Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          +ahm1AhZsQ5wLgNTFwwjAQZwjydRVRxdowIzJLwOyrs=
Subject key identifier:   4F:FD:7F:DD:FB:D8:FB:26:F5:A5:94:CC:9F:1E:74:DC:07:4B:50:09
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       3B3C15FE312D36F28FACC61BBA3FF5FDB7F5D688
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:53 +0000
ROA not before:           Thu 06 Mar 2025 09:26:53 +0000
ROA not after:            Thu 05 Mar 2026 09:31:53 +0000
asID:                     268296
IP address blocks:        2804:4efc:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3c:15:fe:31:2d:36:f2:8f:ac:c6:1b:ba:3f:f5:fd:b7:f5:d6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:53 2025 GMT
            Not After : Mar  5 09:31:53 2026 GMT
        Subject: CN=4FFD7FDDFBD8FB26F5A594CC9F1E74DC074B5009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:c7:05:82:b4:15:82:dd:80:96:be:7e:ab:
                    40:0a:ea:19:a8:56:fa:c1:27:d0:61:95:9d:91:c0:
                    88:96:bb:3e:ff:25:d3:4c:d0:cc:eb:ed:3f:4d:69:
                    05:cf:20:1f:e5:b9:90:5f:75:c0:fd:65:dc:cc:96:
                    5e:1b:09:94:9b:8d:38:b4:b6:21:9e:60:82:fb:2a:
                    d3:7f:48:4c:d8:d2:29:92:9d:ef:ac:0c:f5:bc:cd:
                    4e:b5:62:d6:17:b0:9d:e9:ff:10:45:f1:7d:11:1a:
                    0e:bb:c6:9d:fd:8c:b5:65:bb:92:bb:7c:5c:d7:70:
                    d1:ce:5b:1f:39:d6:f0:f1:e8:8e:9d:c3:ad:7c:cf:
                    00:e4:72:69:d2:66:3c:b2:e9:97:51:0e:a8:9f:c3:
                    9c:15:fa:6e:ae:20:7c:14:ba:1a:f6:55:77:a7:2a:
                    ca:a5:9d:da:4b:2a:2a:e2:3d:03:49:c0:fe:c2:0d:
                    67:fc:eb:9d:32:22:a9:91:77:4e:33:ce:7d:80:c5:
                    cd:62:80:07:e3:ec:17:d3:6c:22:69:51:5e:46:be:
                    db:45:da:c3:97:01:4f:d6:46:b6:9b:35:30:37:91:
                    62:30:20:d1:8b:eb:88:aa:29:2e:22:3b:c8:75:ef:
                    91:55:05:98:e3:9c:e4:2d:62:50:4d:42:42:6d:52:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:7F:DD:FB:D8:FB:26:F5:A5:94:CC:9F:1E:74:DC:07:4B:50:09
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:1e:19:3e:d9:74:1d:05:a4:a4:15:04:a2:65:ce:32:d0:
         b9:c5:fa:85:f5:69:48:7f:7e:c7:2f:16:5a:f8:ba:7e:be:3b:
         a2:c5:fc:e0:79:e8:ec:8a:d9:39:f2:e4:dd:e4:c6:09:2a:58:
         15:c3:58:af:f0:98:7e:97:cb:f1:ce:f0:08:bf:1c:07:b0:8f:
         47:a9:8d:d2:76:b2:29:28:f8:88:71:a1:d0:54:59:80:8c:1f:
         0a:9d:2d:a3:29:f7:33:d0:ab:54:44:a8:da:e1:c2:53:a6:45:
         5e:07:8b:5a:f6:e8:3a:fc:6b:00:1d:14:dd:8f:35:8c:93:e7:
         22:87:70:fb:5b:13:4b:4e:5a:99:4f:a1:2a:c2:cf:98:1e:5c:
         72:3a:5e:d9:23:48:c8:aa:c3:d9:8a:75:d0:5c:32:b9:e5:08:
         2f:b2:df:0e:4b:e6:b7:07:59:48:d0:9b:4f:f3:02:77:36:97:
         7d:0c:86:c3:c0:36:75:33:47:26:5b:70:f8:68:f8:05:f6:d6:
         f6:01:10:54:8a:6e:79:69:87:f7:6a:ff:9b:50:dc:8e:bd:d0:
         17:ca:26:79:6b:42:6a:ae:df:33:fb:dd:25:b5:6d:c0:0f:74:
         ff:45:36:cc:04:eb:89:8e:6c:d7:4d:cd:20:43:b3:58:ed:75:
         54:68:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:28:12 2025 by rpki-client