Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d313238203d3e20323730363038.roa
File:                     323830343a366539633a3a2f33322d313238203d3e20323730363038.roa (raw, json)
Hash identifier:          m38dISv2GOW+TnXDTeAdUIw38Y8xLsqjkP/gtDdtOpI=
Subject key identifier:   5D:69:1C:FB:4D:F3:6F:24:9A:5E:44:D2:8F:15:45:36:7B:AA:BE:84
Certificate issuer:       /CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
Certificate serial:       06D7DFCF22DA613447E7C29C7D67B8072AF9E852
Authority key identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d313238203d3e20323730363038.roa
Signing time:             Tue 25 Feb 2025 19:38:58 +0000
ROA not before:           Tue 25 Feb 2025 19:33:58 +0000
ROA not after:            Tue 24 Feb 2026 19:38:58 +0000
asID:                     270608
IP address blocks:        2804:6e9c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.crl
                          rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d7:df:cf:22:da:61:34:47:e7:c2:9c:7d:67:b8:07:2a:f9:e8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
        Validity
            Not Before: Feb 25 19:33:58 2025 GMT
            Not After : Feb 24 19:38:58 2026 GMT
        Subject: CN=5D691CFB4DF36F249A5E44D28F1545367BAABE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:91:79:b0:f0:9a:39:ec:ff:1a:97:ed:90:
                    bd:58:20:c1:b7:7e:5b:0b:00:27:aa:c7:1c:32:a3:
                    48:9d:6e:2d:12:ab:bd:03:a2:91:df:40:03:98:8f:
                    24:0e:39:76:f6:9c:61:d6:43:04:f6:72:b4:40:a1:
                    97:1b:e1:43:80:ee:b7:07:98:51:eb:d5:b7:57:74:
                    c6:b9:1a:07:c8:f2:89:5c:6a:6d:90:fe:45:98:a1:
                    12:2b:22:61:c2:07:37:b0:68:5e:7a:48:d1:b6:92:
                    1c:71:2c:73:dc:04:10:00:aa:44:3e:48:96:be:7c:
                    93:f6:41:ad:f5:7a:4c:7d:d1:c1:f6:3f:ff:59:5f:
                    ed:7e:ec:9f:5e:e8:3f:e9:c3:c6:f9:b0:fb:af:b1:
                    da:72:e2:fa:85:66:e7:e5:27:a6:3b:13:73:95:c7:
                    50:81:53:9c:1b:7e:3a:01:81:0c:d6:70:83:de:80:
                    64:35:90:87:61:04:eb:68:0d:bc:d7:13:b5:f9:ec:
                    fb:f9:f8:78:20:51:a0:13:5e:86:91:fd:3e:ee:00:
                    a7:5e:74:2e:bb:cd:76:02:5d:d4:99:91:b3:6b:a0:
                    27:a4:cf:71:3a:26:ed:93:a6:03:fc:b2:4d:7c:96:
                    06:32:20:04:0d:12:da:7f:9a:df:07:b3:d8:42:42:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:1C:FB:4D:F3:6F:24:9A:5E:44:D2:8F:15:45:36:7B:AA:BE:84
            X509v3 Authority Key Identifier:
                keyid:60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/323830343a366539633a3a2f33322d313238203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:bc:62:d2:d4:b8:a6:f9:27:ed:fc:0a:5c:a2:1d:6c:bf:b2:
         da:f0:b3:ac:4a:c0:79:9b:fa:22:b6:7c:74:fc:1b:0e:00:9b:
         4a:d6:2c:60:67:03:3a:94:a2:11:4b:46:ab:f6:b4:47:e5:5a:
         88:db:68:39:4e:13:59:7c:19:62:e4:07:59:2a:38:67:d9:e6:
         d2:3c:ad:14:6c:6d:90:21:53:6c:c6:13:84:5b:93:e2:ed:74:
         b1:72:85:8a:66:5d:01:c2:d5:09:7d:cc:08:85:a0:82:7a:e3:
         10:3e:9b:7c:a9:9e:21:39:1f:1e:c9:11:9b:5c:56:b7:3d:66:
         19:db:ff:a9:a1:7d:aa:f2:19:01:ad:d7:7f:c8:3b:12:01:5f:
         c1:43:79:f2:17:6b:93:71:eb:67:8d:89:1c:94:3a:5b:8d:85:
         21:90:c0:7f:92:64:98:79:9f:3b:0a:46:c0:c4:d3:ef:6f:d8:
         b8:1f:3f:e8:b1:c5:94:37:16:c0:34:63:dd:5a:78:44:03:b6:
         fa:87:0b:ee:3c:7a:23:8b:4d:52:29:13:e1:64:9a:90:ba:ab:
         29:63:de:3e:35:07:99:8b:35:c6:ad:43:60:55:ba:a5:e2:8a:
         35:51:c5:81:03:f4:9d:cf:f2:e8:a2:74:60:75:3b:54:dc:1e:
         2f:ed:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:34:11 2025 by rpki-client