Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
File:                     323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (raw, json)
Hash identifier:          yGeTQIWIsmjehPczpJgE//RoRaI5zA3RAdfw2t07Fas=
Subject key identifier:   35:AC:AD:4F:08:05:D4:E8:44:5B:16:17:C9:E2:E0:51:F8:CF:11:06
Certificate issuer:       /CN=06EA067E007B9311176981678F208CA96CEFDE1D
Certificate serial:       48DDB701CAAB944F0ECE8F24E88213E57FADBBF3
Authority key identifier: 06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
Signing time:             Mon 03 Feb 2025 03:12:20 +0000
ROA not before:           Mon 03 Feb 2025 03:07:20 +0000
ROA not after:            Mon 02 Feb 2026 03:12:20 +0000
asID:                     268205
IP address blocks:        2804:4d90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dd:b7:01:ca:ab:94:4f:0e:ce:8f:24:e8:82:13:e5:7f:ad:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EA067E007B9311176981678F208CA96CEFDE1D
        Validity
            Not Before: Feb  3 03:07:20 2025 GMT
            Not After : Feb  2 03:12:20 2026 GMT
        Subject: CN=35ACAD4F0805D4E8445B1617C9E2E051F8CF1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:ee:6d:e5:7d:35:59:7f:eb:ef:ce:df:6f:
                    64:8d:d0:24:1b:c3:37:63:53:cf:b7:f9:68:3e:07:
                    b9:b4:4e:12:d8:f6:db:69:f9:03:5d:30:e9:3f:77:
                    9a:af:05:ca:58:3e:0d:ec:a7:aa:e5:6f:09:fb:56:
                    cf:a3:a5:6a:16:2f:22:59:35:8e:63:e6:af:ac:2f:
                    23:30:c1:24:40:6a:b5:f5:1c:0f:4c:7f:de:1d:72:
                    1d:8d:91:2c:3f:37:a7:f2:91:80:3b:72:81:5a:bc:
                    90:47:6f:d0:40:79:35:a4:40:40:2b:cb:c4:0b:f1:
                    68:34:47:27:e2:a6:28:4e:e2:ca:32:26:51:72:b0:
                    d6:97:af:f5:86:e6:8f:b8:cd:5a:48:49:22:5b:93:
                    30:62:6e:65:ee:36:76:3a:ef:ba:65:49:d2:a3:09:
                    8a:59:18:8e:8c:bc:92:da:98:14:bc:22:29:64:39:
                    08:48:95:d4:ef:18:2b:17:ee:cb:e4:4c:e7:f1:c6:
                    76:89:e9:86:e8:90:aa:66:19:ab:1f:48:13:d4:90:
                    a7:f8:ae:a3:ec:e7:75:51:14:42:46:87:df:e9:31:
                    1f:b6:3a:7a:b1:0a:4a:fe:a2:b7:9f:1f:85:2a:3e:
                    73:af:a0:d1:ed:ed:35:9d:ad:cf:3d:9d:0e:b7:29:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AC:AD:4F:08:05:D4:E8:44:5B:16:17:C9:E2:E0:51:F8:CF:11:06
            X509v3 Authority Key Identifier:
                keyid:06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:ae:d0:85:57:e6:3b:cd:bc:64:44:76:9a:69:61:b5:96:
         c1:43:6e:25:77:30:07:45:da:d7:4d:b9:45:60:9a:87:cd:a9:
         9b:4f:0a:32:c0:d9:8e:8b:01:02:22:da:22:8f:c2:09:0a:42:
         c3:16:06:13:0f:18:19:76:0b:2b:c9:be:1e:36:a6:99:69:ea:
         14:4d:ed:05:f4:0d:f5:3c:ab:98:45:7d:52:8b:a4:44:14:65:
         34:e1:f2:23:0b:fd:42:a9:b1:60:86:9d:8b:98:46:06:39:06:
         81:f9:ef:f9:ef:83:4e:ed:66:65:35:81:51:0f:b3:7e:5e:86:
         aa:c3:cc:69:fe:1a:c4:23:87:78:31:54:50:de:7c:ff:f2:43:
         90:28:62:a2:17:87:f6:c2:36:58:79:ed:f9:5b:62:be:ec:42:
         a5:53:94:e8:2b:df:08:09:8d:7e:59:00:12:a1:26:94:1a:e8:
         b2:32:04:59:0e:17:9b:5a:68:3e:8f:a1:ba:61:9d:51:0b:76:
         6c:c0:33:57:8f:6a:d8:bb:d4:57:07:f3:7d:0c:1d:77:81:7b:
         89:71:26:f8:d8:e7:d8:70:43:8f:f1:9a:ea:c9:fc:c0:4d:4e:
         06:87:bb:f0:73:79:ae:b2:10:c8:8b:46:03:b3:64:eb:b8:56:
         15:e3:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:35:11 2025 by rpki-client