Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313030303a3a2f34302d3430203d3e203631393531.roa
File:                     323830343a313863303a313030303a3a2f34302d3430203d3e203631393531.roa (raw, json)
Hash identifier:          CVz+//6A8sAauDD4wDL4Fg7B8J4+9RgT+ZuDFZFXht8=
Subject key identifier:   A8:F8:42:B9:95:F7:B9:81:41:B2:4B:B9:35:73:38:61:86:70:2E:1B
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       6F502DD1626B5D6F1E1AF257B7A38B328FAA63E5
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313030303a3a2f34302d3430203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:48 +0000
ROA not before:           Wed 05 Mar 2025 21:54:48 +0000
ROA not after:            Wed 04 Mar 2026 21:59:48 +0000
asID:                     61951
IP address blocks:        2804:18c0:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 02:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:50:2d:d1:62:6b:5d:6f:1e:1a:f2:57:b7:a3:8b:32:8f:aa:63:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:48 2025 GMT
            Not After : Mar  4 21:59:48 2026 GMT
        Subject: CN=A8F842B995F7B98141B24BB93573386186702E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:ca:f4:72:92:03:63:29:0d:b2:76:43:a3:
                    d6:b7:5e:86:59:c4:73:a0:44:57:ab:eb:c1:ee:31:
                    dd:78:ff:3d:5c:b3:85:44:ec:ef:3b:49:b8:67:ee:
                    18:2b:c4:15:42:3f:76:f0:12:25:b3:ba:c9:84:8b:
                    65:f2:ff:f3:71:37:13:89:32:44:72:24:99:c6:b5:
                    7d:52:77:77:e6:b3:ba:13:34:58:ec:78:2c:27:1d:
                    2b:d7:aa:77:fa:79:6d:ee:29:0c:91:25:2d:f1:b9:
                    28:ce:ce:1e:ea:82:7c:41:fc:eb:67:9b:5d:1e:34:
                    0d:0f:cc:79:d4:97:49:65:fe:d6:f9:51:a5:01:2c:
                    f5:2d:48:aa:b3:7d:50:3a:41:76:d7:8f:60:8c:1c:
                    7b:e6:9e:88:18:ac:67:ec:ed:82:5d:d6:2b:ba:55:
                    ba:38:45:3e:c7:0f:85:06:03:30:b9:e9:72:82:31:
                    ad:48:56:2d:52:5f:1a:e6:ab:1f:9a:10:2a:05:f2:
                    4b:08:e2:6b:09:d8:b7:4b:e5:b3:b8:fe:a9:08:29:
                    54:11:c1:33:05:68:61:2d:74:fd:6a:72:d5:47:5b:
                    08:5a:75:de:c1:75:02:4b:a6:85:7b:32:19:f8:85:
                    d8:63:97:6d:6f:cd:73:da:21:ab:ec:17:0f:7d:fc:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F8:42:B9:95:F7:B9:81:41:B2:4B:B9:35:73:38:61:86:70:2E:1B
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313030303a3a2f34302d3430203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:97:68:6d:45:c7:f2:76:a7:41:35:72:a0:9b:36:50:49:6e:
         45:17:8b:77:1a:27:99:e6:0e:54:0b:92:c1:ef:70:9c:72:ae:
         fe:c5:ea:58:ce:ea:8f:ab:50:b5:dd:0b:2a:91:43:19:da:25:
         58:4c:33:df:cb:ce:09:fb:bb:7f:52:96:c3:76:dc:76:07:b7:
         10:e9:e3:7d:91:0a:ac:b5:75:a0:84:cd:ba:f3:88:2c:bd:32:
         31:41:ea:16:7f:78:bf:7c:8c:d0:98:8d:7c:f7:d1:fc:00:9a:
         33:d1:b3:61:3a:9b:75:68:0e:4a:9d:db:fc:f9:92:76:18:6a:
         45:d6:49:c8:f9:fe:33:ac:03:0b:2c:b0:23:fb:68:28:19:e8:
         ac:f2:0c:08:bb:8a:86:46:d8:b4:8a:d3:92:63:6a:13:98:d2:
         dd:3c:25:68:41:8a:2d:e1:e8:80:20:d0:28:dd:eb:00:6f:a1:
         1e:d3:61:93:5e:aa:5e:86:3e:fe:4c:04:29:4d:f2:16:6b:80:
         34:8b:8d:9e:3d:03:7f:8e:21:54:e3:6e:f3:28:03:44:05:5e:
         df:14:86:ea:bc:5a:39:a6:9d:21:e2:44:13:00:9d:2c:93:33:
         8d:3b:83:e9:f5:12:13:d7:72:1f:ed:46:d7:59:c1:e8:1a:12:
         a8:44:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:45:54 2025 by rpki-client