Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/323830343a366539343a3a2f33322d3438203d3e20323730363036.roa
File:                     323830343a366539343a3a2f33322d3438203d3e20323730363036.roa (raw, json)
Hash identifier:          rU/9BzfqaZhvh+IZ6MeyLcOlP2mlhKLvQiD3lIfsAqs=
Subject key identifier:   18:EC:82:DE:28:0D:05:14:4C:8C:CD:94:B2:1A:55:66:AE:70:FD:69
Certificate issuer:       /CN=46279F8FBCB11292202D81E18C8903507CF1D4B6
Certificate serial:       2596F6BE08487D0DE2F2332D379AB0341569CDCD
Authority key identifier: 46:27:9F:8F:BC:B1:12:92:20:2D:81:E1:8C:89:03:50:7C:F1:D4:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46279F8FBCB11292202D81E18C8903507CF1D4B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/323830343a366539343a3a2f33322d3438203d3e20323730363036.roa
Signing time:             Tue 27 May 2025 12:40:56 +0000
ROA not before:           Tue 27 May 2025 12:35:56 +0000
ROA not after:            Tue 26 May 2026 12:40:56 +0000
asID:                     270606
IP address blocks:        2804:6e94::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/46279F8FBCB11292202D81E18C8903507CF1D4B6.crl
                          rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/46279F8FBCB11292202D81E18C8903507CF1D4B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46279F8FBCB11292202D81E18C8903507CF1D4B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 15:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:96:f6:be:08:48:7d:0d:e2:f2:33:2d:37:9a:b0:34:15:69:cd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46279F8FBCB11292202D81E18C8903507CF1D4B6
        Validity
            Not Before: May 27 12:35:56 2025 GMT
            Not After : May 26 12:40:56 2026 GMT
        Subject: CN=18EC82DE280D05144C8CCD94B21A5566AE70FD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:81:4b:11:4d:ee:7f:30:ba:27:31:f0:76:
                    d1:e3:15:60:bb:92:55:5c:8c:d7:0e:e4:7f:69:d8:
                    c0:a7:9f:f3:d7:7a:ca:5a:b8:45:c1:c1:b1:c3:d4:
                    8c:f1:bf:53:b0:b2:9d:81:a2:a6:95:45:37:66:5f:
                    95:f5:f9:cf:92:47:04:cc:20:00:52:ad:0b:53:2b:
                    4c:20:d8:65:b8:5b:fd:26:54:a4:2c:32:9c:c8:65:
                    3b:08:c7:1d:e4:91:5a:01:dc:1c:13:85:9f:2e:9b:
                    3e:54:fd:37:f6:4d:8a:7b:a7:d4:13:bb:47:f9:03:
                    37:a4:06:3f:99:6d:bf:80:59:6d:90:5d:e7:78:a9:
                    16:9e:b9:47:ba:80:65:21:2e:63:5f:9d:a0:d2:21:
                    63:c3:7c:04:08:3b:fe:e6:43:6a:6e:e0:10:4e:ac:
                    ff:6b:11:3b:b3:4c:b5:61:fa:21:d2:f4:75:c2:aa:
                    77:b6:66:a2:32:bc:bf:b3:61:cf:be:aa:89:48:9b:
                    a2:c8:73:d7:73:7c:40:f9:06:d9:56:48:aa:1f:57:
                    ed:0d:dd:c9:87:6b:3a:fe:0f:e9:1f:5c:49:c5:e0:
                    bb:f0:ab:99:f3:98:ef:d3:92:23:60:79:aa:92:e8:
                    0c:6c:ae:43:eb:8f:57:92:ee:f2:cc:33:ce:e5:3c:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EC:82:DE:28:0D:05:14:4C:8C:CD:94:B2:1A:55:66:AE:70:FD:69
            X509v3 Authority Key Identifier:
                keyid:46:27:9F:8F:BC:B1:12:92:20:2D:81:E1:8C:89:03:50:7C:F1:D4:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/46279F8FBCB11292202D81E18C8903507CF1D4B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46279F8FBCB11292202D81E18C8903507CF1D4B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWa5HUwWBt6HWcuEJZoJrNokwxUbcvVcdb7RbMSfvs2e/0/323830343a366539343a3a2f33322d3438203d3e20323730363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e94::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:8e:d0:63:55:77:ff:c0:f0:98:85:79:0c:57:fb:20:11:
         ae:e7:51:fc:d6:a6:27:72:88:1c:22:94:fa:5f:99:63:40:a5:
         53:8c:50:6f:df:68:c6:09:ca:41:ad:81:1c:a0:30:2c:7f:be:
         41:ee:09:66:d8:d4:f5:0f:f0:10:72:5f:b3:48:fa:e3:66:a2:
         08:b3:a1:c2:a4:5c:83:b1:3f:97:9d:9e:df:b6:9c:cd:a9:37:
         76:1a:22:14:80:cd:36:07:7b:74:bf:01:17:96:6a:d2:aa:51:
         81:e3:74:da:0b:a1:90:29:2f:ed:20:86:c3:6f:05:0f:9f:73:
         e7:f1:61:b5:1e:e2:e0:64:73:be:ca:6e:ac:24:df:3e:de:1d:
         00:88:3e:26:4f:7a:f3:85:f8:d1:1b:e9:be:0c:20:0a:0b:16:
         bc:34:e1:51:98:f4:fb:1e:33:b2:be:3d:c9:20:08:69:5e:f1:
         be:8f:b0:57:7b:8e:74:11:9c:4b:50:1d:a2:3a:89:78:d2:58:
         65:17:21:d1:1a:5d:11:10:57:9b:aa:6f:f8:0e:69:45:19:93:
         8a:38:8d:12:69:9c:33:37:c3:a8:99:24:f4:2f:ff:38:13:96:
         c0:6d:1a:b0:b9:cc:a3:ad:97:a0:f5:0f:26:b9:41:c3:f0:70:
         bb:f4:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:08:32 2025 by rpki-client