Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa
File:                     323830343a316235303a3a2f33322d3332203d3e203631373139.roa (raw, json)
Hash identifier:          fU1Q8QvvtL0h2YV8u9C9o9TI9d4T2xpRqPo2OnTtEVU=
Subject key identifier:   B6:9D:6F:9E:C5:6C:45:EB:82:DE:87:7C:C5:52:F5:14:DD:94:59:08
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       7FA97A6B550F464D5DA9BB848DD91C28585C817C
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa
Signing time:             Wed 11 Dec 2024 11:15:58 +0000
ROA not before:           Wed 11 Dec 2024 11:10:58 +0000
ROA not after:            Wed 10 Dec 2025 11:15:58 +0000
asID:                     61719
IP address blocks:        2804:1b50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 23:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:7a:6b:55:0f:46:4d:5d:a9:bb:84:8d:d9:1c:28:58:5c:81:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Dec 11 11:10:58 2024 GMT
            Not After : Dec 10 11:15:58 2025 GMT
        Subject: CN=B69D6F9EC56C45EB82DE877CC552F514DD945908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:98:0b:72:38:24:de:c9:ff:ff:96:55:1b:51:
                    f1:de:c5:9a:f3:e3:d4:51:e2:03:18:65:fd:22:96:
                    fe:d8:fc:fa:4a:42:ad:d3:e6:37:8b:e5:05:d0:d3:
                    f1:16:54:a6:d2:79:4c:a4:98:61:32:4a:a5:41:15:
                    b2:61:ad:b9:94:10:75:00:a6:a1:13:ed:13:69:33:
                    47:d8:4c:d7:30:d6:95:21:7f:4b:af:35:bc:fc:fe:
                    a4:e4:94:5e:ae:ed:ce:a6:38:90:30:85:50:ca:af:
                    ad:e0:af:28:53:05:d2:92:4b:67:73:19:61:01:d1:
                    94:f5:d4:f7:0e:cf:b1:79:10:ea:5f:fb:20:63:9f:
                    a6:f7:fb:ba:a2:c5:04:c6:0a:09:bc:e6:96:bf:27:
                    2c:7a:cf:46:dd:04:6a:70:9e:84:b9:06:fd:3d:87:
                    39:f1:07:6b:40:87:f3:de:c5:db:a2:3c:d9:91:9d:
                    38:6c:05:7b:30:f4:c6:83:e4:ca:ae:b1:17:65:0c:
                    b6:05:55:6d:25:82:18:78:88:00:03:e2:9b:89:15:
                    63:46:b2:26:6d:ae:b3:12:c6:68:29:17:c5:ed:1e:
                    61:80:9b:ad:ee:aa:f3:0e:4a:53:1d:3a:87:59:b6:
                    21:e3:ef:c3:44:a0:b5:d0:d2:22:d5:5d:90:51:08:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:6F:9E:C5:6C:45:EB:82:DE:87:7C:C5:52:F5:14:DD:94:59:08
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:18:41:fe:59:06:41:bd:f0:01:ca:c1:56:d5:f8:ed:98:16:
         c5:38:31:13:6f:0e:9c:b9:6b:bd:a1:ec:f9:2f:a3:99:74:5d:
         71:84:85:57:ad:9e:ed:e1:a8:6c:38:11:c5:b7:87:2b:24:97:
         22:91:0c:d9:2b:76:a5:06:14:94:2d:9b:43:46:2f:15:4a:0c:
         e3:01:0f:60:bb:0c:10:fd:43:9f:ab:c5:5e:f0:e5:46:73:3c:
         d7:42:0a:62:53:3d:63:18:26:8e:f5:d3:41:3b:65:ce:78:72:
         24:aa:2f:87:61:87:12:5f:30:94:43:78:80:ab:6c:df:29:61:
         7e:62:00:68:a7:d6:2f:cb:76:ad:2a:38:cc:65:9f:49:ea:34:
         b5:f4:3d:79:86:f6:09:30:0a:63:12:24:90:ef:0e:74:c9:27:
         76:47:6d:8d:b2:fc:ba:86:43:e3:a4:ec:04:ba:60:1c:11:c6:
         e8:db:f3:27:bd:ef:ad:f2:a5:1b:13:80:96:a5:d3:85:76:8c:
         48:32:4c:4a:16:02:eb:41:ee:fa:94:66:76:cc:3c:cd:03:cc:
         bc:3f:bd:c8:af:4e:e1:2c:d1:69:57:06:c2:cb:d8:8e:94:ec:
         92:c3:b8:36:c9:9e:21:30:71:e7:16:41:a5:13:80:3d:81:e4:
         e7:25:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:20 2025 by rpki-client