Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
File:                     323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (raw, json)
Hash identifier:          +5Z/dJJgmq4IeFkVAUqVnJRmdO2NbqEGc92eWAJBel0=
Subject key identifier:   B6:4B:FC:52:6D:20:1C:B3:44:93:D7:C0:24:73:8A:4B:68:62:B8:B9
Certificate issuer:       /CN=111ABB8582160E8251812CE601483CCFD4E7252F
Certificate serial:       2B63D21EFFCE4B5841A555445A93710FA026E3AB
Authority key identifier: 11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
Signing time:             Thu 06 Mar 2025 20:03:39 +0000
ROA not before:           Thu 06 Mar 2025 19:58:39 +0000
ROA not after:            Thu 05 Mar 2026 20:03:39 +0000
asID:                     269248
IP address blocks:        2804:61a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.crl
                          rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 04:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:d2:1e:ff:ce:4b:58:41:a5:55:44:5a:93:71:0f:a0:26:e3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111ABB8582160E8251812CE601483CCFD4E7252F
        Validity
            Not Before: Mar  6 19:58:39 2025 GMT
            Not After : Mar  5 20:03:39 2026 GMT
        Subject: CN=B64BFC526D201CB34493D7C024738A4B6862B8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:5e:95:85:81:b2:05:0d:ce:c6:80:9c:53:
                    74:fb:4c:e1:9d:9c:7a:05:9c:bc:42:39:c4:ea:fd:
                    13:2e:07:fd:86:2a:c4:17:4b:38:38:41:a5:a8:8c:
                    88:e0:03:74:94:76:78:68:8b:bb:70:a4:41:9d:8b:
                    8f:c7:be:e1:78:dd:c6:f3:66:d7:7c:74:da:ce:86:
                    ce:17:8f:1b:73:7e:bc:ac:5c:3a:01:29:63:74:7b:
                    81:86:32:6f:be:71:1f:4a:80:8a:86:7b:b5:da:49:
                    01:53:88:d7:b7:cf:02:39:73:8f:e8:f1:bb:e3:63:
                    43:93:08:1c:3a:d0:ef:93:ab:47:8f:b6:b8:53:6b:
                    2d:67:7c:ef:92:00:32:e2:56:50:66:66:18:e5:d3:
                    95:e7:89:4f:52:7d:96:74:59:8c:36:85:d8:70:d5:
                    7f:e6:12:d0:45:61:42:ce:04:b9:c5:8a:d1:38:2f:
                    13:49:fa:c2:f7:ee:61:4e:65:ad:c6:90:17:96:5b:
                    5e:c2:0f:12:d6:b1:23:b4:b5:bc:86:02:01:d7:2a:
                    7b:13:c8:9b:d4:4b:c7:02:ac:bd:9e:48:7a:e5:30:
                    d0:51:e7:05:b4:f8:7a:83:09:79:50:9a:0c:2a:7a:
                    23:8a:1a:9b:7e:a9:40:92:09:7e:49:7c:f1:c4:5d:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:FC:52:6D:20:1C:B3:44:93:D7:C0:24:73:8A:4B:68:62:B8:B9
            X509v3 Authority Key Identifier:
                keyid:11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:38:c3:72:a4:b9:2e:92:a3:2c:d0:b8:b1:1c:43:34:3f:d2:
         b9:14:0d:c8:b2:b8:9a:48:39:da:ed:1e:21:fb:f1:9a:83:86:
         97:20:22:47:36:87:e0:7e:38:a0:98:c9:1b:dd:88:8e:3a:28:
         de:67:00:25:49:c8:e0:24:92:04:6b:db:5f:c0:b8:f5:da:57:
         5d:a9:13:04:ca:6e:91:37:e9:98:fd:93:48:88:e4:eb:b0:43:
         c4:ec:e1:24:6d:1e:b8:25:7f:3c:49:6f:bd:6b:74:5b:5d:bf:
         83:30:44:44:37:bb:f7:48:f2:b2:53:ac:66:a3:78:bf:fe:d3:
         e4:2d:09:7d:64:62:25:9c:14:97:6a:1d:28:6a:07:7d:5c:ac:
         33:8a:00:44:16:da:36:e8:01:a9:23:d5:34:81:5a:b0:ac:60:
         0a:60:54:b7:25:7a:ac:02:1b:70:34:f9:ac:e2:3b:46:3c:ce:
         3a:4b:58:0d:9b:4f:8b:06:2f:6a:09:7d:4c:4f:38:17:7b:6f:
         0a:84:0c:96:35:bc:16:c2:f4:24:ab:30:8e:77:7a:92:e4:ed:
         d9:ca:e1:b1:f6:c1:a6:fe:0c:72:30:5d:1f:d3:ec:5a:f6:00:
         c5:a9:49:bf:f7:66:e3:8f:15:b3:fd:b9:c0:73:fc:36:2f:cf:
         c6:61:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:48:17 2025 by rpki-client