Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa
File:                     323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (raw, json)
Hash identifier:          ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=
Subject key identifier:   C6:AD:54:BD:AF:52:6E:C1:52:D8:69:B6:67:F0:B0:CB:F5:F3:98:DE
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       12B9381EC7AE52BC6137CCBC53BCC3E0D929E439
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:42 +0000
ROA not before:           Thu 06 Mar 2025 07:20:42 +0000
ROA not after:            Thu 05 Mar 2026 07:25:42 +0000
asID:                     267024
IP address blocks:        2804:46fc:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b9:38:1e:c7:ae:52:bc:61:37:cc:bc:53:bc:c3:e0:d9:29:e4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:42 2025 GMT
            Not After : Mar  5 07:25:42 2026 GMT
        Subject: CN=C6AD54BDAF526EC152D869B667F0B0CBF5F398DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:b0:2c:3c:f5:57:86:0c:13:cd:35:7f:c4:
                    be:00:d0:02:b5:53:86:85:f0:ca:71:56:33:11:fe:
                    1b:51:d8:3b:33:71:14:e5:d4:5f:fc:e7:ed:a3:e3:
                    4e:8e:15:87:d0:d2:ec:8a:94:f6:69:df:39:16:3e:
                    68:70:76:53:47:87:a5:bb:23:aa:c6:cd:22:33:ec:
                    04:45:98:55:92:bf:b2:d8:44:b1:46:9e:b1:52:8d:
                    9b:2c:4d:a9:98:3d:eb:c4:d4:2c:22:7b:a5:45:af:
                    dd:2e:ae:9b:63:6d:d2:0b:1a:f8:88:4d:24:b6:83:
                    4f:07:cb:5d:ce:97:a9:f8:66:eb:03:82:19:fc:57:
                    7a:52:64:3c:d4:c3:54:c6:a0:77:07:d3:68:9e:2f:
                    02:61:e3:7b:f7:08:fd:a4:9e:4f:c7:2d:25:6e:02:
                    c8:f4:2d:94:72:fc:55:dc:c5:d3:e8:05:26:7a:ff:
                    43:13:3b:3d:c5:bd:11:fd:2c:1a:52:b7:c3:b1:70:
                    6f:77:58:73:60:7d:0e:1f:68:11:9c:d2:ff:47:dc:
                    17:a0:0c:0b:e7:82:b7:d0:e4:31:72:bd:72:80:cd:
                    de:25:c1:91:c6:fd:d9:77:03:cd:08:56:4c:65:d4:
                    e0:89:19:8e:b4:10:6b:bb:00:3c:3b:76:3f:a0:e3:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AD:54:BD:AF:52:6E:C1:52:D8:69:B6:67:F0:B0:CB:F5:F3:98:DE
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:0d:d2:57:0e:1a:4c:1a:cf:cb:b9:60:46:bd:34:5d:a2:
         a0:18:97:f2:b1:ce:b2:5d:11:8f:a1:b9:3e:f3:cd:9f:35:27:
         67:ce:c2:85:1f:90:44:4a:41:11:c3:0a:d3:8e:a7:32:81:ef:
         43:a9:17:7e:8e:be:55:0c:2b:fa:2d:4a:6d:ac:7f:71:97:3b:
         9c:53:76:30:d3:ca:91:a4:a5:e9:4e:8c:3e:8b:eb:33:d8:35:
         93:75:66:f0:53:f4:d9:4f:12:33:cf:2f:d1:f9:03:e4:2d:dc:
         24:d6:15:44:89:d0:39:eb:38:fa:6c:34:1e:8a:e2:45:7a:ef:
         71:10:83:ee:3c:d4:28:ba:49:8c:c2:c5:5e:06:ab:10:8f:35:
         6d:bf:07:2b:56:b9:e7:23:a9:4d:75:b8:14:89:ba:6f:aa:03:
         e6:6d:ae:ce:9c:29:6c:7d:23:1b:a5:07:2c:ae:2d:fe:6e:51:
         41:75:cb:af:62:04:21:6f:53:76:95:9d:7d:8d:35:fb:65:4d:
         ce:c5:e4:e5:79:e2:cd:62:ad:1e:73:44:b9:4e:4d:28:59:6e:
         ed:43:c0:a7:7e:71:76:4f:fe:d8:7a:11:c2:cb:4d:9e:82:96:
         fd:9b:29:01:0e:8f:a7:76:13:c0:e7:27:78:37:6a:36:c8:60:
         37:78:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:10 2025 by rpki-client