Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          3fGTSGgtJBxQnwi4siaZyUnjG4d1erHtUenURaP7Chc=
Subject key identifier:   21:61:BA:10:6C:8F:CB:6B:77:F5:C9:84:F8:BE:7B:28:53:DB:12:12
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       0F27793C152CED1F91A08D2DD297C9E7DBE8F243
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:23 +0000
ROA not before:           Wed 05 Mar 2025 20:51:23 +0000
ROA not after:            Wed 04 Mar 2026 20:56:23 +0000
asID:                     264344
IP address blocks:        2804:2674::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 11:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:27:79:3c:15:2c:ed:1f:91:a0:8d:2d:d2:97:c9:e7:db:e8:f2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:23 2025 GMT
            Not After : Mar  4 20:56:23 2026 GMT
        Subject: CN=2161BA106C8FCB6B77F5C984F8BE7B2853DB1212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:84:39:92:26:f0:0f:10:5b:07:41:eb:c8:
                    88:4b:0d:65:09:df:ef:82:99:9d:a4:ae:84:28:b4:
                    a8:ac:19:29:c5:58:bd:b7:0e:ee:09:43:e5:b8:06:
                    a5:1e:71:1d:9f:b6:43:71:25:1b:b2:26:e0:ca:c1:
                    b4:4e:bc:80:81:af:c1:68:49:9e:df:b3:80:7f:ed:
                    b4:4f:20:9c:28:af:03:7b:14:96:56:f3:25:dd:4b:
                    3d:54:de:3d:68:46:d7:15:12:f4:bc:03:8e:55:39:
                    c9:e8:4b:22:0e:37:02:81:7d:96:d4:c9:14:40:64:
                    aa:c7:4b:f4:9c:ff:8f:f0:da:07:ab:43:3b:30:0f:
                    45:75:96:91:59:60:b4:1a:4c:a8:13:aa:00:ea:cc:
                    a4:83:5d:de:af:57:ff:17:db:26:a9:1d:25:73:6a:
                    78:89:96:e9:93:4c:70:20:93:b9:39:23:cf:fa:7b:
                    e9:cc:b4:d1:12:f2:b1:72:f2:1d:8f:54:1e:e7:59:
                    92:c5:87:ec:a9:44:4b:12:5c:f0:7c:e4:53:b4:50:
                    99:ab:04:ca:f8:60:22:f2:59:64:9c:e0:f0:bc:1a:
                    0b:98:fe:e1:0b:40:96:76:19:ee:26:98:d5:9a:b5:
                    d3:10:5d:eb:48:9d:ef:46:fc:70:92:dc:59:fd:91:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:61:BA:10:6C:8F:CB:6B:77:F5:C9:84:F8:BE:7B:28:53:DB:12:12
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:88:f0:87:53:08:b0:ab:57:dd:cd:4b:e0:6b:db:26:25:
         8f:0e:d2:ca:6c:cb:d6:55:4c:b3:42:9c:6f:79:70:a1:b1:5d:
         52:85:e6:4e:8e:21:91:be:3b:56:2a:99:54:08:13:25:1d:d3:
         dc:32:93:28:96:7f:9a:88:ae:db:40:6f:ce:b0:90:93:cf:cf:
         02:33:2a:37:ee:18:bd:14:db:6c:01:98:5a:b8:a5:d0:e0:c6:
         15:09:b1:95:17:de:c5:46:f6:4d:e3:58:05:64:70:e0:62:c0:
         a0:fd:3c:c5:c1:fb:f4:a6:52:03:68:3d:7b:0a:b5:f0:cc:db:
         21:38:2e:77:a9:59:b8:79:e0:01:d4:4d:a0:7a:ed:58:17:5e:
         41:f2:0d:a2:e0:b3:61:4e:19:49:b5:0f:1b:f9:71:4e:f3:b1:
         1a:a9:d7:22:7b:c1:b5:cf:86:d3:1f:4f:43:85:8b:69:54:52:
         83:68:17:88:ff:d2:55:44:77:b6:c0:5e:4b:87:ad:3b:63:a2:
         c2:21:b0:39:61:51:92:2c:29:99:17:80:2a:ac:c1:7f:38:d6:
         84:4b:fc:c3:9b:87:c4:40:77:77:32:18:34:93:07:f5:b4:eb:
         70:5f:1d:66:89:e6:31:80:30:2f:51:56:9e:4a:8e:49:8e:0b:
         75:3e:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 19:16:03 2025 by rpki-client