Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa
File:                     323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier:          QWMpT15auvi5IqVQCQkkLDo88tzBpoCVWSbjXMc0oYA=
Subject key identifier:   6D:56:E6:FB:95:D1:CC:A4:53:E0:C4:86:ED:61:E4:07:05:CA:C8:68
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       7527E50755E1EF0F1D14285AB2F1ED1C1379B386
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa
Signing time:             Wed 19 Mar 2025 20:09:07 +0000
ROA not before:           Wed 19 Mar 2025 20:04:07 +0000
ROA not after:            Wed 18 Mar 2026 20:09:07 +0000
asID:                     61608
IP address blocks:        2804:8270:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 14:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:27:e5:07:55:e1:ef:0f:1d:14:28:5a:b2:f1:ed:1c:13:79:b3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Mar 19 20:04:07 2025 GMT
            Not After : Mar 18 20:09:07 2026 GMT
        Subject: CN=6D56E6FB95D1CCA453E0C486ED61E40705CAC868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:6f:e5:fc:be:ed:d2:05:60:cf:a5:99:ba:
                    e3:ce:59:e2:97:60:e7:ee:b7:5f:27:a5:ed:75:03:
                    52:ef:a1:4e:8a:b2:16:4f:3f:6a:b7:51:fa:ab:af:
                    4a:2c:3c:13:38:2e:63:fb:81:28:fd:0f:81:91:26:
                    d6:5d:49:cd:c6:92:5f:16:15:6f:bf:0b:2b:13:33:
                    ee:36:84:a7:48:25:24:39:5d:67:db:7a:d6:3f:59:
                    86:aa:b6:e1:a0:e1:85:5c:89:9c:78:e6:c3:e0:03:
                    04:91:69:cd:2c:a8:95:b2:81:2c:df:2a:4b:11:56:
                    92:1b:dd:81:49:70:88:e8:8f:be:29:27:36:11:b1:
                    2f:43:9d:37:b7:5f:81:54:cb:2a:cf:30:c2:67:8d:
                    aa:16:34:a4:27:02:40:c1:f6:3b:1d:ce:11:bb:b2:
                    5e:57:f8:8b:f9:aa:d2:ed:d6:9d:1c:fd:f5:c0:d4:
                    eb:e1:70:69:65:cc:47:d1:74:be:1a:84:0d:d7:2f:
                    70:02:eb:b9:a3:2f:0b:e4:83:7e:50:06:cb:5a:2e:
                    5c:b3:75:67:e7:35:12:d3:ca:f2:a0:ac:a2:4e:84:
                    eb:79:bc:42:9c:3d:90:f4:e1:c5:92:07:ae:c2:e3:
                    85:02:0d:be:8f:32:9e:40:60:ea:a3:da:9b:22:7d:
                    be:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:E6:FB:95:D1:CC:A4:53:E0:C4:86:ED:61:E4:07:05:CA:C8:68
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a633030303a3a2f33342d3334203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:2b:bd:f3:7c:9d:28:b8:74:85:4c:7a:5e:e3:c1:91:3a:
         82:76:d0:0d:26:25:0d:72:a4:65:8a:bb:02:f3:15:fc:f1:81:
         84:dd:dd:08:4d:f7:19:fe:30:70:2a:02:50:5f:38:de:d5:86:
         8a:36:cb:68:6c:4d:b4:96:53:95:98:db:81:62:c0:ea:6b:c9:
         f5:b4:8d:9c:0a:4d:4b:50:2e:83:d8:25:3a:c2:06:6e:0e:9d:
         ce:f4:61:f3:33:15:9f:8f:d5:4f:77:86:d9:96:20:8b:f8:a4:
         95:f2:e1:d5:d5:d2:a2:26:75:30:a6:d6:74:04:0e:52:4e:48:
         07:99:d1:17:aa:a2:7f:06:44:6d:c8:c7:f6:c7:69:62:13:ab:
         b4:95:e3:7c:0f:95:00:a5:57:6f:6e:38:b3:f8:77:62:b4:76:
         2d:15:98:19:af:b9:5a:8d:a2:15:62:ac:f0:34:a0:2a:24:57:
         84:42:2e:90:4a:c2:51:a0:5e:21:65:ad:7e:89:e7:4a:ca:c9:
         b8:25:78:9e:8e:90:a3:a6:e3:f7:0d:87:52:48:de:35:c0:da:
         20:50:e9:aa:bc:3e:e6:b1:4c:51:d8:0c:dc:44:c1:86:1f:cd:
         b6:64:69:cf:11:22:3d:ee:f3:d2:16:94:af:eb:4b:de:b9:85:
         d9:e1:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:26:30 2025 by rpki-client