Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          CZ8m44hPYBho045P+jQxUaXlFIy+fpm3HB6PB98+pO0=
Subject key identifier:   CE:3B:18:D2:1B:A4:0A:32:D9:65:0D:B5:6D:BA:1D:03:4C:23:FD:9A
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       72FD3581665531FED6BF79571C566B86685AAAC7
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:54 +0000
ROA not before:           Thu 06 Mar 2025 09:26:54 +0000
ROA not after:            Thu 05 Mar 2026 09:31:54 +0000
asID:                     268296
IP address blocks:        2804:4efc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:35:81:66:55:31:fe:d6:bf:79:57:1c:56:6b:86:68:5a:aa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:54 2025 GMT
            Not After : Mar  5 09:31:54 2026 GMT
        Subject: CN=CE3B18D21BA40A32D9650DB56DBA1D034C23FD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:21:98:d3:e3:9b:ab:1f:b6:dc:79:fe:5c:
                    63:f0:0b:10:60:8f:a8:fe:e9:b8:d0:ee:eb:2b:ab:
                    47:2f:8e:aa:b7:23:56:f4:1c:a9:f7:d6:7b:cc:7a:
                    82:1d:69:5f:b6:c3:82:50:e5:fe:a5:38:43:68:59:
                    dc:7d:90:0b:f6:a9:7a:c4:3f:6f:db:22:cf:f3:ce:
                    96:97:93:8e:31:77:74:0e:ed:0a:e9:6e:0b:6f:8e:
                    f3:85:90:ef:c7:f2:4f:28:5a:31:10:5c:84:64:34:
                    90:d4:34:93:4e:10:1d:7e:e7:0a:23:1e:b9:18:fe:
                    c5:61:18:03:b0:09:5d:d4:3d:f8:8a:31:bb:ef:ea:
                    f9:cf:dc:ab:68:59:a4:3f:a1:4f:45:d1:ed:ef:d3:
                    19:f2:08:b4:2a:11:87:14:01:57:14:51:12:24:87:
                    ab:b2:bc:47:45:49:fd:8c:db:42:a2:76:eb:3b:1c:
                    15:47:86:12:d6:59:74:22:f2:cf:a4:08:8e:02:49:
                    86:4f:ec:5b:8d:0c:d7:e6:af:99:44:7a:ec:e1:f2:
                    1a:83:d4:5d:83:2f:30:37:ce:b6:9d:78:ab:ac:8a:
                    76:41:64:ec:86:21:7b:99:1a:3e:4b:0e:66:f2:de:
                    c5:46:8f:c6:68:90:02:69:0a:20:99:41:98:13:bd:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:18:D2:1B:A4:0A:32:D9:65:0D:B5:6D:BA:1D:03:4C:23:FD:9A
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c0:5b:e3:8f:25:a0:c2:3e:f5:e7:d3:b9:cb:01:cb:e5:1f:4e:
         b4:3b:ff:22:f5:de:ba:e6:5b:b5:f1:5d:47:eb:ad:d2:23:9e:
         2b:cc:75:d4:1f:85:bc:bf:54:dc:92:ce:aa:6c:25:b4:8e:c7:
         07:18:4f:cc:16:18:10:4c:fa:0a:d5:ff:f0:50:c8:60:16:08:
         a4:b6:6c:54:64:13:7f:39:0c:2c:b0:04:c3:a3:9f:83:e0:c6:
         eb:bf:25:d9:0b:c0:77:5b:31:e1:44:5d:dd:b1:61:8b:fd:07:
         f5:02:32:cf:cd:c9:6c:fd:18:b5:37:79:52:5b:ca:e1:05:28:
         88:8f:20:17:f3:03:54:46:5b:d4:1e:f9:2a:0b:7e:23:21:ec:
         05:ab:05:e2:78:7c:5d:d9:1e:cf:e2:17:0c:49:fc:79:0a:e5:
         ff:38:76:44:9c:e9:19:1c:aa:96:e0:81:1a:42:61:28:ee:1c:
         e4:b5:4a:9b:86:83:02:d5:b4:65:7f:67:eb:05:29:4c:9f:5d:
         fc:67:ce:ee:80:c3:1c:6c:43:1a:e4:9c:9b:d0:55:14:6b:10:
         3a:5b:fd:1e:2c:e9:77:3d:0c:44:a0:c9:36:95:91:4f:33:ab:
         5b:71:54:52:d8:e0:09:92:bf:7b:be:32:6d:74:7d:35:e4:ae:
         61:e6:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:55:30 2025 by rpki-client