ac:8f:2d:4f:5b:93:f0:
         f9:af:9c:83:0c:51:1a:4e:cd:d5:66:7f:c5:21:da:e4:29:9d:
         71:8b:ce:bb:9b:25:44:94:4f:14:93:6c:75:f7:8e:df:7b:2b:
         52:a2:f5:47:9c:a9:85:7d:6f:95:48:48:03:c5:b5:13:e8:79:
         b8:95:a2:60:3f:69:c2:81:66:96:1a:0a:23:d0:cd:ef:73:97:
         d4:69:56:44:bb:32:33:49:ea:5f:9d:4b:3e:21:7f:a3:a8:14:
         5e:1d:c8:56:37:5b:89:99:a0:a9:e0:6e:12:d2:a2:ef:ca:dd:
         1f:41:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:25 2025 by rpki-client