Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/323830343a333830383a3a2f33322d3430203d3e20323636343531.roa
File:                     323830343a333830383a3a2f33322d3430203d3e20323636343531.roa (raw, json)
Hash identifier:          /4gJCi7YLzcJ+tMwaRY143QAS8dkJ8E1igqD26GN2bg=
Subject key identifier:   0A:16:0D:24:CF:5B:61:E8:AF:90:0D:C6:C1:D8:E6:6C:B2:04:76:DB
Certificate issuer:       /CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
Certificate serial:       24DFE9C1C5C7A88F02A62A84D74590198F8AA817
Authority key identifier: 6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/323830343a333830383a3a2f33322d3430203d3e20323636343531.roa
Signing time:             Fri 07 Mar 2025 05:00:39 +0000
ROA not before:           Fri 07 Mar 2025 04:55:39 +0000
ROA not after:            Fri 06 Mar 2026 05:00:39 +0000
asID:                     266451
IP address blocks:        2804:3808::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl
                          rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:df:e9:c1:c5:c7:a8:8f:02:a6:2a:84:d7:45:90:19:8f:8a:a8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
        Validity
            Not Before: Mar  7 04:55:39 2025 GMT
            Not After : Mar  6 05:00:39 2026 GMT
        Subject: CN=0A160D24CF5B61E8AF900DC6C1D8E66CB20476DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:ab:3c:e4:6b:b6:09:3b:b0:2a:73:a9:ac:
                    6a:71:6e:f8:4a:8f:55:13:b7:d5:e6:53:01:67:8c:
                    84:8d:2e:1e:66:ec:e5:e2:e2:ca:50:e4:92:d0:59:
                    07:19:5f:da:01:ac:92:23:27:e7:b1:4e:17:4a:b0:
                    d8:51:fc:6d:fb:77:38:f6:93:d6:32:04:31:1d:cb:
                    77:33:7d:e3:5f:e5:26:bc:8a:b4:d2:0c:4b:94:a3:
                    22:b0:ba:04:c4:91:07:24:5e:c9:6b:db:3c:43:42:
                    04:3c:48:c9:7a:04:6f:6e:53:18:f3:fe:1f:d0:70:
                    dd:31:49:ed:45:b9:7c:57:6f:a8:3a:a3:98:ae:f5:
                    6f:ec:59:76:7e:50:76:02:37:5f:90:80:66:5f:b7:
                    f6:88:9e:2b:8e:18:92:eb:a7:de:35:88:9a:15:2b:
                    6f:05:a6:1f:5d:27:7a:f0:7c:68:d6:82:2b:b6:ec:
                    80:7a:fb:3f:da:51:c6:e8:f5:7a:97:93:14:d5:63:
                    a1:82:48:3b:2e:f2:e4:d6:aa:be:f0:26:57:f4:cc:
                    4c:d1:5e:9a:28:74:36:d6:65:25:78:42:26:72:75:
                    58:d6:ad:a3:36:2d:26:53:5e:29:d7:b1:42:de:00:
                    96:d0:dd:de:cb:c1:70:1f:f1:70:89:d2:ec:d6:ff:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:0D:24:CF:5B:61:E8:AF:90:0D:C6:C1:D8:E6:6C:B2:04:76:DB
            X509v3 Authority Key Identifier:
                keyid:6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/323830343a333830383a3a2f33322d3430203d3e20323636343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3808::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:55:e1:16:05:6a:eb:09:d3:37:d9:28:c7:e8:7b:76:0f:49:
         31:eb:0a:41:f1:e3:01:00:7b:22:e1:d4:1e:c5:63:a8:b9:82:
         fb:8e:4f:03:eb:20:7e:7a:b9:ba:08:ef:23:6e:23:a2:4b:95:
         bd:5e:69:e0:1d:8e:0f:51:0f:db:d7:bf:ac:22:48:d6:41:a3:
         63:bb:14:74:cc:e8:76:49:b8:8f:5a:e3:90:75:6b:d0:6c:7e:
         dd:d6:c6:9e:11:2a:1f:2a:b4:07:a1:a5:42:f0:d4:7a:d2:ef:
         39:8c:50:7b:73:87:f2:42:1a:58:88:ca:22:9a:df:5e:53:54:
         98:27:a4:6b:68:f8:c1:6c:fe:22:01:c3:75:58:59:ce:d6:44:
         57:88:2d:49:45:fc:eb:21:f7:05:37:96:7a:f6:25:80:a4:8c:
         99:aa:a1:e5:b0:11:a0:35:b6:8e:45:5a:ad:7f:dc:db:1d:4d:
         0c:a4:84:52:7d:a2:a7:ba:48:6f:12:05:37:94:a5:6a:3e:b1:
         c9:a5:94:80:05:9b:3b:f5:ad:75:b9:c9:07:2e:3e:a6:20:98:
         8b:00:ef:21:4a:0f:1c:c1:32:91:f7:6b:52:32:80:5c:38:45:
         b1:ee:ed:a9:44:06:19:62:1b:d2:75:6d:3e:1a:66:10:75:f0:
         b1:a5:18:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJN/pwcXHqI8CpiqE10WQGY+KqBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIzOTA2QUUyQzlFM0I5NjNCMjk0NjBBQkQ3MTg1RTc5
QkI5NjY0MDAeFw0yNTAzMDcwNDU1MzlaFw0yNjAzMDYwNTAwMzlaMDMxMTAvBgNV
BAMTKDBBMTYwRDI0Q0Y1QjYxRThBRjkwMERDNkMxRDhFNjZDQjIwNDc2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+Ks85Gu2CTuwKnOprGpxbvhK
j1UTt9XmUwFnjISNLh5m7OXi4spQ5JLQWQcZX9oBrJIjJ+exThdKsNhR/G37dzj2
k9YyBDEdy3czfeNf5Sa8irTSDEuUoyKwugTEkQckXslr2zxDQgQ8SMl6BG9uUxjz
/h/QcN0xSe1FuXxXb6g6o5iu9W/sWXZ+UHYCN1+QgGZft/aIniuOGJLrp941iJoV
K28Fph9dJ3rwfGjWgiu27IB6+z/aUcbo9XqXkxTVY6GCSDsu8uTWqr7wJlf0zEzR
XpoodDbWZSV4QiZydVjWraM2LSZTXinXsULeAJbQ3d7LwXAf8XCJ0uzW/3enAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUChYNJM9bYeivkA3GwdjmbLIEdtswHwYDVR0j
BBgwFoAUazkGriyeO5Y7KUYKvXGF55u5ZkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVg3VUQzWThyUkFHN2R6RzQ3Q2FIaVVTaE5nQmZLZjJFSDI0aVhMM3Yz
YmMvMS82QjM5MDZBRTJDOUUzQjk2M0IyOTQ2MEFCRDcxODVFNzlCQjk2NjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCMzkwNkFFMkM5RTNCOTYz
QjI5NDYwQUJENzE4NUU3OUJCOTY2NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYN1VEM1k4clJBRzdkekc0N0NhSGlVU2hOZ0JmS2YyRUgyNGlYTDN2M2JjLzEv
MzIzODMwMzQzYTMzMzgzMDM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4CDANBgkqhkiG9w0BAQsFAAOCAQEAclXhFgVq
6wnTN9kox+h7dg9JMesKQfHjAQB7IuHUHsVjqLmC+45PA+sgfnq5ugjvI24jokuV
vV5p4B2OD1EP29e/rCJI1kGjY7sUdMzodkm4j1rjkHVr0Gx+3dbGnhEqHyq0B6Gl
QvDUetLvOYxQe3OH8kIaWIjKIprfXlNUmCeka2j4wWz+IgHDdVhZztZEV4gtSUX8
6yH3BTeWevYlgKSMmaqh5bARoDW2jkVarX/c2x1NDKSEUn2ip7pIbxIFN5Slaj6x
yaWUgAWbO/WtdbnJBy4+piCYiwDvIUoPHMEykfdrUjKAXDhFse7tqUQGGWIb0nVt
PhpmEHXwsaUYcA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:41:58 2025 by rpki-client