Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
File:                     323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa (raw, json)
Hash identifier:          zOa30SdHXip1DeosvrqxA6OOcXkWWLvwtGaFyUO3JxA=
Subject key identifier:   5C:89:EE:B3:6F:D0:11:BD:B8:02:D1:EF:4F:86:AC:2C:3A:D6:B5:D5
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       0642DFB122444FCAFB9BEFF75B75C962A3FB2363
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:48 +0000
ROA not before:           Wed 05 Mar 2025 21:54:48 +0000
ROA not after:            Wed 04 Mar 2026 21:59:48 +0000
asID:                     61951
IP address blocks:        2804:18c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 02:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:df:b1:22:44:4f:ca:fb:9b:ef:f7:5b:75:c9:62:a3:fb:23:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:48 2025 GMT
            Not After : Mar  4 21:59:48 2026 GMT
        Subject: CN=5C89EEB36FD011BDB802D1EF4F86AC2C3AD6B5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:78:db:12:5c:2b:a0:de:6e:6d:1c:36:62:
                    78:62:71:2c:73:ad:26:a0:8f:0b:78:fa:af:00:af:
                    de:90:e8:a7:cf:ab:c2:73:ce:c3:79:4c:63:54:35:
                    2a:17:3b:e5:78:a6:b9:4a:71:9a:3b:c7:d7:08:78:
                    b6:aa:b8:0e:74:9b:d5:6e:ee:24:dc:8f:83:cd:8c:
                    24:b1:c2:ca:34:af:ac:3d:e3:cd:b3:a0:09:b0:46:
                    84:cb:25:b6:15:b6:e3:c2:0e:8a:f5:23:cc:6d:ad:
                    c9:08:62:f5:78:a3:82:7e:fa:1e:50:10:e1:69:6f:
                    25:73:73:1e:3a:48:4b:1b:ec:1b:c2:75:ef:9b:37:
                    51:03:3f:1d:08:42:7e:c4:22:64:a9:ee:bf:fd:3f:
                    1e:b3:a2:a7:7f:b4:2c:03:82:f9:27:54:21:30:2f:
                    a4:40:0e:60:44:cc:5e:fb:b2:7a:70:65:1c:d8:47:
                    1e:5b:f8:3d:4b:ef:4d:2d:ee:8c:bb:03:4a:c1:74:
                    68:76:54:75:ab:0b:1a:9c:f2:05:2a:5e:d0:be:4f:
                    ad:e9:61:af:af:a1:c0:b6:a5:b7:aa:9a:38:cc:17:
                    9f:d6:f6:62:a4:8d:c1:3e:5e:3a:c8:a5:db:11:d8:
                    be:4c:14:da:0e:99:9a:31:fd:28:6a:e7:9d:e9:cc:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:EE:B3:6F:D0:11:BD:B8:02:D1:EF:4F:86:AC:2C:3A:D6:B5:D5
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:be:ce:df:b6:59:57:d5:14:c2:2d:62:72:12:cb:79:86:68:
         94:78:c7:45:6f:aa:1a:45:49:25:79:b3:5e:51:e0:01:70:de:
         70:1d:73:a6:64:2f:e5:55:4b:35:63:ed:a2:19:2a:fb:be:38:
         49:1b:9e:2b:fa:2f:1b:8d:fb:e8:ab:60:79:53:eb:16:ed:70:
         8b:37:79:aa:68:c8:86:f4:19:47:8f:f1:10:80:24:e7:e3:b8:
         25:6d:0c:31:af:3d:15:8f:a4:4e:e7:03:0a:59:ca:56:bd:42:
         d9:53:77:7f:bb:c2:94:24:f3:00:6d:8e:89:2f:bc:72:41:bb:
         44:7a:14:b0:c2:a5:4d:80:d2:c5:de:10:f8:bc:50:c7:24:82:
         84:6b:2f:2e:e2:77:71:fc:db:23:1e:3f:03:5c:c7:7f:a9:87:
         e9:12:d3:a1:04:7b:b4:83:4a:ec:f5:2a:61:7a:a0:f4:23:bd:
         e3:c7:70:81:92:e3:2c:49:3d:b5:d9:b8:12:3c:d5:76:91:16:
         cc:2e:b9:2e:6d:e4:1a:1e:c7:65:58:55:57:fd:db:28:c7:d1:
         dc:89:01:c0:bf:87:79:1b:85:64:04:6a:a2:58:2f:a7:75:55:
         65:96:31:33:ae:17:ad:cd:e1:2e:05:3d:1a:db:72:dd:50:6e:
         60:fe:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:48:20 2025 by rpki-client