Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          PJiIP007IVYPM7k26kUDGNiy85Ie+xFgEyEJ8WjkW5c=
Subject key identifier:   DB:E6:9E:0C:2E:02:43:D3:45:96:BF:0B:7B:B4:DD:39:51:A5:01:62
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       1EBF71F7D1938909D14FEB1FAF7EF779DDAFFF2A
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:34 +0000
ROA not before:           Thu 06 Mar 2025 00:55:34 +0000
ROA not after:            Thu 05 Mar 2026 01:00:34 +0000
asID:                     61637
IP address blocks:        2804:1c18:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bf:71:f7:d1:93:89:09:d1:4f:eb:1f:af:7e:f7:79:dd:af:ff:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:34 2025 GMT
            Not After : Mar  5 01:00:34 2026 GMT
        Subject: CN=DBE69E0C2E0243D34596BF0B7BB4DD3951A50162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:2c:7d:ea:74:e0:75:aa:6e:df:6c:65:9d:
                    3f:14:54:e6:1c:75:b4:60:8e:c6:07:05:be:5e:bf:
                    a0:ac:a4:f7:49:b9:8d:14:b6:d1:71:29:b2:98:27:
                    1c:f1:e8:ad:aa:fa:c6:b2:a4:08:53:69:94:e0:65:
                    c2:45:4e:04:5e:41:3c:ef:00:ed:11:92:db:5d:7b:
                    13:0f:86:bb:bf:76:4c:2a:20:7e:2a:4f:25:95:af:
                    5c:e7:47:ce:83:d1:fc:a0:08:8e:cc:11:8e:28:9a:
                    e9:fd:a7:2c:15:d4:a5:8b:4f:20:93:05:bf:93:aa:
                    5f:7a:01:87:92:bf:b2:d6:a8:65:e3:3d:16:4c:05:
                    e9:b3:7e:64:62:9b:e7:ac:ba:13:15:82:9d:14:2b:
                    3f:fe:d4:57:1a:7b:f6:4d:0e:cb:77:b0:d2:79:8f:
                    0a:9b:11:11:2a:c7:3f:16:f8:a4:08:57:b1:8a:85:
                    5c:53:e8:29:7d:ca:59:70:82:f5:cd:98:36:60:95:
                    b9:a8:af:52:23:ef:ba:23:94:88:2b:30:d1:be:e0:
                    41:69:07:eb:6e:c1:f8:95:b6:f6:3b:59:23:1b:2f:
                    b3:13:c6:70:0b:19:45:fa:84:6f:fe:ce:4d:b7:fd:
                    9c:31:f3:5e:32:39:06:f3:09:6b:e1:06:fc:ec:35:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:9E:0C:2E:02:43:D3:45:96:BF:0B:7B:B4:DD:39:51:A5:01:62
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a393030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:e7:ce:f8:1d:06:eb:97:7c:a3:bd:de:7e:68:97:00:48:04:
         65:37:8f:d4:68:8e:6d:c3:12:7b:af:da:87:f3:4a:32:62:a2:
         d4:f6:1b:77:65:0a:70:40:c9:d0:37:5a:0e:ca:52:29:7e:fe:
         0c:1b:92:2f:35:57:10:7c:af:e8:b1:f4:9d:84:fb:e5:a5:73:
         4f:a1:75:71:c8:71:40:e7:1b:8e:76:64:3f:cc:b2:db:83:9d:
         4e:e6:12:a3:04:58:8c:d0:35:4c:5d:6b:45:50:db:36:0a:4a:
         a7:6e:4f:de:f5:1c:81:10:e9:0a:3b:28:0f:e2:6d:7e:e9:4c:
         aa:21:52:b0:e7:9c:e0:55:57:81:8b:3e:7e:c8:0d:8f:60:bb:
         4e:80:6a:91:7c:4c:f6:9a:a7:b5:05:35:45:70:a9:bc:18:28:
         b8:85:1a:14:57:1a:6c:30:03:65:d0:a0:f2:3c:1a:77:7d:de:
         8b:39:4e:7a:c5:fa:63:2f:a4:87:4d:aa:76:8f:ce:ad:c9:4b:
         80:f2:68:19:b2:a5:4c:9c:8e:58:b0:3f:17:d8:eb:78:b3:c5:
         eb:7b:e2:83:23:d9:12:06:54:40:b1:34:94:d5:71:70:58:8e:
         92:70:33:9b:e2:ee:cb:b1:c3:04:c5:fd:48:7c:3f:ef:c5:c0:
         48:04:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:43 2025 by rpki-client