Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
File:                     323830343a383237303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier:          IQgcZZ2DHEikM5VHQlrG262INYwomwNFf25WIz8wKKU=
Subject key identifier:   0B:6F:E3:08:5A:79:66:8B:27:10:B9:78:A1:9C:3C:1E:87:01:32:C9
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       1C84DEDD5ED2A125997B6591381D1E8F157A270F
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
Signing time:             Wed 19 Mar 2025 20:09:09 +0000
ROA not before:           Wed 19 Mar 2025 20:04:09 +0000
ROA not after:            Wed 18 Mar 2026 20:09:09 +0000
asID:                     61608
IP address blocks:        2804:8270::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 14:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:84:de:dd:5e:d2:a1:25:99:7b:65:91:38:1d:1e:8f:15:7a:27:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Mar 19 20:04:09 2025 GMT
            Not After : Mar 18 20:09:09 2026 GMT
        Subject: CN=0B6FE3085A79668B2710B978A19C3C1E870132C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:a3:7d:59:ee:ee:9d:19:d6:5d:66:71:18:
                    42:f6:aa:03:de:d4:73:94:53:4f:79:07:58:81:e2:
                    11:40:a5:9a:b4:49:ba:b8:d9:bb:5b:4c:27:ef:de:
                    8b:a1:11:9f:e1:37:97:0e:47:a8:30:e4:52:e5:e2:
                    a1:12:19:a4:de:1f:55:c7:41:e3:c8:75:ed:1f:fe:
                    e0:74:88:72:ec:e6:3f:a8:16:76:ca:b8:46:4e:44:
                    47:e5:75:eb:08:ca:c7:23:58:f0:d5:a8:08:08:09:
                    aa:71:07:96:0c:ec:b2:64:ba:0f:2c:a6:8d:8c:e3:
                    30:cb:4d:7f:21:3c:60:2f:ba:d4:e2:06:13:61:fe:
                    a8:e0:65:d3:14:44:1a:47:7e:b0:3f:ad:f3:24:eb:
                    c4:2e:19:45:94:0c:ed:00:72:9b:fa:03:82:ff:16:
                    f8:80:f9:d5:e4:c1:d8:d3:67:ca:5d:93:a7:98:09:
                    01:23:0d:d5:a0:b9:58:12:08:21:eb:03:06:0e:75:
                    69:a7:4f:d5:57:98:09:af:86:5d:41:ab:04:f5:4f:
                    45:b7:c3:ca:05:28:03:50:77:99:fb:54:47:14:60:
                    3b:1f:f4:f5:53:2c:a9:66:a0:6b:09:a4:58:f7:bb:
                    c0:98:38:f5:2d:03:37:b5:44:76:7c:db:44:2b:87:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:E3:08:5A:79:66:8B:27:10:B9:78:A1:9C:3C:1E:87:01:32:C9
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:6d:c7:52:7d:9f:d7:b4:b5:3b:86:23:2b:dd:7b:3e:14:
         e7:81:b5:bd:fc:09:27:36:8a:71:c7:1a:af:84:f6:5e:b1:ba:
         a2:8f:75:4e:43:67:f4:ca:3a:20:f0:55:42:d3:33:74:54:01:
         d9:b0:54:16:7c:7c:21:84:1a:9f:c5:e6:8d:97:24:0c:72:b1:
         8f:cc:66:04:72:55:46:dc:9d:8e:85:55:78:20:d7:fa:1b:9a:
         3b:be:9c:cd:1b:c6:bd:bf:fb:37:f4:a9:ca:7a:01:59:3b:5c:
         ea:6a:75:f5:10:29:b7:67:42:f0:fd:92:68:08:a3:b1:87:a2:
         0e:47:d6:c6:68:38:8d:ec:18:21:35:4c:46:c8:76:9a:4b:c9:
         78:ce:11:02:08:82:ef:b3:af:f8:37:5d:09:a8:71:de:a4:8c:
         ac:b9:69:ce:5c:05:63:75:af:68:9b:66:0b:39:9b:da:35:4f:
         8a:ba:59:ad:6d:8b:49:6c:68:29:90:98:e2:16:42:51:e5:22:
         6a:d3:0a:dc:c2:1c:55:a3:01:c7:f4:12:2b:c0:51:49:23:57:
         4f:8b:06:35:6e:84:e5:b5:2f:48:c2:46:e4:77:70:bd:58:b1:
         e0:55:09:51:7e:b9:63:4e:63:92:33:33:ee:0a:1f:59:e8:f6:
         90:e5:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:25:08 2025 by rpki-client