Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
File:                     323830343a363132343a3a2f33322d3334203d3e20323639323135.roa (raw, json)
Hash identifier:          EFTmuFmyNRrKE/g1knJt8b5bIcZxwfmCeOqz1vyW9h4=
Subject key identifier:   28:4E:B7:10:1E:71:75:C7:47:AA:AA:F1:F5:7A:1B:88:0D:25:5B:7F
Certificate issuer:       /CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
Certificate serial:       1123F736F5FBD26EF9054778C06433042D2BA127
Authority key identifier: 1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269215
IP address blocks:        2804:6124::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl
                          rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:23:f7:36:f5:fb:d2:6e:f9:05:47:78:c0:64:33:04:2d:2b:a1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=284EB7101E7175C747AAAAF1F57A1B880D255B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:5c:2d:16:47:84:72:ae:54:cd:76:83:e4:
                    13:fb:a3:29:3b:ec:78:7e:f3:84:99:10:13:be:4d:
                    34:05:8a:a5:2d:bb:f3:1e:45:23:9f:a0:ca:02:5a:
                    bc:61:0f:87:72:0d:cd:33:c7:d7:c4:61:61:ae:f4:
                    1e:bd:17:ad:5a:a1:6a:1b:01:57:6c:1a:07:a0:4e:
                    a8:f7:8c:4a:61:16:61:33:6b:06:49:56:65:0d:72:
                    e2:b1:8f:fe:05:04:66:96:fb:bb:c9:65:3d:66:7c:
                    56:2b:41:ba:5c:70:ef:fb:14:b0:41:96:e0:0b:64:
                    c9:ad:ac:96:c8:4b:1a:ff:1c:10:2c:b2:63:42:8b:
                    25:ea:05:1b:ce:b4:59:03:17:80:b0:f9:c0:9e:7e:
                    22:2a:ed:9f:34:93:06:2e:57:fc:ed:05:17:21:15:
                    11:e8:d4:42:90:dd:54:75:56:02:ce:e4:77:a5:ce:
                    3d:61:ed:6a:cf:b4:a9:02:c4:ed:c5:c5:29:56:29:
                    0b:1c:a1:9d:f7:bb:27:4f:00:0a:7a:1e:c2:88:7d:
                    35:5c:f3:9c:1c:e7:42:3e:e4:70:91:8e:52:87:4b:
                    c1:ce:87:88:ab:d4:ea:c5:bf:e7:3d:fe:64:e7:7a:
                    91:35:ba:de:61:f8:5f:86:12:d2:60:80:9f:9c:5f:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4E:B7:10:1E:71:75:C7:47:AA:AA:F1:F5:7A:1B:88:0D:25:5B:7F
            X509v3 Authority Key Identifier:
                keyid:1E:6B:79:5E:AD:69:C5:E9:30:00:2F:4C:84:E8:CB:AC:16:DD:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E6B795EAD69C5E930002F4C84E8CBAC16DDA28B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqpATurM2YpymFAxYL1mHZxs1MihmXR2uvWVbEmy1gb7/1/323830343a363132343a3a2f33322d3334203d3e20323639323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6124::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:b3:13:42:73:6d:2d:c0:9e:04:be:59:c1:0f:3d:79:fb:
         12:01:0f:53:7b:f3:9c:04:6b:a3:d2:0e:22:76:78:b9:1f:29:
         72:e6:2c:36:f0:55:bf:1e:26:cb:97:39:db:04:cc:5f:97:6b:
         5b:af:b1:b6:20:ea:1f:68:f2:37:1e:36:ee:f9:3e:c2:ae:67:
         81:13:07:5a:00:50:a6:5f:99:d4:73:34:bb:4e:68:1c:4d:45:
         12:c4:83:63:ce:44:e6:55:e3:89:4a:57:bb:8d:24:f1:0b:7f:
         f1:91:7d:d9:d7:12:83:44:c2:8e:5d:27:10:41:4a:ff:09:76:
         7c:e7:ed:dc:71:36:4f:f6:c9:9a:6c:55:19:85:37:4c:8d:aa:
         87:7a:a7:5a:d9:c8:57:c7:1e:f7:cb:2a:f9:e0:19:84:9f:f9:
         5b:d7:74:d1:ba:62:c7:ab:2f:54:79:aa:07:d3:0d:a3:d5:72:
         e3:f5:01:d3:41:fe:da:e7:cd:99:21:03:18:2c:c8:56:27:ce:
         fe:f4:ff:dd:97:de:ce:1d:d5:3b:0c:8b:fe:15:b0:e5:45:04:
         62:ea:fe:6d:1f:19:da:38:cd:75:06:02:e1:b8:87:d7:e6:25:
         71:0b:34:15:89:e8:11:09:b6:a9:9e:17:2b:76:20:d5:67:9e:
         cc:6e:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:05 2025 by rpki-client