Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
File:                     323830343a336538633a3a2f33322d3430203d3e20323636363035.roa (raw, json)
Hash identifier:          NKnuVqAqk+3A7O4hOHodRlWVJnKGYmiFD0gyW6RcAkM=
Subject key identifier:   6C:DD:A9:08:73:BC:D4:32:2D:28:50:EC:DD:70:91:C2:15:13:D2:0D
Certificate issuer:       /CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
Certificate serial:       09FDAE189E1B6F42D2790A2CB03BB639D8B73C5F
Authority key identifier: 57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa
Signing time:             Wed 05 Mar 2025 23:59:51 +0000
ROA not before:           Wed 05 Mar 2025 23:54:51 +0000
ROA not after:            Wed 04 Mar 2026 23:59:51 +0000
asID:                     266605
IP address blocks:        2804:3e8c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl
                          rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:ae:18:9e:1b:6f:42:d2:79:0a:2c:b0:3b:b6:39:d8:b7:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A246AC90452D1E317085F8AF6EEF8E11AC4553
        Validity
            Not Before: Mar  5 23:54:51 2025 GMT
            Not After : Mar  4 23:59:51 2026 GMT
        Subject: CN=6CDDA90873BCD4322D2850ECDD7091C21513D20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:f6:c3:b7:25:04:a5:b9:83:48:e9:af:28:
                    78:a0:95:71:56:09:8c:c1:ca:ee:36:93:df:72:12:
                    4f:dc:09:7d:6b:f4:c4:52:fc:79:fd:0a:79:f7:e6:
                    24:3f:3c:e4:fa:ad:32:c1:ab:56:21:85:ba:29:0b:
                    b7:c3:f5:79:b5:d5:8d:9f:e0:c5:45:e3:56:96:0b:
                    18:9a:e8:a0:04:70:0f:1d:36:91:85:3b:91:88:87:
                    7d:5b:7a:43:f7:fd:27:0b:ff:91:cd:d6:03:f7:03:
                    75:8a:87:b6:07:ab:36:bd:02:19:f2:16:7c:c8:8e:
                    33:d5:76:ed:77:72:1f:23:a0:56:2d:99:4e:24:8b:
                    b2:fd:c1:2e:9f:19:75:91:ee:8b:5c:e5:af:0a:b8:
                    58:5d:1d:73:eb:d9:7a:47:61:79:85:74:47:ff:b6:
                    e8:14:db:d0:55:c1:c8:81:43:bf:49:9f:22:9e:3d:
                    d5:81:b3:5a:15:cd:bd:f2:f4:56:a5:c0:f1:1c:e4:
                    46:73:17:09:7d:45:6e:99:78:69:71:cd:6e:5d:af:
                    15:68:41:46:e4:dc:4e:2a:35:d2:72:f9:5b:44:94:
                    70:84:2a:8f:47:2d:8c:12:1e:52:d4:60:f9:b0:2c:
                    e2:fb:d1:9a:57:5b:14:9e:72:d0:19:a2:8e:77:c0:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:A9:08:73:BC:D4:32:2D:28:50:EC:DD:70:91:C2:15:13:D2:0D
            X509v3 Authority Key Identifier:
                keyid:57:A2:46:AC:90:45:2D:1E:31:70:85:F8:AF:6E:EF:8E:11:AC:45:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57A246AC90452D1E317085F8AF6EEF8E11AC4553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/1/323830343a336538633a3a2f33322d3430203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:10:50:d5:5b:1a:78:41:6f:fe:de:d2:7d:2a:8e:8a:84:cd:
         18:80:fe:db:f4:58:3d:25:72:0d:f4:29:b8:99:1a:27:f7:45:
         f3:a1:62:ec:c9:ee:09:d8:3f:d6:86:c0:2d:7d:f3:13:6a:bb:
         14:19:8f:85:d3:9c:36:d3:b6:29:4e:6e:c6:58:6d:bf:1f:b4:
         a0:a1:93:40:41:c0:56:33:a6:e8:fa:7d:15:2d:af:2e:71:e0:
         0e:b1:ce:c2:70:14:f7:e6:6e:0d:05:50:ae:4e:e2:d6:18:d4:
         f6:54:55:e1:12:dd:77:0c:c2:46:5a:59:c9:0f:fa:7f:ec:f1:
         15:59:7a:c1:82:12:62:0f:30:92:63:8c:2e:54:e4:3c:32:67:
         47:3e:52:46:17:19:f8:f9:cc:35:36:af:44:99:d2:78:29:69:
         11:a4:a8:fd:45:18:43:4c:f7:34:0e:9c:8d:50:e3:e0:e4:6b:
         90:42:44:84:6f:46:9a:0d:23:df:38:92:3b:aa:77:58:cf:cd:
         14:5d:cf:a5:6a:b6:0c:d9:27:f9:6c:7d:7b:6e:80:97:fd:56:
         c9:56:e7:06:97:a7:3a:bc:14:f7:d4:0b:4b:3e:99:ed:bd:b7:
         4a:63:43:f3:6d:f9:a1:7d:33:45:db:d0:92:40:9d:c6:16:8d:
         78:e5:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:48:33 2025 by rpki-client