Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa
File:                     323830343a363161303a3a2f33322d3438203d3e20323639323436.roa (raw, json)
Hash identifier:          5qlzSo9EV8Cmnwa2bF31y7Wjn3ku+A2geLmaUI4GJ4U=
Subject key identifier:   B2:3C:6C:5B:A3:AC:20:7E:3D:B6:03:32:06:59:2D:27:A6:B9:92:01
Certificate issuer:       /CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
Certificate serial:       3D033AC2013877B967CBFCBC0E59CD67A922482F
Authority key identifier: 56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa
Signing time:             Wed 07 May 2025 20:31:25 +0000
ROA not before:           Wed 07 May 2025 20:26:25 +0000
ROA not after:            Wed 06 May 2026 20:31:25 +0000
asID:                     269246
IP address blocks:        2804:61a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl
                          rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 10:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:03:3a:c2:01:38:77:b9:67:cb:fc:bc:0e:59:cd:67:a9:22:48:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
        Validity
            Not Before: May  7 20:26:25 2025 GMT
            Not After : May  6 20:31:25 2026 GMT
        Subject: CN=B23C6C5BA3AC207E3DB6033206592D27A6B99201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:7b:11:6b:12:98:56:e7:08:c6:68:73:5e:
                    da:ea:44:80:20:90:b1:c3:50:f3:bf:26:71:ca:c0:
                    38:77:81:a4:34:3d:0c:45:a6:2b:81:50:b6:90:ee:
                    52:84:a1:48:c2:ba:df:5f:05:10:dd:1e:8b:64:d7:
                    0c:3d:25:80:0d:cc:dd:2e:21:3b:71:12:4c:7d:3e:
                    ab:b3:cf:fa:bc:f2:73:d0:27:36:fe:db:4b:71:c7:
                    21:18:f9:6f:05:e3:90:24:be:96:44:22:cb:d1:56:
                    06:f9:3e:3e:ab:05:17:69:e2:4f:c3:c5:73:e7:17:
                    c4:36:fc:14:40:f4:ec:db:b1:76:f3:bd:09:f5:37:
                    70:a8:c2:21:cf:90:ca:b5:79:ba:c2:ac:7e:68:f2:
                    86:a1:ca:fb:32:c2:ae:5e:12:64:9a:bd:73:63:22:
                    ea:1d:92:0d:c6:03:71:c4:54:c8:c6:f3:e4:c7:e1:
                    89:8e:4f:ac:b6:3e:75:de:c6:34:44:56:69:98:ba:
                    37:86:62:08:60:57:d5:79:e7:cd:f0:1f:ea:df:3c:
                    5e:94:06:e6:49:0e:1c:39:97:31:21:f6:13:0e:71:
                    69:cd:aa:f0:93:32:11:45:ca:c2:c1:9a:6b:b6:b4:
                    26:93:f2:71:1e:89:42:f3:cc:13:1b:b6:35:bd:d6:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:6C:5B:A3:AC:20:7E:3D:B6:03:32:06:59:2D:27:A6:B9:92:01
            X509v3 Authority Key Identifier:
                keyid:56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:5c:31:ee:26:c1:cb:3e:4c:c3:eb:19:a4:1f:1f:f4:fa:
         fc:ce:a5:13:33:7b:b7:4f:e7:48:db:9c:cc:a0:7a:e2:01:37:
         b4:80:6f:1a:51:23:37:67:c1:52:09:bd:bf:0a:83:06:7b:0a:
         43:2f:93:e2:1f:ba:14:1d:ef:6a:94:f9:fc:30:c2:c3:d5:e3:
         04:09:fe:c4:73:43:bb:2e:ce:60:e2:9b:a2:8c:62:27:87:d3:
         8d:83:0c:14:0f:a0:73:73:ad:17:57:33:1b:8c:c2:36:d7:fb:
         d7:57:ab:40:f4:76:7d:9b:76:48:74:8e:de:37:15:74:67:ca:
         2a:81:74:90:2f:d6:3c:4c:cf:25:aa:a8:cb:f1:f3:44:e0:b5:
         fe:03:0d:fa:96:99:73:8e:6a:55:61:e0:19:bc:29:c0:64:08:
         49:47:a4:17:16:c7:2c:3c:6a:db:a7:e8:c6:af:55:8e:44:77:
         2c:55:be:1f:c0:73:e5:64:07:14:4a:d3:63:76:cf:dc:18:13:
         1d:4c:98:fe:56:80:9b:96:68:4f:bc:25:6f:fa:71:29:64:0b:
         ef:7d:8b:ab:24:db:c7:02:f9:ba:e0:96:a4:05:da:30:01:6c:
         c6:66:fa:f2:fc:28:24:81:c3:59:5e:68:ee:64:0a:98:c3:a2:
         d6:59:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:17:43 2025 by rpki-client