Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
File:                     323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (raw, json)
Hash identifier:          kDbGCqNSUdmZakDCg1TiRYt/RRqjxxGDsDnwDF9XOCM=
Subject key identifier:   2F:7F:75:74:E2:04:DD:22:42:E5:11:6B:86:23:1F:A7:C7:D0:64:0E
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       1D6CCD64711D357B941DA1B90D27D69EA0EBCE90
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
Signing time:             Tue 29 Apr 2025 21:26:28 +0000
ROA not before:           Tue 29 Apr 2025 21:21:28 +0000
ROA not after:            Tue 28 Apr 2026 21:26:28 +0000
asID:                     270437
IP address blocks:        2804:6bf8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 18:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6c:cd:64:71:1d:35:7b:94:1d:a1:b9:0d:27:d6:9e:a0:eb:ce:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Apr 29 21:21:28 2025 GMT
            Not After : Apr 28 21:26:28 2026 GMT
        Subject: CN=2F7F7574E204DD2242E5116B86231FA7C7D0640E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:31:35:cc:dc:21:9d:26:b0:1a:ce:5c:8f:
                    18:e5:23:af:d3:1c:e6:6d:24:da:44:f7:78:3a:14:
                    80:c0:85:f4:81:a9:f3:6e:bb:bd:98:37:65:70:07:
                    49:44:15:98:1a:0a:47:18:5f:6d:ec:c8:b7:91:4d:
                    6f:4f:31:dd:4b:4a:50:e8:77:88:5a:a4:cf:e4:2c:
                    70:40:95:8d:51:c7:d6:ca:83:2a:e5:e0:85:68:df:
                    8d:55:0a:cf:16:e7:e1:b7:64:5a:07:5a:12:fc:d5:
                    2b:82:57:21:0b:69:af:ce:8b:6f:e4:cf:8f:67:dc:
                    44:c3:5f:e9:af:2d:b4:6b:97:b5:7d:7c:3f:ef:53:
                    b4:1a:42:b9:a9:0e:f6:3f:be:e6:e0:c1:b9:06:05:
                    92:0c:b8:67:a1:70:cd:ec:9f:8e:0d:7f:45:9e:98:
                    47:7c:01:1f:f4:02:2c:6f:50:6d:aa:11:73:02:f0:
                    d8:6a:95:4d:2b:e6:59:05:2f:43:02:04:72:6d:5e:
                    00:be:05:73:b3:42:12:c7:6a:bf:e9:5e:91:da:74:
                    4f:df:2b:d5:6d:83:dd:14:53:2b:58:a3:0a:c7:b5:
                    78:70:cc:45:af:50:e6:d4:bb:a6:35:16:60:e4:f3:
                    48:af:9a:77:2d:eb:4b:ec:f4:86:be:05:2d:04:92:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:75:74:E2:04:DD:22:42:E5:11:6B:86:23:1F:A7:C7:D0:64:0E
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:94:1f:c5:eb:bf:97:e9:e3:21:86:13:fe:8d:4e:1c:69:
         8a:e8:c4:4f:8f:11:ed:c6:b4:9e:43:b2:92:8a:66:e5:70:22:
         bd:10:97:0b:b1:dd:62:f0:c3:79:34:82:91:a5:6a:2f:e0:80:
         70:94:bb:6f:09:6c:ec:85:6e:3b:32:11:ee:9c:4f:f0:19:2e:
         9b:32:8c:db:c7:ec:58:82:ac:2b:7d:8e:fd:3b:ee:23:88:4e:
         78:17:8f:41:0f:5c:eb:23:99:de:a0:60:b1:5a:92:aa:fe:f3:
         54:d6:36:ee:f1:7f:62:34:ea:72:f8:7b:f9:f3:0e:3b:f3:61:
         5b:e6:77:53:17:59:31:76:32:57:20:9e:13:81:25:cb:1b:62:
         8e:f8:a2:96:37:1f:78:a8:72:19:bf:6d:9d:61:86:2b:ba:35:
         30:6c:3e:2c:65:5a:90:63:ad:c8:a5:17:cf:a7:22:f2:79:5a:
         35:5b:c3:af:8e:01:62:a7:62:62:97:5e:f0:98:55:37:cb:b5:
         e0:17:b9:72:33:ee:62:c5:b9:49:5a:9f:bc:c4:e8:10:5e:94:
         ed:6f:76:70:33:ab:ac:b7:12:5b:a1:2e:a1:53:9f:72:2f:b1:
         98:05:72:43:93:0f:6d:55:b5:34:c5:37:2e:2b:75:1f:05:4d:
         74:c7:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:00:24 2025 by rpki-client