Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          tyqDgv9+SNOIV1DFQ4Pz43XtPUKjZyjmMH/W8zKOarY=
Subject key identifier:   0C:54:54:35:37:1F:E6:BC:0A:CF:8B:AF:01:FC:FE:35:AB:C7:BD:C1
Certificate issuer:       /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial:       01E9FE52817354BC4A8F0A91E8F1944437CFDC27
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Thu 06 Mar 2025 09:31:55 +0000
ROA not before:           Thu 06 Mar 2025 09:26:55 +0000
ROA not after:            Thu 05 Mar 2026 09:31:55 +0000
asID:                     268296
IP address blocks:        2804:4efc:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:fe:52:81:73:54:bc:4a:8f:0a:91:e8:f1:94:44:37:cf:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
        Validity
            Not Before: Mar  6 09:26:55 2025 GMT
            Not After : Mar  5 09:31:55 2026 GMT
        Subject: CN=0C545435371FE6BC0ACF8BAF01FCFE35ABC7BDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:bc:75:92:a2:e4:fa:58:85:75:a3:31:34:
                    e5:6e:69:cc:4c:41:bd:99:5c:5c:5a:65:c7:7c:d6:
                    21:03:be:8e:af:d2:31:6a:61:43:66:a0:65:af:9f:
                    59:f0:3f:a7:42:89:de:34:24:cd:fe:d0:2c:33:2e:
                    1e:cc:60:5e:c8:11:c9:64:7b:d8:2d:61:3b:97:f9:
                    00:4a:f1:3e:20:23:bf:9a:e7:34:6b:0b:77:51:96:
                    72:d0:c3:d9:2d:c1:52:8a:87:08:37:57:aa:d7:c6:
                    23:78:7c:52:38:99:4c:96:a7:81:1b:c8:8e:83:56:
                    60:bc:98:f8:00:8b:55:9a:f1:9f:aa:04:38:d5:cc:
                    36:04:81:b5:e6:c2:e7:b1:eb:84:73:7c:f4:af:b1:
                    1d:da:2b:7b:08:2d:90:df:08:f9:94:5a:dc:f2:8c:
                    ac:7d:62:ef:82:b4:00:d2:67:44:aa:c8:ef:63:74:
                    84:53:db:36:bd:9c:dc:4b:d1:d7:93:80:a2:2d:25:
                    97:08:7d:fa:6f:bc:04:f9:90:3f:42:8b:2d:99:35:
                    ee:28:0b:42:1e:9f:47:d2:5a:d8:99:b0:6a:e7:77:
                    d9:f9:fb:16:12:07:06:8c:f4:35:9d:61:02:fa:c8:
                    55:ae:0f:b0:4a:f2:b9:86:36:82:bc:97:02:63:c6:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:54:54:35:37:1F:E6:BC:0A:CF:8B:AF:01:FC:FE:35:AB:C7:BD:C1
            X509v3 Authority Key Identifier:
                keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a663030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:15:84:ca:df:a9:a2:9b:a4:2f:80:cf:4e:19:db:6f:e3:04:
         8f:d0:16:4a:70:5a:74:0f:ef:d8:30:76:28:26:d3:f9:35:e3:
         0b:c7:8b:2a:a3:13:7c:ff:0d:ae:79:c0:8f:e9:b8:65:8b:b7:
         86:de:e2:ba:3c:45:ce:87:e7:b4:38:be:a6:10:15:49:b4:24:
         60:68:be:15:0b:a1:31:a7:f2:f5:b3:db:e2:87:56:8c:52:93:
         af:32:c3:5c:d2:98:81:06:05:ff:8c:41:82:1a:bc:1b:33:0a:
         fb:8c:1f:d9:88:cd:ec:5f:7e:1b:53:f4:f0:72:ef:8f:09:a4:
         85:fb:e8:39:34:cd:81:f3:04:bf:7f:29:62:3f:42:5d:54:80:
         be:aa:8c:8b:74:b9:0c:89:8b:18:50:44:27:1b:97:ef:3f:24:
         90:d6:bc:ae:34:24:e9:ec:37:5a:00:37:a9:5e:e4:4f:88:2e:
         37:b1:20:f8:83:b6:46:33:f9:5a:53:8d:8e:1c:3d:8d:e3:fa:
         84:b5:fc:bb:ef:63:38:e2:b7:d0:54:3c:26:43:a9:33:37:60:
         f8:2e:6c:48:65:b1:af:8c:7c:3f:96:1a:e9:96:80:28:b5:26:
         23:7a:fc:c9:e3:97:4e:a8:cb:41:23:db:74:6b:da:11:e9:fe:
         de:49:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:01 2025 by rpki-client