Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/323830343a323530343a3a2f33322d3332203d3e203532373038.roa
File:                     323830343a323530343a3a2f33322d3332203d3e203532373038.roa (raw, json)
Hash identifier:          bdoIk1Ag9RA6dAVTEOU+HWP/8MI8aK3J9BHrjAzueqg=
Subject key identifier:   48:D8:E8:3E:31:48:03:EF:FF:33:36:46:FF:36:7A:16:56:E2:F2:EC
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       28BC37FC26E1777B0CABBD2D84EF7B15A7817DF9
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/323830343a323530343a3a2f33322d3332203d3e203532373038.roa
Signing time:             Wed 05 Mar 2025 19:00:28 +0000
ROA not before:           Wed 05 Mar 2025 18:55:28 +0000
ROA not after:            Wed 04 Mar 2026 19:00:28 +0000
asID:                     52708
IP address blocks:        2804:2504::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bc:37:fc:26:e1:77:7b:0c:ab:bd:2d:84:ef:7b:15:a7:81:7d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Mar  5 18:55:28 2025 GMT
            Not After : Mar  4 19:00:28 2026 GMT
        Subject: CN=48D8E83E314803EFFF333646FF367A1656E2F2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:13:5f:6c:b4:f3:a1:67:9c:b5:28:9c:5e:
                    7a:f1:3e:ad:dd:84:33:fa:ed:3e:0b:88:01:0c:8f:
                    27:fa:e2:0d:6b:89:d3:88:57:14:b7:70:0c:84:af:
                    90:82:dc:4e:9c:1a:a4:a2:fc:e7:d2:b4:6d:24:bd:
                    30:83:1e:a1:a3:79:ae:dd:bd:fd:74:b2:1c:b9:2e:
                    b6:0d:ea:6b:8c:87:bf:04:3f:93:70:9a:6e:64:53:
                    1c:d1:c3:6d:20:fb:d6:3b:4a:0d:c6:72:2a:eb:4a:
                    42:e2:f5:d8:c7:dd:ec:7f:2b:27:10:1e:77:57:01:
                    19:a6:e0:a2:c4:73:0e:a2:42:de:84:4d:89:cf:7f:
                    6d:c9:5b:c7:17:f5:38:70:8f:65:89:b4:74:5c:1c:
                    44:91:99:89:12:70:79:17:d7:47:87:5e:23:62:14:
                    06:6e:d5:c2:a8:b2:ca:80:ef:28:d4:7e:96:d2:30:
                    4c:cb:a9:d1:00:54:e2:35:75:e3:60:80:5e:21:1c:
                    a9:92:b0:ca:ed:80:3d:f3:84:fe:76:42:f7:ae:9f:
                    8e:03:fc:47:49:16:85:84:f2:ca:d5:9b:0e:0b:16:
                    cd:11:e4:9b:3b:82:a4:34:12:de:98:1e:8a:47:b6:
                    41:ce:9b:2a:b9:65:59:34:a7:86:43:7b:96:cb:89:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:E8:3E:31:48:03:EF:FF:33:36:46:FF:36:7A:16:56:E2:F2:EC
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/323830343a323530343a3a2f33322d3332203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2504::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:be:07:6c:99:c5:06:bf:3d:9e:54:30:b0:85:e0:0a:a6:
         af:ca:4a:13:18:07:91:d0:76:65:66:13:51:a0:c9:41:b1:48:
         32:31:6d:5b:48:81:0c:03:18:a9:c3:5f:a8:57:20:a2:f9:bc:
         af:18:b6:e2:e3:5c:c4:23:e5:c8:75:50:51:56:4c:f2:7a:61:
         d3:a2:8e:fc:dd:ac:ca:9f:02:64:c7:45:cd:5e:8c:24:e9:51:
         a1:f7:bb:19:78:f0:2c:1a:f8:77:76:84:5b:52:31:57:c0:b4:
         6c:c1:2d:81:67:3b:a7:b5:05:53:3b:5a:06:0b:ac:c2:03:d8:
         65:fb:b6:5b:18:d0:01:d8:e6:4f:ad:a6:e8:64:a9:b4:da:0a:
         25:c8:40:ac:3c:4b:9a:4b:50:5d:1c:da:c0:cf:b7:bc:54:09:
         dd:98:39:dc:8a:9a:dd:de:a2:a2:60:ed:d8:0f:c8:54:e7:64:
         eb:09:33:88:3d:e1:5d:f8:5e:97:ba:61:2b:05:93:86:ca:10:
         67:ed:fc:46:65:e0:ca:36:59:d9:d4:7e:8f:5b:cd:74:b7:d7:
         0c:5e:b1:ab:de:d8:b0:9c:cb:03:c0:4e:e8:33:69:7b:70:e3:
         eb:40:2d:5d:32:eb:b0:f3:f5:53:c9:06:cd:b9:b9:47:fb:f9:
         e2:c5:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:32:53 2025 by rpki-client