Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
File:                     323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa (raw, json)
Hash identifier:          6LU6aOUT+8kufePjzsn0a9LkVC/wvJk/XnMzRKpJOrE=
Subject key identifier:   06:BE:16:E2:C7:82:8C:99:0E:71:59:05:CA:D2:9F:AF:67:B8:F4:AA
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       52FEF44E5E14420BAFBFDCFB6BD1BE5BC0E8F7C5
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
Signing time:             Thu 06 Mar 2025 09:33:13 +0000
ROA not before:           Thu 06 Mar 2025 09:28:13 +0000
ROA not after:            Thu 05 Mar 2026 09:33:13 +0000
asID:                     266610
IP address blocks:        2804:3ea0:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fe:f4:4e:5e:14:42:0b:af:bf:dc:fb:6b:d1:be:5b:c0:e8:f7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Mar  6 09:28:13 2025 GMT
            Not After : Mar  5 09:33:13 2026 GMT
        Subject: CN=06BE16E2C7828C990E715905CAD29FAF67B8F4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:b4:dd:5f:d9:da:ec:d7:b0:be:24:c4:a2:
                    59:e9:4c:c2:da:f8:c8:3c:b3:f4:ed:c7:ef:ec:6e:
                    72:44:12:58:28:33:e8:b9:b3:77:39:24:ba:ec:ea:
                    87:c9:e2:b2:01:4f:b0:11:3e:35:24:7d:15:4a:ff:
                    ac:ea:30:7c:e8:33:fd:cd:be:5d:62:a1:f4:0b:1a:
                    86:18:5f:08:83:c1:bf:37:ef:ee:be:4d:4f:4b:bf:
                    24:49:1f:6c:ae:54:42:96:c6:79:5f:ad:fe:be:b6:
                    95:de:3f:fc:29:db:a6:a9:06:b2:d1:c6:1f:42:20:
                    7a:80:7b:15:03:49:ba:ec:12:b1:a1:80:b0:97:2d:
                    41:33:0a:74:51:ac:86:93:06:71:c2:3b:d7:2d:57:
                    45:3e:25:87:bf:e6:d2:8f:4f:5c:2c:47:1d:0d:15:
                    60:e6:78:04:32:16:8f:73:f1:64:3b:6e:92:f8:70:
                    e8:ae:1f:e6:17:76:3b:e4:5b:fc:07:e5:69:c6:ae:
                    fc:c0:91:28:88:08:ac:0b:08:bf:47:01:1b:79:56:
                    c1:d5:39:96:34:af:27:96:fe:a4:ff:f0:df:c3:cf:
                    5f:1f:79:d1:ae:f5:53:cd:88:ed:18:ae:19:02:f2:
                    34:58:03:20:a8:5e:73:02:f6:0f:4a:57:ac:42:ca:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BE:16:E2:C7:82:8C:99:0E:71:59:05:CA:D2:9F:AF:67:B8:F4:AA
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:57:05:b7:7e:12:79:d4:97:6f:bb:90:ba:50:e4:a6:4f:
         60:09:1d:a3:e2:ce:67:1d:bd:94:28:eb:fa:88:4a:b1:08:e9:
         3a:28:bc:bf:4d:78:d4:d1:62:d4:ff:f2:1f:0d:d9:f7:fa:22:
         3b:73:1f:d0:37:69:37:31:87:64:55:2f:aa:f7:b7:cc:d5:da:
         a0:f8:8b:11:fe:5f:e0:fd:09:8c:42:ae:66:bf:d6:72:53:0e:
         ae:85:53:60:85:dc:d7:d1:e9:18:73:c7:1d:4d:b3:61:70:e7:
         8d:1b:3c:11:d2:12:0a:c5:f4:a3:5a:ad:c7:8a:3a:ca:fc:bd:
         4d:b1:1e:33:1f:c9:ee:6a:03:71:ae:9c:c9:ca:ca:1e:f0:23:
         57:db:b8:15:a1:42:fd:f5:31:59:51:38:6d:05:0b:5b:55:da:
         6a:3f:37:f6:dd:cd:32:16:ca:19:fe:88:63:1a:58:60:00:3e:
         df:da:dc:74:62:94:d2:a5:62:e6:ee:4b:40:ff:ad:45:5d:4e:
         12:17:67:d0:90:7e:d4:d5:4c:b5:b5:cd:71:3d:44:2b:d2:48:
         de:6f:76:d5:57:ef:79:9a:92:ff:e4:88:67:a5:f3:0a:b0:d9:
         5e:b1:ad:63:e5:40:24:b7:29:bc:e4:87:08:53:27:f6:b4:bb:
         38:51:20:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:43:51 2025 by rpki-client