Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353430303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a353430303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          ihOY6fF5RXwK29fh8wJ7fxErjNk/OBCDiK0nAS20ZJ0=
Subject key identifier:   1B:5E:F8:C3:C1:A4:29:3C:33:79:15:DC:F3:A2:8E:4C:A7:31:FA:31
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       56CA795937CD265D7600C486DBA9FDBDDFEA457D
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353430303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        2804:2674:5400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ca:79:59:37:cd:26:5d:76:00:c4:86:db:a9:fd:bd:df:ea:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=1B5EF8C3C1A4293C337915DCF3A28E4CA731FA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:1c:2e:75:8a:40:4b:54:ba:aa:9c:98:28:
                    1d:cf:33:20:fd:96:cb:fa:f0:8e:d3:03:fa:06:95:
                    cf:ac:c2:6f:bc:cc:62:f6:68:ee:25:c6:b5:b5:30:
                    d3:bc:5a:15:72:ae:31:5f:04:36:59:7d:62:2c:38:
                    00:ad:a3:9b:98:03:9f:8e:40:cc:56:5b:de:58:e0:
                    54:6b:c3:30:0a:71:96:ca:ad:26:94:d3:d7:19:3b:
                    ae:ae:5e:59:3c:4a:fe:da:06:1d:77:07:c6:8f:a1:
                    bc:e8:fb:b1:59:3b:c1:5f:e8:09:c6:4f:d6:3d:ad:
                    1e:0b:54:fa:35:35:42:e5:82:b5:49:6c:35:55:73:
                    02:68:f2:5a:30:0a:5a:87:fa:4f:7e:b7:89:69:5e:
                    54:2e:53:95:dc:e9:f1:a5:a7:54:e1:55:28:d5:78:
                    29:65:da:fb:03:5c:74:80:a7:25:63:b0:11:90:87:
                    5b:3c:6b:ae:ea:a4:fa:9f:ca:5a:03:d5:c5:33:4c:
                    81:a0:78:39:81:de:5e:1b:8b:f8:c0:70:d5:68:31:
                    1c:a3:6e:88:a8:b9:06:43:4c:7a:7f:c7:7d:98:74:
                    50:9f:f3:72:09:58:35:45:44:37:6b:2d:c5:ab:b6:
                    bf:84:57:4b:89:48:b0:5f:66:b0:e9:d0:18:31:41:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:F8:C3:C1:A4:29:3C:33:79:15:DC:F3:A2:8E:4C:A7:31:FA:31
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353430303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5400::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:37:d9:22:97:04:34:dd:d6:9a:28:03:17:59:de:d2:46:
         6b:13:06:69:e4:18:a2:7c:e2:3d:14:88:30:39:c7:7d:86:e8:
         c3:ec:ff:70:96:07:88:ef:3e:7e:24:cd:c1:ae:2f:39:32:e6:
         75:88:73:2a:89:74:fb:ad:19:0f:9f:bb:49:f2:ea:4a:79:ef:
         f1:e6:40:a0:08:b2:d2:53:df:f2:c9:60:fc:34:54:24:23:e2:
         cd:2f:0e:83:b5:b3:49:45:21:ca:16:10:7d:3d:8a:7e:ef:47:
         cc:ff:3b:b1:18:4f:af:6e:d0:79:8e:0b:7b:46:12:38:99:67:
         cf:1c:a9:da:01:39:02:c3:8f:ac:c4:ee:d3:85:b4:8d:10:d5:
         ce:75:7d:7d:d9:88:76:85:51:89:fc:1d:f8:23:51:ab:a0:af:
         e4:d2:a6:03:39:99:84:56:5e:f4:e6:00:42:a1:76:28:6a:b3:
         b8:55:f8:5f:8a:1c:48:80:61:30:00:88:9c:96:ae:c2:95:75:
         ad:dc:08:e2:a2:77:3c:19:75:ba:b7:aa:e6:93:54:3f:4a:9c:
         ca:89:d2:22:6d:90:9b:fa:eb:94:2c:42:fd:e9:06:17:ea:f1:
         7a:07:53:bf:35:ec:7c:52:ff:8d:87:16:cc:71:75:d5:a1:d6:
         0c:1f:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:19:09 2025 by rpki-client