Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
File:                     323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa (raw, json)
Hash identifier:          ofI/b0hMC6IK5nc5oWosQZ0Oz6dvqzCe+qLNGzmDQgg=
Subject key identifier:   5D:83:A0:34:1E:0A:7E:39:1E:74:B3:49:93:96:C7:28:69:48:1F:F6
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       2DFFECDE7E390904CB807101AAAE2699DAFF5069
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:47 +0000
ROA not before:           Wed 05 Mar 2025 21:54:47 +0000
ROA not after:            Wed 04 Mar 2026 21:59:47 +0000
asID:                     61951
IP address blocks:        2804:18c0:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 02:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:ec:de:7e:39:09:04:cb:80:71:01:aa:ae:26:99:da:ff:50:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:47 2025 GMT
            Not After : Mar  4 21:59:47 2026 GMT
        Subject: CN=5D83A0341E0A7E391E74B3499396C72869481FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:6a:1b:b0:9e:34:0f:aa:84:a1:5a:e1:ae:
                    8d:88:41:98:28:41:5e:9e:29:53:1d:dd:8f:3e:b8:
                    3d:c5:78:39:41:f2:5f:0d:8c:e1:3d:2c:42:c8:ab:
                    12:09:a0:11:74:b9:0c:35:b1:ca:cb:f8:41:6b:5e:
                    d2:f5:23:b5:75:0d:ce:39:06:eb:7d:ab:99:b2:30:
                    98:b0:da:38:fa:48:fd:96:8d:a3:27:73:36:de:b0:
                    d4:b0:e0:52:7e:6f:ad:9f:65:6c:f8:49:7a:af:95:
                    bf:a4:d1:fe:4e:e7:5c:1d:44:0f:2c:aa:14:d6:81:
                    3a:10:8b:45:78:54:1a:da:11:c8:04:0d:2d:a0:67:
                    05:15:db:be:39:1c:6b:b9:9d:77:f9:6b:ee:5b:a6:
                    52:cb:fe:77:d7:6d:52:fd:98:f2:75:84:27:54:6e:
                    8c:35:dd:85:d0:47:3c:99:98:eb:0c:3d:1b:38:19:
                    46:58:5b:e8:7b:f9:aa:4d:71:ca:72:71:65:64:76:
                    65:1e:c7:c6:11:cd:d4:d6:c8:61:81:12:e2:ea:f2:
                    16:ec:ca:79:50:36:49:ce:a5:d7:55:d7:06:68:9e:
                    73:87:ab:3a:15:df:67:bc:9e:98:31:39:59:4a:b2:
                    6f:88:44:91:67:f1:2b:94:9f:ad:73:0d:64:df:db:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:A0:34:1E:0A:7E:39:1E:74:B3:49:93:96:C7:28:69:48:1F:F6
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:88:4a:9f:d0:c5:72:b6:28:c7:e9:65:7a:42:46:14:cb:
         27:95:e1:dc:23:40:75:f3:79:84:4e:bb:c0:b0:87:44:af:df:
         a4:23:d9:ea:7f:b6:8d:f8:e0:03:67:9d:39:29:ba:ba:bb:90:
         90:5f:f0:2c:b7:52:44:47:12:e6:71:d7:33:77:7e:c0:98:a1:
         83:3c:3f:76:a4:91:5a:d2:17:b3:11:c4:eb:b9:a2:30:44:ad:
         5d:8f:e3:8b:58:14:c5:80:ce:b6:ef:f7:20:b7:b3:26:60:84:
         7d:23:0c:00:c7:fd:8f:77:50:4d:14:5e:14:cf:c1:d8:e9:ee:
         8c:47:78:a6:2a:d8:b7:ac:97:35:e3:c3:6e:d2:8f:b7:f8:32:
         ef:2c:78:34:f6:80:03:82:22:ca:1e:76:1e:cf:3d:22:83:20:
         06:9c:2a:3f:46:e1:f9:c1:4e:bb:7f:eb:01:9c:a4:62:56:0f:
         10:e7:ed:e2:fc:a2:f6:3a:47:d5:1e:16:c7:06:f4:bb:1d:e3:
         cf:cb:c6:b9:4e:19:14:7e:e7:28:c7:4e:5d:c9:41:75:2b:bc:
         03:03:2f:42:0d:2c:9c:87:3c:f1:72:c3:6a:bf:83:07:9e:52:
         61:93:e6:9e:e7:d4:db:88:af:ed:f0:6a:87:13:67:db:a4:63:
         1f:77:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:48:20 2025 by rpki-client