Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a313a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a313a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          qEkvzGAOgrIsZD0zHDxLaj1q4tlWBpp/R7DryVLo9Fo=
Subject key identifier:   17:57:78:D6:43:C6:9C:EA:6B:E2:6A:D5:4D:04:44:63:A4:3E:F8:BD
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       1D698E401B6167B7D0EF91C309F2C661AE9D4591
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a313a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:25 +0000
ROA not before:           Wed 05 Mar 2025 20:51:25 +0000
ROA not after:            Wed 04 Mar 2026 20:56:25 +0000
asID:                     264344
IP address blocks:        2804:2674:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:8e:40:1b:61:67:b7:d0:ef:91:c3:09:f2:c6:61:ae:9d:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:25 2025 GMT
            Not After : Mar  4 20:56:25 2026 GMT
        Subject: CN=175778D643C69CEA6BE26AD54D044463A43EF8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:95:2f:73:d8:46:95:a0:87:e3:f7:45:ce:
                    55:f6:95:17:7e:48:67:78:51:81:f9:36:db:d2:59:
                    a5:b1:c2:96:fd:f6:84:02:93:34:57:69:67:37:82:
                    53:08:75:7a:99:82:bf:94:5a:b8:db:f8:54:7a:3f:
                    85:18:9d:6c:0d:e3:d4:71:56:99:4a:61:f3:87:eb:
                    82:a0:10:dd:ce:20:b8:55:5f:3b:f2:f2:39:fb:b9:
                    b8:9a:8d:5e:44:3e:ad:87:ee:56:03:f1:26:0a:94:
                    52:dc:94:09:a5:97:e1:f3:99:79:fe:a5:44:4b:41:
                    0f:6f:13:b0:f1:c5:14:8d:4a:23:0d:e4:9e:ea:77:
                    d9:2f:9b:38:df:60:d3:06:1c:03:3a:e1:e9:26:51:
                    6f:f2:e5:86:59:89:9e:a5:5c:df:60:27:67:07:02:
                    6b:e5:65:d7:86:e5:c3:09:00:32:ac:17:6e:7a:e8:
                    4a:99:f6:5e:e3:ca:43:98:e1:a8:75:ed:fe:0f:a3:
                    24:51:fb:9f:64:1c:2f:8f:f2:15:97:12:b2:5d:54:
                    e5:b5:e1:eb:84:8c:48:63:c0:c3:f7:87:ce:19:c3:
                    03:c3:77:34:c5:a2:67:21:1d:0d:12:0e:03:b0:c1:
                    61:cf:3d:98:41:8d:9d:3a:25:5f:fe:a0:eb:f2:8f:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:78:D6:43:C6:9C:EA:6B:E2:6A:D5:4D:04:44:63:A4:3E:F8:BD
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a313a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:96:f2:60:06:06:a7:90:6b:15:8c:05:91:ec:b2:3e:9e:
         e4:f1:87:4b:2a:b7:9a:dd:c1:06:cc:e6:36:1f:4c:02:d9:99:
         34:8d:00:15:d1:c2:21:de:59:f1:59:a7:9f:fa:55:cb:ab:32:
         f5:f9:3c:c2:f3:14:5f:f7:ba:c1:04:51:76:29:ac:9d:f7:b1:
         a2:26:c0:68:f4:37:71:67:f8:a5:c3:3d:af:2b:30:6e:56:a8:
         02:ff:64:21:c9:a1:30:4b:18:8d:12:80:1b:3c:3b:cd:1f:d3:
         71:ae:de:c1:67:4f:f7:18:0f:a8:8d:11:cf:95:85:6a:39:d6:
         8c:1a:03:48:e5:3b:65:97:a8:ea:e7:51:4e:27:ed:94:88:40:
         ef:72:6c:4f:63:61:85:ed:88:1a:ea:30:2c:59:ef:7d:56:8d:
         ff:a5:80:36:99:85:aa:d7:1c:d4:68:a8:6c:fc:8a:66:72:76:
         05:a5:34:45:fd:35:3b:8b:ba:a1:97:51:80:32:94:fc:eb:87:
         fc:64:7a:22:4e:67:20:eb:77:9c:23:78:66:21:f9:34:9e:96:
         2e:3b:0c:21:4f:ee:b1:8d:72:a7:1d:92:46:90:71:b3:97:b1:
         b4:5e:83:e4:22:77:66:a9:f2:13:90:a0:0c:34:bb:7b:58:a6:
         0d:12:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:11 2025 by rpki-client