Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
File:                     323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa (raw, json)
Hash identifier:          1pAz3i5ZYzcOi0486y/VF/aCYhXJ9TAw4aIlkgEBsNE=
Subject key identifier:   5B:6B:C2:7F:DB:44:A2:DB:2A:7C:E5:BC:2B:C7:46:7C:57:81:5C:06
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       6DBE032B0A32A5EBC5468DD5C7C7AFCA2BE3A350
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268732
IP address blocks:        2804:59e4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:be:03:2b:0a:32:a5:eb:c5:46:8d:d5:c7:c7:af:ca:2b:e3:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=5B6BC27FDB44A2DB2A7CE5BC2BC7467C57815C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:4b:cf:18:0b:75:5a:5a:bc:df:45:ab:64:
                    5e:83:60:3c:db:38:bc:48:14:65:09:72:af:f6:e3:
                    1e:43:93:4a:a9:ff:b4:f6:5a:f4:bf:1d:af:9c:2a:
                    dc:81:9c:b4:67:d0:82:b5:70:39:c5:f8:a7:fe:09:
                    bf:7c:6e:95:8d:d3:37:47:6c:d9:cf:c7:b6:17:84:
                    c3:3e:81:60:42:54:90:9b:9e:07:cd:db:3e:4b:6f:
                    5d:58:78:3b:84:1d:74:cb:6e:d0:99:51:32:ea:50:
                    a4:25:a0:28:1c:3d:5a:d4:9c:8b:c5:d8:99:74:12:
                    0e:45:08:b6:c5:2e:db:63:06:bc:4d:67:1f:ea:d4:
                    f5:af:12:76:b0:c4:4d:bc:9a:77:6f:5d:e9:e1:e8:
                    01:c1:ae:f6:aa:03:00:93:3c:51:56:72:48:a3:0f:
                    a8:74:2a:37:eb:c8:37:e9:0b:9b:48:a1:f6:39:37:
                    e8:a9:2f:4f:d0:b4:99:29:91:4b:ea:73:35:10:53:
                    1c:87:f2:67:d3:7a:e4:f2:b1:37:6d:d2:7a:30:a7:
                    2e:a2:0b:c1:d3:ec:11:f1:db:ad:a2:83:51:22:cc:
                    54:57:9a:81:5d:ac:e8:7c:a3:5e:cd:dc:29:94:fa:
                    b4:2d:33:47:8b:5e:f0:3f:ac:2f:65:36:81:26:a3:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6B:C2:7F:DB:44:A2:DB:2A:7C:E5:BC:2B:C7:46:7C:57:81:5C:06
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/323830343a353965343a383030303a3a2f33342d3334203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59e4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:6d:21:b7:78:34:5b:ed:ec:e7:30:20:c9:f3:16:67:fa:
         3c:2e:26:62:1a:21:45:8d:f2:ab:46:ed:79:66:ff:09:c2:e7:
         12:1a:1c:bd:c3:2e:39:a5:0d:f2:4f:bc:de:b0:06:d6:bd:7f:
         71:8c:26:00:19:e7:79:88:df:df:71:4a:06:2b:72:33:1d:03:
         a5:4e:4e:b0:f2:c4:99:7e:ae:b2:f3:2e:ed:00:9e:0f:e0:8e:
         28:01:76:e2:e1:a9:42:a4:c2:fe:90:36:06:9b:a9:fc:9e:2f:
         e4:5b:4f:96:5e:57:f1:f4:d7:28:55:00:4b:8f:04:9e:af:c1:
         f2:ba:65:82:c2:db:f1:84:ea:b8:f6:92:9d:4b:c4:35:55:04:
         73:6f:fe:53:1b:73:89:85:ea:c0:d7:76:8a:cd:47:aa:a7:d1:
         fb:ce:56:c0:3a:15:b4:e0:b0:02:50:4f:73:64:09:cd:ef:89:
         8a:a2:bc:8b:06:02:53:ee:e7:8c:f4:93:21:7b:8e:58:99:6d:
         2a:70:a5:2f:91:e9:b7:1e:04:d5:c1:91:96:8e:57:a7:53:09:
         c1:b6:5d:cc:07:0b:62:1c:82:90:3d:4f:cb:4c:c5:c5:f9:d1:
         c3:38:d9:1a:4d:44:6f:c1:b8:3a:b6:8d:4b:dc:4a:34:79:f1:
         c3:b5:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:27 2025 by rpki-client