Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          rVFle8eNCGz6K5kxKH6tiSdll0s8bzTJnBMxJnJafWg=
Subject key identifier:   A1:1B:65:FA:8B:F0:65:02:D3:CF:E6:66:4B:1C:16:47:E5:8E:91:15
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       17C653AE471C79190EEFB24AFA4450CC7D559F37
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        2804:4efc:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c6:53:ae:47:1c:79:19:0e:ef:b2:4a:fa:44:50:cc:7d:55:9f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=A11B65FA8BF06502D3CFE6664B1C1647E58E9115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:cb:df:d9:e1:fd:89:5f:fe:d3:e1:61:d3:
                    ed:74:d9:49:9a:01:85:47:c2:70:a0:da:c5:9e:69:
                    4a:27:86:0b:75:9b:ef:bf:ee:b4:e5:6c:c6:ee:e2:
                    dd:e4:11:8a:b8:59:c9:58:23:48:e0:60:07:15:cc:
                    b6:ed:88:d7:05:84:11:d1:38:59:1a:08:09:4a:01:
                    6d:92:9a:01:02:6e:61:84:5b:4e:78:62:80:9a:fb:
                    a2:ff:6a:b1:a0:55:9d:bb:62:17:1c:b9:43:0e:c5:
                    d4:86:11:08:78:32:fd:9a:3e:8d:00:69:9f:6d:87:
                    c1:49:e5:44:a6:ac:3e:4b:da:37:cb:94:f0:99:99:
                    69:3e:34:83:f8:88:49:a7:1d:f1:b7:b2:ec:e2:e1:
                    ff:aa:95:68:27:f0:88:88:c0:47:25:22:6e:a3:ef:
                    52:bf:95:41:84:d0:5f:64:3b:61:bb:ee:7e:c5:f6:
                    30:63:8e:b0:52:8e:4a:76:9f:6e:db:70:f5:73:30:
                    d6:1d:33:dd:0f:84:88:df:c4:09:6a:8d:9e:38:b7:
                    f6:17:57:5f:b1:0a:84:53:45:68:d7:6a:9b:47:e7:
                    be:4f:cb:8f:cf:5d:c7:9f:39:bf:12:b9:9d:25:98:
                    1b:68:aa:da:90:ff:b1:6a:6a:d1:b3:40:97:17:18:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:65:FA:8B:F0:65:02:D3:CF:E6:66:4B:1C:16:47:E5:8E:91:15
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:b4:af:f5:99:52:b9:56:0d:99:da:0b:36:7c:c7:08:06:
         23:e2:a6:c8:d7:a4:96:e7:23:20:ce:dd:50:23:57:3f:84:9d:
         f8:8a:20:df:b9:e2:19:39:bd:ca:af:af:29:41:26:0c:92:6d:
         4d:4e:3c:62:e3:8f:ae:73:13:dd:ef:56:33:81:80:50:b4:71:
         a4:c5:74:f8:dc:e6:85:31:60:bc:d0:d6:b8:e3:b6:40:5d:ed:
         97:d1:54:dc:dc:90:bd:43:d3:3c:e9:94:d3:b4:32:6e:86:b7:
         32:c4:65:51:0c:de:8a:6d:ad:a9:ee:3a:3f:86:78:e6:82:a7:
         26:d6:93:a2:09:67:b3:6c:ae:4a:65:0f:60:66:2b:b1:00:fd:
         e7:7b:30:3d:3a:1d:3b:aa:9f:ec:e4:17:da:ef:db:a8:e0:4d:
         4d:98:18:21:d1:7e:08:9e:32:cc:aa:84:b1:92:dc:98:ce:42:
         40:62:d6:66:57:72:12:34:81:8b:05:0e:68:d4:07:65:33:c4:
         63:dc:88:9b:35:06:fa:8d:ae:26:ca:7a:4d:1c:b2:55:a4:04:
         34:99:26:2b:7e:78:a9:b5:c3:5b:29:20:11:f4:83:c4:e6:74:
         b3:1b:dc:a1:5c:c6:94:e1:17:64:55:33:6c:3a:24:a4:bf:74:
         b2:3b:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:02 2025 by rpki-client