Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          xNL2Us4XSHXbn9zbuzPVGQBBZ8I4af4do42S60R0HjU=
Subject key identifier:   F7:CE:E9:36:CF:0D:BF:B5:EF:C2:55:62:EE:BD:73:F9:22:0B:21:04
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       D85B97D73ED1FAFC1292A1548DF25B044BCF24
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     266623
IP address blocks:        2804:3ed4:aa72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 08:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d8:5b:97:d7:3e:d1:fa:fc:12:92:a1:54:8d:f2:5b:04:4b:cf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=F7CEE936CF0DBFB5EFC25562EEBD73F9220B2104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:7c:9a:35:9f:64:b6:12:8c:a3:a5:a6:eb:
                    b6:82:01:9b:5c:f1:06:06:b0:59:4c:8b:4e:ec:0d:
                    e6:47:41:14:d0:24:b2:af:1b:09:79:22:02:67:e4:
                    00:89:9f:7c:a4:06:e1:93:42:c0:27:53:7b:6e:0e:
                    8e:35:a9:2a:1f:38:05:de:9e:46:b9:b6:32:50:18:
                    23:e3:70:33:87:bd:d5:3c:00:2e:7b:e8:67:69:c0:
                    4a:41:e5:c9:a9:62:19:dd:5a:2a:a8:51:93:23:19:
                    54:98:fb:f3:40:42:35:9d:1d:29:31:4b:5a:df:9d:
                    f7:c5:48:9b:6f:2e:75:57:e5:62:fd:f5:b6:cd:17:
                    b3:60:d9:c6:5a:59:65:b0:bd:8c:73:85:b9:46:eb:
                    8b:51:3b:38:04:cb:b3:01:95:e2:e2:dc:bd:0f:f8:
                    2a:47:78:52:11:ef:96:db:58:a3:ac:23:b2:3c:c6:
                    95:94:34:c9:0c:72:fd:4d:95:41:a2:cf:a4:0e:56:
                    ae:c9:05:32:19:05:93:e6:f2:1e:16:93:b6:e9:5a:
                    82:d2:d2:e0:23:23:ee:27:13:73:3d:da:ab:d0:cb:
                    8a:c6:53:fe:b4:aa:d1:02:0d:62:c1:03:61:23:9c:
                    51:aa:c1:b2:05:97:36:37:3d:18:d3:6d:8e:42:84:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CE:E9:36:CF:0D:BF:B5:EF:C2:55:62:EE:BD:73:F9:22:0B:21:04
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a616137323a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:aa72::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:fb:f6:02:a3:cd:84:cd:73:5c:6b:e4:87:26:79:80:59:
         78:7e:36:c5:a8:6f:fc:aa:25:18:a2:33:8e:a5:02:8d:c3:dc:
         c0:97:2b:eb:23:3a:62:69:07:43:ca:b2:db:6a:71:41:33:7e:
         cf:ca:4a:a3:56:f1:43:f7:5b:83:8c:ab:de:e5:2c:c9:79:ef:
         e9:69:21:f0:ce:11:c2:59:63:8c:4a:ba:70:9a:69:22:a0:e8:
         ec:6e:44:64:f6:1f:97:cd:19:b5:c2:48:a9:6f:49:da:1a:73:
         14:ea:75:c5:65:6e:7d:e6:bb:fe:b2:6f:89:45:83:dd:b8:09:
         88:a6:e7:1e:9e:9c:6e:48:6b:84:71:2d:75:be:03:41:d5:6c:
         f5:68:46:98:41:85:57:a6:42:50:21:82:a8:4b:bd:cf:99:ca:
         a1:0d:27:ec:30:26:2e:18:ed:96:8a:aa:36:72:b4:b4:71:fa:
         15:67:7b:e2:37:db:6a:bc:b5:0c:9e:2d:3e:fc:7d:80:d3:7c:
         5f:fe:59:71:76:ff:3b:66:89:80:38:03:42:2d:07:cd:ce:81:
         75:9b:38:ad:a9:1e:7d:21:a2:f9:d6:06:13:60:0c:a0:1a:82:
         85:cf:6a:9c:42:5e:09:5e:ec:bd:b5:ce:88:f8:42:9a:56:1f:
         79:a8:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:42:48 2025 by rpki-client