Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          Pe/ArmEzFch5RPD7q/KahpVr4AX/pdy80h5WcoIWOcg=
Subject key identifier:   D7:F7:7A:96:70:A4:F5:99:B2:A6:32:A0:FA:F2:46:ED:AF:2F:16:D1
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3F6B2494A99F2E14F09B5519A7B564B4B0BD6328
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 06 Mar 2025 02:42:04 +0000
ROA not before:           Thu 06 Mar 2025 02:37:04 +0000
ROA not after:            Thu 05 Mar 2026 02:42:04 +0000
asID:                     61832
IP address blocks:        2804:854:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6b:24:94:a9:9f:2e:14:f0:9b:55:19:a7:b5:64:b4:b0:bd:63:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:04 2025 GMT
            Not After : Mar  5 02:42:04 2026 GMT
        Subject: CN=D7F77A9670A4F599B2A632A0FAF246EDAF2F16D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:0a:b5:90:eb:e1:6f:03:89:b0:fe:cd:71:
                    1b:7e:09:84:1b:a6:ad:a7:dd:ba:f7:21:c8:52:b2:
                    1b:51:cb:3d:0d:a5:6a:5f:dc:7d:86:d8:d3:2f:ce:
                    0a:b5:7d:ab:62:76:b4:98:1d:35:70:7a:88:90:b8:
                    47:a7:b4:a8:b0:12:fa:b7:ce:63:51:98:1b:89:2e:
                    88:db:11:20:5c:44:04:80:25:b2:84:4a:2d:f4:1d:
                    f5:1c:4f:b4:94:1c:dd:32:4f:f1:a5:35:5d:ca:82:
                    6d:3b:d1:dd:2d:34:1f:64:ff:c4:6b:ed:1c:12:ca:
                    af:b8:fe:d3:3d:b9:eb:90:59:34:c3:3f:17:6b:0e:
                    ef:a4:50:5c:ad:fb:94:49:6c:3b:4e:59:3c:3e:82:
                    20:86:1a:4b:24:9f:12:3d:e1:63:05:43:46:46:ed:
                    bb:95:ac:ca:ff:2c:52:5c:7d:8e:2d:7d:29:ef:70:
                    2c:cc:40:35:83:5d:32:42:c8:a7:96:9a:41:ac:03:
                    0e:73:e5:b7:0c:cc:7d:1f:9f:50:42:e2:f8:59:5f:
                    5c:bf:54:4b:17:c2:ad:b3:a1:0a:fb:f1:13:99:ab:
                    55:cb:9a:c4:ec:e1:63:12:83:dc:83:2b:d5:03:cd:
                    dc:c2:13:f0:9e:87:1e:48:4d:23:ea:78:f4:ad:0e:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:7A:96:70:A4:F5:99:B2:A6:32:A0:FA:F2:46:ED:AF:2F:16:D1
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a3835343a613a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:854:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:aa:9f:4f:f2:e1:71:42:2f:34:76:4a:8c:9d:ea:6d:42:
         9d:5b:84:8c:52:d6:f3:f5:0f:be:a5:da:87:6d:10:eb:de:b7:
         9c:51:ca:79:a6:a8:2c:a1:d5:f5:03:eb:38:36:ef:d1:f1:32:
         a8:74:31:86:d8:87:97:28:f5:58:13:b9:9a:84:a4:3c:7d:bd:
         1a:cb:9f:72:fd:fe:63:f8:b1:73:03:b3:f7:8e:9a:17:f2:01:
         e0:47:91:94:ab:b4:dc:b3:72:97:ed:5c:6f:91:62:c7:4a:55:
         e2:52:f2:3a:2d:96:42:9f:45:7e:cc:8f:22:3e:6e:95:8a:48:
         7d:5a:86:6c:da:d6:36:18:dd:c2:36:e9:b1:49:c5:88:d0:69:
         be:4f:3f:09:0f:b4:b6:29:b1:45:5f:3f:e3:7a:16:21:9c:ef:
         56:66:71:74:13:2c:84:92:4b:c2:8c:2d:c8:dc:4c:84:d3:f1:
         f0:f6:b3:5b:b3:c2:00:b3:62:07:b2:fc:10:3d:9c:85:c9:56:
         5e:e0:c5:11:91:f0:eb:b0:7d:b0:c3:cb:26:d5:db:9f:fc:e5:
         98:6f:2d:0d:c9:86:23:1e:0d:f4:d6:0a:c3:a6:c6:c3:89:98:
         8a:b1:b9:1f:7e:91:e7:df:ed:47:40:32:fe:c3:7b:28:fe:e6:
         b4:7d:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:07:28 2025 by rpki-client