Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
File:                     323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier:          znB2pwCyecwjEpjTMaix8I+PnVwR2YJdnLzrg5JYyIs=
Subject key identifier:   1E:41:BB:5C:A5:17:6B:4E:6B:C3:D9:3C:C2:36:23:A1:4F:03:54:49
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       78CE369814A098622CE8FE038553FD8BFE8DE550
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:09 +0000
ROA not before:           Thu 06 Mar 2025 04:37:09 +0000
ROA not after:            Thu 05 Mar 2026 04:42:09 +0000
asID:                     28210
IP address blocks:        2804:56c:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ce:36:98:14:a0:98:62:2c:e8:fe:03:85:53:fd:8b:fe:8d:e5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:09 2025 GMT
            Not After : Mar  5 04:42:09 2026 GMT
        Subject: CN=1E41BB5CA5176B4E6BC3D93CC23623A14F035449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:24:69:f9:41:1d:bf:3a:b2:b0:e5:89:4d:
                    7d:b5:d9:d7:cc:7b:6d:cd:6c:ef:89:c3:6a:3c:89:
                    cd:00:22:90:87:be:b1:39:6c:83:98:ba:7e:1e:d6:
                    8f:ff:ae:67:67:09:ab:fc:78:6d:b4:d7:1e:5b:45:
                    66:89:2c:d8:ab:25:1a:52:80:d7:d6:4d:e4:b7:aa:
                    a9:7e:c0:0d:d5:46:50:dd:c1:14:7d:c3:1d:fb:ac:
                    b0:5a:10:68:c2:66:75:a3:b2:3b:00:c1:d6:21:39:
                    00:1e:e3:aa:5d:ab:d2:fd:69:bf:15:4e:3f:9c:47:
                    34:f7:7b:74:57:5b:ed:44:ca:33:1f:f8:e2:b1:3d:
                    5f:1e:ec:b4:11:f2:55:82:87:41:0b:f0:15:c6:37:
                    85:28:82:c5:2b:53:60:25:30:d5:3f:0d:de:7e:0b:
                    a7:47:8a:59:19:65:e5:e6:a1:7a:3f:f3:b0:73:a0:
                    44:27:0b:5c:9b:b9:2e:16:a2:04:5d:8c:97:8b:62:
                    f0:d8:b0:b5:fa:16:38:0e:8d:4c:9b:a3:86:3c:9f:
                    2d:97:a6:c5:9c:c7:52:ba:8b:a4:aa:ab:6f:50:2c:
                    3c:4c:7f:5b:4b:94:a2:42:8b:0a:01:0d:ee:ce:af:
                    2a:80:98:85:ba:f3:1f:81:f1:d9:30:d6:8b:3e:45:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:BB:5C:A5:17:6B:4E:6B:C3:D9:3C:C2:36:23:A1:4F:03:54:49
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323130303a3a2f34302d3430203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         d0:c5:bf:cd:90:80:24:52:6e:35:9d:b4:ff:53:42:7f:3a:78:
         ee:69:80:99:15:04:92:1f:f4:23:09:fb:07:34:86:d5:d7:a0:
         f8:fa:53:4f:bf:e7:5c:5b:ba:5c:e9:b9:6d:a9:3f:ce:c4:5b:
         0b:e0:3b:c7:54:00:9d:28:bc:3e:45:2c:c3:49:69:95:08:3d:
         fd:15:a9:d9:b3:b2:ad:61:25:e3:f0:0a:ec:a0:0c:34:20:b2:
         8d:68:3c:c1:d4:84:0b:80:45:1e:39:6f:f5:d9:78:b3:2c:a4:
         c8:ba:a1:56:dd:8c:2e:71:69:d4:fd:35:48:74:84:f1:a7:aa:
         36:cb:ed:78:96:db:d8:d0:73:14:48:8d:d8:5c:5d:16:31:cb:
         a8:bd:44:4e:40:2e:e2:74:e4:60:ae:97:be:29:f6:db:0a:81:
         82:07:e1:da:33:7b:60:42:a7:d9:7f:46:89:92:79:0c:5e:18:
         7f:51:9f:a3:39:71:89:f7:1c:73:e6:c0:9d:b2:3f:51:67:8b:
         1e:fd:42:fa:cf:32:5f:08:80:74:ea:53:6d:1b:95:e6:a2:59:
         29:7b:d0:ef:ae:62:52:11:fd:49:95:2d:23:34:6e:e8:bd:94:
         e6:2e:de:09:b3:53:9c:49:98:e1:57:96:5f:8f:50:30:87:fa:
         08:30:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:28 2025 by rpki-client