Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
File:                     323830343a3562633a3a2f33322d3438203d3e203238363538.roa (raw, json)
Hash identifier:          MXlqrAy0Z1MDXDxyWe8n1QH3s9g2TOIHThPwaMg5+ys=
Subject key identifier:   6F:BE:BB:95:C9:8B:8E:85:9A:01:76:55:EA:8E:80:2F:E8:68:14:E1
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       6BE4C6EBE6CED51C76EFCD529E4A998063311434
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa
Signing time:             Thu 06 Mar 2025 10:17:15 +0000
ROA not before:           Thu 06 Mar 2025 10:12:15 +0000
ROA not after:            Thu 05 Mar 2026 10:17:15 +0000
asID:                     28658
IP address blocks:        2804:5bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 12:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e4:c6:eb:e6:ce:d5:1c:76:ef:cd:52:9e:4a:99:80:63:31:14:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Mar  6 10:12:15 2025 GMT
            Not After : Mar  5 10:17:15 2026 GMT
        Subject: CN=6FBEBB95C98B8E859A017655EA8E802FE86814E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:db:f2:6e:3e:46:10:5a:21:ef:2a:02:10:
                    96:7c:d6:1d:61:cd:b4:9b:ce:21:c1:61:13:13:ba:
                    74:21:03:0a:aa:3c:aa:d9:95:46:8e:fd:48:8a:89:
                    a4:27:9a:92:4c:2d:32:ba:34:be:c7:fe:59:1a:c8:
                    47:be:a5:5d:94:af:30:54:b1:eb:d1:38:f3:bc:c7:
                    4e:c3:f7:21:e5:5f:aa:37:4c:87:10:61:6a:a6:7f:
                    40:e0:54:ce:60:59:99:e1:54:9c:d9:a3:96:6e:c2:
                    79:9f:ab:f8:db:ef:77:3d:11:4a:9f:e7:c0:0e:55:
                    c8:b6:42:fd:6d:5a:ef:79:67:be:9d:a2:f1:f8:61:
                    3d:be:9c:03:b4:f0:43:b5:fb:f0:28:50:fc:fd:70:
                    d5:a0:99:1c:42:a3:1f:6e:4c:df:69:01:0a:47:0f:
                    cc:43:9e:dd:cf:70:22:52:94:85:50:eb:85:11:6d:
                    43:f8:ce:bb:5e:32:5b:ed:23:72:5b:57:ca:ac:db:
                    c0:ce:47:7a:5a:7f:22:a8:05:4f:62:91:91:eb:b3:
                    0f:74:12:fb:ec:72:99:61:2e:75:0f:eb:48:8f:f9:
                    06:fb:cb:f6:c4:e5:44:a2:fa:fd:f5:45:d7:73:15:
                    6b:19:cb:15:67:6f:bb:58:04:a7:b1:58:12:d2:a2:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:BB:95:C9:8B:8E:85:9A:01:76:55:EA:8E:80:2F:E8:68:14:E1
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/323830343a3562633a3a2f33322d3438203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:10:14:f8:88:e7:e0:42:ea:a2:d2:32:58:1b:95:0a:86:
         ec:e4:f2:2a:be:86:9e:6e:f5:17:70:64:87:46:a4:ab:56:1c:
         ce:2b:49:3e:28:ca:06:87:de:19:c0:aa:65:b7:61:ae:89:ab:
         27:1c:6b:25:15:d2:78:85:6a:b6:22:54:0c:96:95:52:6e:8a:
         bd:73:4f:14:75:b1:47:fc:a3:5b:88:d1:56:35:67:79:f8:60:
         b8:d3:56:d8:e7:92:e4:db:9a:2c:5c:6e:34:53:6f:bb:bb:a0:
         62:25:c9:63:58:f7:11:68:f4:e8:af:1c:3a:73:0f:21:22:a2:
         b3:5c:17:fe:3a:6d:04:2d:a5:b9:86:99:a9:54:58:de:0a:77:
         3e:e6:ac:a3:d0:0e:65:d3:35:9e:9d:93:5e:70:68:8e:13:7f:
         77:e9:49:b3:ff:5e:09:e2:8d:a3:3c:3c:dc:67:ab:55:54:54:
         9a:23:12:c1:ae:86:6b:90:c0:df:f7:a8:6c:d7:ef:10:08:c7:
         3b:a8:c5:56:7c:8d:22:1f:47:de:a8:9a:a9:df:e9:21:f2:c3:
         8c:8f:5b:3b:1b:43:1b:3d:51:e7:52:34:51:95:ee:c9:0a:57:
         0a:47:fc:bf:9a:27:e5:67:1b:b3:5a:d1:a4:8f:0b:0f:8b:e5:
         ed:6a:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:58:58 2025 by rpki-client