Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa
File:                     323830343a316536343a3a2f3332203d3e20323634343236.roa (raw, json)
Hash identifier:          qwFXT6k7AMsUBym6na1qloqm5Zh0+AMk+7yKHI2cZjo=
Subject key identifier:   E9:A0:43:1E:BC:B3:CF:A0:A9:23:EB:1D:BC:09:9A:AF:79:90:84:0A
Certificate issuer:       /CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
Certificate serial:       214491303747EF0642392018B43665A375A0C9
Authority key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     264426
IP address blocks:        2804:1e64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl
                          rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:44:91:30:37:47:ef:06:42:39:20:18:b4:36:65:a3:75:a0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:68:6c:0d:e0:c4:72:a9:af:dd:0b:d7:ef:e0:
                    3d:fe:ac:23:e8:54:dd:bc:ec:75:91:38:26:52:8e:
                    ad:8d:64:05:d3:62:42:08:70:69:0a:05:11:5b:9c:
                    20:54:bf:02:f0:20:26:10:3a:3c:a6:27:b9:15:ad:
                    86:8a:a2:56:a5:95:70:b3:d7:46:5d:36:84:2c:33:
                    67:76:cc:5e:bc:22:d0:56:0d:8f:3d:0c:b3:fd:c6:
                    e5:16:60:db:c1:01:83:9f:09:11:04:e1:1f:59:7f:
                    d3:6c:03:73:47:70:0b:03:96:8a:a8:3a:fb:0d:47:
                    9b:ec:3a:39:31:ac:89:c3:57:79:0a:b5:e6:97:98:
                    5a:55:34:2b:6b:5e:93:a3:0b:9a:2b:1f:9f:fa:56:
                    a9:58:6b:24:b5:aa:3e:bf:57:7c:a0:20:30:a6:4e:
                    b8:88:96:5c:65:5c:d1:98:34:5c:f4:87:f1:b4:0c:
                    55:5e:72:79:eb:8c:1d:08:ba:58:3e:67:5e:b9:e4:
                    c6:42:89:bf:3e:c6:ab:3d:54:42:58:8b:36:73:59:
                    0d:d6:75:2f:d7:e6:0c:02:15:a9:ff:0f:8c:91:69:
                    c9:3d:30:90:1c:18:f1:45:be:de:bb:06:e6:aa:ae:
                    57:02:00:65:6f:56:dc:1e:d1:6c:80:9e:ea:48:55:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:43:1E:BC:B3:CF:A0:A9:23:EB:1D:BC:09:9A:AF:79:90:84:0A
            X509v3 Authority Key Identifier:
                keyid:6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/323830343a316536343a3a2f3332203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:82:c5:8c:94:4a:f7:d8:f0:b0:cc:ce:32:8d:76:c0:ca:
         db:67:31:09:28:f7:e0:18:a5:80:c1:96:49:c6:73:62:e0:2b:
         84:e3:2f:17:97:19:86:b0:6b:68:cf:63:cd:a1:a3:c9:d8:d5:
         e1:41:01:6d:2c:7d:7b:71:37:fd:bf:1d:bb:38:c1:8b:18:4b:
         be:3c:16:da:e0:2a:e4:e7:f1:bc:ae:7b:e1:04:76:23:58:12:
         5e:12:70:41:ab:76:ef:30:2e:4d:61:74:56:9a:88:bc:4a:d7:
         d8:da:f0:33:47:69:fd:8a:a4:76:82:d6:05:89:94:b9:47:16:
         bc:7d:66:58:28:59:90:c9:81:b6:dc:d9:b4:43:e2:5b:21:0e:
         14:23:02:38:f1:0b:f5:00:26:7f:e6:47:11:c2:57:77:ae:01:
         08:09:96:3e:28:06:d0:3c:40:28:83:43:e1:fc:8c:2d:6f:0a:
         6d:b2:cb:06:12:85:a3:eb:01:6c:2b:a7:c7:74:59:0e:52:17:
         43:8b:95:f4:e5:ca:5c:7b:42:54:4a:52:cc:83:53:fc:18:ad:
         03:a0:b5:02:98:56:17:c2:d6:f6:15:78:e3:d8:03:16:b8:35:
         25:63:eb:ed:51:5d:d5:26:2d:03:49:b4:56:5b:fd:e5:49:84:
         d7:95:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:42:38 2025 by rpki-client