Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3332203d3e20323636303836.roa (raw, json)
Hash identifier:          B1CnRRdtfb9i26ytfL1TioEg9Dk6Xk6LV+RQ2uCo3IQ=
Subject key identifier:   C6:0D:86:85:14:15:18:33:49:99:FA:2F:FC:B5:5B:6B:CA:61:56:35
Certificate issuer:       /CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
Certificate serial:       1A5C527387EA524CC6163A551C5AA0ADC419F47F
Authority key identifier: 6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa
Signing time:             Thu 22 May 2025 16:42:31 +0000
ROA not before:           Thu 22 May 2025 16:37:31 +0000
ROA not after:            Thu 21 May 2026 16:42:31 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5c:52:73:87:ea:52:4c:c6:16:3a:55:1c:5a:a0:ad:c4:19:f4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C759FC4A53C7DCD3908CD3F8D776071464C6842
        Validity
            Not Before: May 22 16:37:31 2025 GMT
            Not After : May 21 16:42:31 2026 GMT
        Subject: CN=C60D8685141518334999FA2FFCB55B6BCA615635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:bf:d1:b4:fe:14:f9:9a:36:2b:8c:94:c0:
                    e9:ba:eb:d7:07:3c:4f:3c:7c:b0:7a:56:f6:d8:e4:
                    00:34:b7:9d:6e:01:62:cf:80:34:c4:19:c6:3b:1b:
                    43:97:7d:6e:31:99:68:4a:3a:89:b5:cb:a7:8a:40:
                    b7:07:a1:ce:0d:4a:39:55:d3:c4:cf:c4:ae:e7:91:
                    c5:08:ae:72:49:29:6c:2f:1a:6b:c2:74:4d:22:56:
                    2e:72:54:cc:c9:a2:cc:30:69:df:ff:95:c4:2e:e9:
                    f2:6f:d0:61:f1:1b:96:22:9f:c4:c4:d9:b9:95:20:
                    92:b6:88:c9:90:1c:da:74:61:06:55:85:75:ad:b7:
                    4b:c5:58:02:b2:bf:d6:48:a2:01:24:af:31:3c:66:
                    3e:d0:cd:63:51:29:0f:87:45:6e:c9:95:40:6b:a7:
                    20:60:ca:2b:2f:0c:93:1b:75:bc:25:dc:be:30:0f:
                    58:ba:48:d1:d0:ea:40:af:e0:14:80:fa:55:2f:f8:
                    91:b6:b7:75:34:f3:c6:3f:68:fb:52:13:8f:2f:de:
                    47:3d:ca:f0:31:5f:a0:3f:88:ef:ef:97:55:60:92:
                    7d:b8:9e:3b:c1:d0:94:13:c1:40:9a:33:e4:85:d6:
                    69:8a:36:a1:e0:07:35:2e:e0:07:73:67:b2:fe:cf:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:86:85:14:15:18:33:49:99:FA:2F:FC:B5:5B:6B:CA:61:56:35
            X509v3 Authority Key Identifier:
                keyid:6C:75:9F:C4:A5:3C:7D:CD:39:08:CD:3F:8D:77:60:71:46:4C:68:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/6C759FC4A53C7DCD3908CD3F8D776071464C6842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C759FC4A53C7DCD3908CD3F8D776071464C6842.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3332203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:31:d9:3a:9f:37:2c:a5:3a:15:d4:4d:78:36:59:30:1c:
         98:d1:a5:4e:3f:5d:39:7b:7b:df:11:35:8a:62:e6:6a:c9:49:
         16:26:ad:bb:4b:bd:15:b4:19:09:52:2c:a4:c8:2f:ec:19:a2:
         47:96:50:26:7c:55:a5:93:70:3d:aa:cd:3d:db:f5:2a:bf:8a:
         95:3c:16:bf:3a:df:16:d1:4e:32:89:86:a4:ad:04:2c:04:49:
         a3:eb:5e:2d:f3:5f:e6:31:b8:ea:4a:9f:5b:54:4d:b1:e0:fe:
         82:88:ad:8e:a8:04:10:7a:af:29:27:3b:38:20:4e:76:3b:39:
         94:5f:d1:b1:ff:fa:56:6a:00:6a:51:ed:4d:0d:e4:f7:74:57:
         9d:64:72:e5:43:93:19:9e:2b:28:a9:c1:21:3a:c7:4c:cc:66:
         c0:85:1d:8d:5f:bb:3e:e7:3c:b4:87:10:39:fb:e1:ee:10:33:
         b7:e1:63:61:82:c0:76:b4:25:db:20:56:57:84:1e:4a:38:18:
         bd:30:0d:c8:de:de:a0:0c:44:7a:d1:5d:89:80:75:fc:81:98:
         0b:d1:d2:2e:bf:36:06:d0:1d:fa:40:1d:6a:56:f1:f5:20:dc:
         4c:0a:3c:d2:14:94:f6:53:03:58:b4:c6:a4:e3:7e:d3:12:36:
         11:36:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:26 2025 by rpki-client