Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa
File:                     323830343a323565633a3a2f33322d3438203d3e20323634333039.roa (raw, json)
Hash identifier:          +Q6QXng/tNZ+z3em/CkJqIWEEShENnga4s6g/tVTPtI=
Subject key identifier:   A5:48:E7:40:E0:2E:1A:86:9C:4C:C7:B2:31:D6:2E:64:DE:17:08:AD
Certificate issuer:       /CN=176B3690663CF65C508445E492B49E2E328AF9DA
Certificate serial:       6BF4F3D664CB7851BCA48712CA3F421597945BDE
Authority key identifier: 17:6B:36:90:66:3C:F6:5C:50:84:45:E4:92:B4:9E:2E:32:8A:F9:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa
Signing time:             Thu 06 Mar 2025 13:35:53 +0000
ROA not before:           Thu 06 Mar 2025 13:30:53 +0000
ROA not after:            Thu 05 Mar 2026 13:35:53 +0000
asID:                     264309
IP address blocks:        2804:25ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.crl
                          rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:f3:d6:64:cb:78:51:bc:a4:87:12:ca:3f:42:15:97:94:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176B3690663CF65C508445E492B49E2E328AF9DA
        Validity
            Not Before: Mar  6 13:30:53 2025 GMT
            Not After : Mar  5 13:35:53 2026 GMT
        Subject: CN=A548E740E02E1A869C4CC7B231D62E64DE1708AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:ba:14:45:42:50:4d:4e:11:99:ab:0e:5d:
                    65:69:42:91:90:74:e4:f0:b6:23:63:51:94:88:3f:
                    1a:41:f2:9b:18:7f:4c:bc:a6:cd:8e:64:ae:a9:af:
                    a1:48:1c:1d:a3:f6:33:72:7c:58:5b:ca:03:88:1d:
                    3b:75:28:f5:db:3c:f0:9f:29:3a:04:7d:84:15:89:
                    52:bc:46:80:b7:1f:93:6b:31:79:6e:99:51:e8:b1:
                    fa:84:81:45:c4:8e:7d:ad:8d:77:22:c1:e7:b8:24:
                    8f:aa:99:14:8f:84:19:21:34:9f:cc:f3:18:7f:14:
                    ad:05:e4:73:69:1e:0a:58:cd:e1:92:43:06:f5:53:
                    f5:62:6f:ec:03:94:fb:ae:29:50:f9:91:82:71:44:
                    2e:fd:93:6b:5c:08:d6:4d:82:6f:02:a9:9c:7f:19:
                    0b:57:6d:ca:53:d4:80:7b:7a:5b:90:89:11:42:b5:
                    1b:e7:a3:ea:e8:3c:f1:a2:85:25:f5:dc:c4:b9:ad:
                    35:e9:eb:2e:81:6f:20:7a:c3:ff:48:ea:50:ab:0b:
                    db:58:1c:f8:a0:3a:85:e0:c0:ad:e1:b5:62:f2:35:
                    c8:3e:96:e2:38:93:2b:b3:1b:83:05:f9:fb:72:57:
                    6f:4c:8b:c7:65:12:c6:10:63:9d:ac:16:74:b4:61:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:48:E7:40:E0:2E:1A:86:9C:4C:C7:B2:31:D6:2E:64:DE:17:08:AD
            X509v3 Authority Key Identifier:
                keyid:17:6B:36:90:66:3C:F6:5C:50:84:45:E4:92:B4:9E:2E:32:8A:F9:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/176B3690663CF65C508445E492B49E2E328AF9DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/176B3690663CF65C508445E492B49E2E328AF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/1/323830343a323565633a3a2f33322d3438203d3e20323634333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:87:6b:71:2c:82:68:12:25:09:85:ff:c9:c7:ec:54:69:
         dd:7c:3c:61:65:ab:48:0e:c5:27:b3:e0:a9:65:82:5c:c8:86:
         b6:0b:52:b7:2b:e7:d6:2c:ec:0e:73:2d:8e:e6:25:d7:cd:eb:
         52:8b:61:27:c3:2e:19:1f:9f:a4:97:ed:f5:90:20:ad:c7:0d:
         31:75:5a:f7:be:b5:20:9b:0c:2f:c7:ec:03:d6:bd:37:fc:ee:
         21:d2:17:a6:a2:51:9a:27:90:f7:5e:2e:41:c8:2f:ba:79:a2:
         8d:52:9d:13:9f:1e:e4:fd:5b:ba:16:df:39:4b:98:b3:14:9d:
         d2:25:d5:8d:e1:f5:5b:36:12:79:12:ef:aa:dd:16:19:bf:6e:
         42:14:b3:2b:c1:6b:71:c5:0f:08:7a:4b:7a:3a:b5:fb:d6:f0:
         09:f4:e2:7d:1a:5a:23:96:8f:15:e8:09:72:af:27:4c:b2:47:
         5a:71:68:c4:96:cd:fd:4e:db:72:35:ec:ed:82:e7:e4:55:4e:
         c9:17:ca:cd:6f:09:13:fe:f8:99:78:30:71:f5:c1:a1:71:a7:
         8b:62:bd:39:38:09:46:31:b8:22:d5:29:ca:3f:f7:72:0d:3a:
         12:2a:2d:09:4d:6e:ef:f2:ef:a2:b6:48:f1:bc:ff:20:12:82:
         c7:80:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:25 2025 by rpki-client