Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          gmpp+M9VDR7LLYp3i+JOFWbMjZpKjHkGdJfzB7m9x0U=
Subject key identifier:   CB:E2:6E:78:0E:4D:D9:A5:69:58:2D:B6:01:91:16:2D:CE:8D:C9:A7
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6006AB0E011561ED1F307082D43DF0F22356503B
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Thu 06 Mar 2025 04:42:09 +0000
ROA not before:           Thu 06 Mar 2025 04:37:09 +0000
ROA not after:            Thu 05 Mar 2026 04:42:09 +0000
asID:                     28210
IP address blocks:        2804:56c:21c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:06:ab:0e:01:15:61:ed:1f:30:70:82:d4:3d:f0:f2:23:56:50:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Mar  6 04:37:09 2025 GMT
            Not After : Mar  5 04:42:09 2026 GMT
        Subject: CN=CBE26E780E4DD9A569582DB60191162DCE8DC9A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:bf:29:fb:f2:e3:89:73:99:d2:6d:3a:89:
                    ae:77:a3:ba:9b:35:f9:bf:56:a4:08:0b:fb:2b:d9:
                    a7:d1:06:36:51:a5:54:4f:c6:15:e4:a2:0d:46:70:
                    49:c5:22:9b:28:11:77:6f:7a:38:45:d5:26:4c:17:
                    c4:97:2d:67:2f:d6:5b:d9:69:91:67:cd:f2:d8:dc:
                    9b:85:e9:7c:66:ee:25:38:cd:46:34:70:aa:2b:51:
                    19:6c:8f:18:c8:bf:28:2b:79:4c:4d:22:63:ca:bf:
                    8a:a2:e0:77:89:f1:f5:eb:5e:ce:b7:47:e2:f3:a1:
                    e9:20:8d:a4:89:6b:c2:63:74:cf:07:f0:e9:03:ad:
                    ec:32:0c:1e:02:48:cd:cd:19:08:af:a8:24:9f:a8:
                    a9:0e:12:63:39:fb:70:2d:98:02:22:59:a3:d3:bc:
                    1e:79:4b:08:65:d8:ed:b0:16:98:7f:42:bf:9c:c7:
                    40:41:b0:e6:9a:cf:6f:ca:26:ee:97:e2:10:45:0a:
                    29:65:fa:23:b3:fc:ea:ba:54:2e:2b:57:57:67:5f:
                    fb:2c:20:dc:3a:74:72:de:c3:ae:04:27:09:c7:97:
                    e7:0c:b7:ee:24:2c:33:1e:a0:13:2b:80:43:c9:1d:
                    bb:40:4a:64:4d:c0:5c:5e:c4:fd:01:ea:d2:43:7d:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:6E:78:0E:4D:D9:A5:69:58:2D:B6:01:91:16:2D:CE:8D:C9:A7
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:21c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:e9:10:c9:06:65:80:99:a0:a0:3c:7a:5c:e3:14:f7:3c:
         25:57:69:a0:aa:c7:b9:94:50:8d:27:6a:a4:b2:31:ab:da:f1:
         e2:bf:22:8f:28:31:b2:6e:c4:9e:99:cc:3d:2e:2b:50:dc:db:
         5d:fe:6b:5f:59:57:12:22:40:16:ce:2a:02:9f:21:9d:38:74:
         22:8e:13:6e:e7:d9:03:89:b9:d6:a0:e9:e4:d2:14:92:0e:35:
         76:c4:c8:ed:09:b7:5f:1e:94:61:0b:8b:d3:99:45:f4:38:f4:
         88:0a:b5:95:15:90:8a:2b:36:a1:f9:a8:f3:40:f0:d6:8e:51:
         0e:fb:3a:de:3c:59:cc:29:11:44:2f:b7:29:5a:6c:00:85:ab:
         af:1c:7a:3f:9b:94:80:27:1d:e6:7f:7e:3e:12:98:f6:19:fb:
         a5:80:a1:8d:d0:e4:69:4c:70:e1:94:15:7e:17:ff:83:b2:ac:
         e2:5d:d5:a0:6a:55:8d:ff:9f:9b:1b:8a:fd:de:78:51:44:b0:
         88:fc:be:aa:ce:2a:5b:ce:26:97:ed:18:40:5d:86:40:25:45:
         de:8c:6e:85:b3:23:c3:da:da:9e:4b:d4:c2:d2:bf:20:fd:77:
         98:59:22:0f:f5:83:49:e6:25:5e:bc:59:a7:b1:18:91:95:55:
         52:f3:0f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:32 2025 by rpki-client