Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
File:                     323830343a333531383a3a2f33322d3332203d3e20323635353030.roa (raw, json)
Hash identifier:          28n1WSUKN3XFAKJKhDffKQBaDiDzMPA8Byj6ydjArK4=
Subject key identifier:   68:82:10:11:47:20:87:1B:56:52:D6:51:7B:38:3A:2A:CB:57:95:B2
Certificate issuer:       /CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
Certificate serial:       49BEE61C04644CDD17F288B4537EA0F09845AC57
Authority key identifier: A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa
Signing time:             Wed 05 Mar 2025 13:43:59 +0000
ROA not before:           Wed 05 Mar 2025 13:38:59 +0000
ROA not after:            Wed 04 Mar 2026 13:43:59 +0000
asID:                     265500
IP address blocks:        2804:3518::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 17:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:be:e6:1c:04:64:4c:dd:17:f2:88:b4:53:7e:a0:f0:98:45:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
        Validity
            Not Before: Mar  5 13:38:59 2025 GMT
            Not After : Mar  4 13:43:59 2026 GMT
        Subject: CN=688210114720871B5652D6517B383A2ACB5795B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:65:fb:be:f6:c2:64:60:71:f8:31:4d:20:
                    e7:ae:83:2d:ab:7f:fc:7b:84:fa:d1:65:6a:f6:fd:
                    ac:95:1a:57:24:12:9c:1e:e2:8a:ef:f2:62:d8:0d:
                    23:dc:c6:a6:45:63:e5:76:8e:e4:6e:bc:9b:c5:53:
                    11:0e:c8:a0:2c:fa:cf:bd:ad:43:06:b2:ac:5c:a5:
                    a5:25:40:c9:f8:b1:08:97:1e:66:7c:15:fb:76:7a:
                    1e:96:ff:41:1e:54:9f:d5:a6:12:b2:b7:59:d0:c3:
                    dc:06:4e:d8:36:e5:3a:bc:49:32:32:3f:97:25:e1:
                    8e:e4:e9:13:f1:3d:89:bf:fe:e8:cc:e9:bf:62:bc:
                    55:33:e7:83:c8:01:dd:49:e5:9b:ff:cb:e2:96:b6:
                    38:52:b1:10:cc:23:72:24:80:4b:38:b8:8d:b5:41:
                    02:07:33:83:ae:87:36:f2:79:e6:72:64:7e:db:d6:
                    2f:07:97:6f:3b:34:db:06:02:c1:7e:0f:6f:77:65:
                    18:ae:91:23:c0:42:90:38:88:ec:8b:1f:81:1d:5c:
                    1c:b7:14:3e:e0:18:02:6d:02:ba:98:32:81:09:5a:
                    80:8e:45:02:ab:c9:56:bd:8e:3b:87:04:a0:af:06:
                    9e:bf:fd:48:a1:94:ce:2d:ea:01:ee:68:31:cb:5c:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:10:11:47:20:87:1B:56:52:D6:51:7B:38:3A:2A:CB:57:95:B2
            X509v3 Authority Key Identifier:
                keyid:A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a3a2f33322d3332203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:48:f8:83:4e:5f:4d:0f:95:76:a2:8e:d6:be:8e:87:23:49:
         14:2e:2c:c5:c8:3c:df:8d:81:7e:dd:94:7b:c0:f7:c7:e3:8e:
         6c:47:e1:12:94:13:8e:88:f7:68:2c:02:a6:6d:ce:60:0d:ea:
         ea:fb:a3:7a:b3:0c:fa:e6:7b:d6:f8:8c:05:62:7e:d9:81:ba:
         c4:e2:10:ac:05:f5:d3:6d:70:22:d6:06:01:23:1b:aa:93:9d:
         72:29:c7:92:44:dc:3f:28:55:19:72:b5:f4:6d:31:56:36:9b:
         d0:a3:46:4c:38:f3:a8:5e:60:e3:79:5c:d4:c5:3e:f2:69:5c:
         f4:97:eb:64:be:3f:9c:87:51:f8:89:49:19:10:c9:7d:5f:9f:
         02:79:ef:60:48:52:e0:ac:f3:8e:30:d6:5b:b8:22:5a:7f:f8:
         66:50:e4:85:59:b8:e3:0c:a2:93:e6:7c:12:f0:0c:f7:56:8d:
         ec:25:15:e7:ba:c5:17:61:f7:d2:ea:a9:c5:cd:87:5f:bc:3b:
         33:f4:61:8f:c9:d4:ab:fe:de:85:63:01:ea:a5:e3:28:33:89:
         9f:64:ad:b8:88:d4:24:72:47:98:9d:24:3a:e6:f1:f7:38:41:
         ab:2b:38:53:cd:10:28:f8:17:7e:fa:db:5f:3e:fc:fe:cc:81:
         aa:de:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:41:28 2025 by rpki-client