Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
File:                     323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa (raw, json)
Hash identifier:          RSwOkD5admMJdtbRFy/7LEnCcc/q+r/JQF92gtksQbM=
Subject key identifier:   7C:7B:14:EB:A9:BE:31:0F:CF:C4:F7:5D:13:DB:F2:14:43:D4:9F:AE
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       0CE98F7A93B055DB79910C9B4C2E4CD340D76CA8
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     266623
IP address blocks:        2804:3ed4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 01:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e9:8f:7a:93:b0:55:db:79:91:0c:9b:4c:2e:4c:d3:40:d7:6c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject: CN=7C7B14EBA9BE310FCFC4F75D13DBF21443D49FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:e9:0f:51:80:18:de:a4:fd:4d:7d:61:b9:
                    44:56:5c:a7:5d:3a:ac:11:ca:f2:ac:d6:54:c8:34:
                    bf:2b:53:2d:2e:a6:53:58:78:a3:42:d5:fe:64:74:
                    85:18:4e:26:83:3e:a0:37:b5:e7:00:d1:4e:94:9b:
                    d0:60:ae:03:f9:06:a8:46:4e:30:6c:80:8f:33:10:
                    f5:03:81:5c:5f:db:aa:1a:b2:0f:cd:6e:cc:74:7d:
                    4b:ba:86:34:f3:81:5f:fd:dc:49:ac:4f:e8:8b:79:
                    29:54:22:e3:af:24:2d:99:87:73:f3:2a:0b:35:27:
                    16:99:84:c2:5d:88:cf:12:d9:95:90:90:db:8b:3d:
                    b1:8a:28:d4:83:e6:b2:59:bb:29:e3:48:64:03:61:
                    5d:b9:f6:48:55:8e:e3:01:da:df:1a:ea:8b:7f:8e:
                    ff:4b:fd:d0:dc:2a:56:81:b8:3b:20:43:f5:2d:d5:
                    63:1e:ce:b3:0d:1e:0c:8d:f4:53:78:e1:ba:37:c1:
                    1b:20:59:64:8d:31:13:9e:12:57:72:c3:07:dc:e0:
                    17:9f:95:b5:c7:9c:f6:73:a6:75:5a:ae:20:52:3e:
                    89:51:1a:33:aa:c3:bf:8a:e2:1a:37:8d:88:c1:17:
                    de:b8:7f:63:8b:1d:bb:d8:1c:e3:62:1e:1f:8a:c7:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7B:14:EB:A9:BE:31:0F:CF:C4:F7:5D:13:DB:F2:14:43:D4:9F:AE
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:99:06:86:8f:19:ac:8f:71:8c:cd:a8:e6:fa:37:5a:06:ad:
         2c:3e:3e:2b:1b:18:77:61:62:31:d0:cb:1b:e1:30:62:74:62:
         9b:58:ba:51:ba:ae:c2:a8:9c:88:96:2c:04:c4:cb:60:81:95:
         5a:27:7e:c0:74:37:ce:6e:36:5f:61:7a:66:43:75:58:61:0d:
         08:f5:78:9d:c2:fa:57:7d:4f:9d:59:3b:80:ee:86:62:6d:0f:
         d6:56:da:6c:3d:79:9f:dc:55:33:39:24:33:c0:a4:86:97:c9:
         60:f3:00:ed:9a:c3:4c:14:3c:4f:0d:1a:17:5b:3f:33:a8:f4:
         d3:90:a0:a3:81:14:34:67:83:d3:0b:7b:1c:d2:72:ef:3a:4d:
         80:9b:53:ef:aa:46:23:1e:3e:1b:bd:35:fa:6f:f2:a8:0b:6d:
         87:92:e9:cd:a7:68:42:69:95:44:57:a8:b6:ba:d9:7e:28:8a:
         5d:78:02:7e:aa:85:80:0c:fa:2e:60:89:bb:c7:9f:d0:98:e8:
         e5:55:39:ce:8c:79:38:c3:ac:08:20:48:13:16:e1:e2:12:dd:
         96:75:f3:f9:88:20:a7:08:d0:47:e6:56:ff:71:77:0a:b9:8a:
         1a:99:7e:dd:c5:de:b4:89:1e:76:a8:26:d8:c7:4d:b1:0c:e4:
         03:30:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:12 2025 by rpki-client