Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa (raw, json)
Hash identifier:          GEkZ7UHNF9Q7WIxoupo9kTk0l6V1c8o7JMVWhEIS7+k=
Subject key identifier:   A6:CF:31:BC:1D:9D:E8:FA:23:E2:D4:EB:B5:3F:02:CA:E9:A0:C4:C4
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       7374592E1312DFB908569BAFB57B00C5C9F50F10
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:74:59:2e:13:12:df:b9:08:56:9b:af:b5:7b:00:c5:c9:f5:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=A6CF31BC1D9DE8FA23E2D4EBB53F02CAE9A0C4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:33:ef:32:b7:8c:0e:48:19:cb:83:18:cf:
                    74:d4:ff:91:49:21:6a:c4:6b:72:2d:00:53:5e:93:
                    61:a5:c7:77:7f:b1:20:c4:20:90:35:20:20:0a:72:
                    b8:d1:93:98:2d:5b:91:9e:bc:2c:0f:eb:ab:81:e6:
                    4d:ed:80:4d:a7:20:00:27:f1:c0:42:4a:d7:ef:9f:
                    7a:30:17:5a:2f:b1:bc:39:69:75:b1:f1:04:f4:4d:
                    ed:27:5c:c5:9c:fb:24:71:53:cd:86:d5:ec:d8:34:
                    fe:09:79:b4:f0:d8:c0:d2:71:14:82:54:68:23:3d:
                    ba:aa:00:97:fc:b6:46:54:eb:93:70:cd:1e:56:b6:
                    d6:77:46:82:c2:59:41:be:29:65:6c:91:64:7a:f0:
                    e5:4e:23:86:16:a3:47:4a:32:47:d7:a9:a1:65:08:
                    06:da:e2:f9:40:dc:30:6c:4c:16:c6:14:3d:2b:80:
                    92:38:20:20:33:c9:91:a0:c7:36:d0:60:e4:74:32:
                    c1:84:4e:a1:b0:b1:b0:45:8a:80:aa:cb:9d:cc:8c:
                    30:6a:cd:3a:18:c7:e6:b4:08:f3:83:cc:11:6f:d1:
                    84:44:91:b4:5d:d3:13:f0:2c:b9:84:71:d4:1b:5b:
                    39:03:ed:53:d8:1f:c9:5a:9a:9f:77:e4:26:af:34:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:31:BC:1D:9D:E8:FA:23:E2:D4:EB:B5:3F:02:CA:E9:A0:C4:C4
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33332d3333203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:87:a6:b2:18:82:72:01:91:26:92:d3:22:77:39:05:7b:a4:
         5a:cb:2f:bc:57:30:37:69:07:46:89:5c:ca:bd:1b:3a:da:bc:
         9e:61:bd:ca:1f:15:b7:b5:f3:63:45:ad:29:b9:7c:c4:15:ed:
         ab:ba:08:01:2b:fe:45:42:b5:6a:11:e8:4b:be:aa:c0:6e:f0:
         61:e4:73:31:28:d8:3a:82:1d:32:19:3d:a5:5d:70:27:a8:f0:
         fc:ff:63:00:fa:16:01:31:fe:89:80:d1:1c:bd:87:df:3b:cd:
         97:f6:0f:5b:c0:6c:6d:02:cd:57:c0:b8:bb:79:21:6c:5e:20:
         c0:3a:a1:db:dd:35:3c:03:95:d3:09:bf:6f:8a:1c:c7:bf:7a:
         2c:f7:56:b1:5c:fc:7f:ea:35:27:46:e3:9f:91:89:11:9e:ec:
         3a:a9:f8:4b:c7:b3:10:9d:50:eb:c3:95:9b:00:5c:5b:40:dd:
         a0:22:32:5a:59:50:89:7e:6e:e1:b6:5f:4c:6a:f0:67:92:fc:
         6d:07:72:99:c5:2d:8c:a8:d5:c1:2e:87:18:d3:4e:b4:6b:36:
         67:08:f8:3b:c8:8a:16:77:5e:2a:f9:5b:a6:3b:40:4d:db:90:
         2d:0c:40:e1:0e:d8:84:03:65:72:5d:ec:cc:90:27:3b:af:71:
         4a:b8:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:52 2025 by rpki-client