Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          MEtttCH1WU1JSwd1cydj3szoE3USjD4lJKS6KBrV5LE=
Subject key identifier:   46:BA:8A:17:DB:3E:D5:FC:C2:1D:68:E1:F5:47:24:20:02:A3:2D:B7
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4C68918957A8F4C90710BEA437AA0839082E2A56
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:16 +0000
ROA not before:           Wed 05 Mar 2025 18:55:16 +0000
ROA not after:            Wed 04 Mar 2026 19:00:16 +0000
asID:                     266623
IP address blocks:        2804:3ed4:a544::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:91:89:57:a8:f4:c9:07:10:be:a4:37:aa:08:39:08:2e:2a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:16 2025 GMT
            Not After : Mar  4 19:00:16 2026 GMT
        Subject: CN=46BA8A17DB3ED5FCC21D68E1F547242002A32DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:08:9e:4b:71:3b:18:18:3c:0a:bd:fe:c1:
                    89:17:94:12:22:e1:9d:d0:03:48:b7:4c:b3:77:26:
                    33:fe:74:77:c9:f2:63:d0:5a:6f:b3:2b:58:18:25:
                    a8:41:8d:0e:19:50:d1:03:14:71:b8:49:1b:4a:7d:
                    37:d2:30:38:68:f7:5b:1c:60:a6:48:9c:10:cf:a1:
                    f7:7f:be:05:59:07:83:3f:9e:a6:a6:e8:c8:11:8c:
                    50:bf:88:c8:92:5f:4a:80:0e:0b:23:3b:80:bb:16:
                    ee:83:a0:6e:5a:5f:aa:47:cf:e5:d9:76:dd:cb:e9:
                    7a:1a:33:28:38:ef:a0:74:d4:ba:da:b4:29:c1:9e:
                    76:63:f0:69:0b:93:c3:59:8d:54:3c:54:4e:6b:74:
                    f9:b5:13:3f:72:a4:22:6e:66:54:c3:45:f7:23:1d:
                    a7:64:3e:30:31:a9:a1:37:0d:fd:a6:07:4c:b1:35:
                    ea:91:20:89:3c:82:b1:03:b6:f2:c0:89:26:79:58:
                    ff:4b:81:62:e2:db:a1:c6:3f:24:ec:14:f8:b7:6c:
                    4f:70:f3:22:74:51:9c:54:23:98:87:fd:ba:0d:eb:
                    c0:cc:ca:a7:25:dc:c8:a5:25:3e:38:7a:b2:a1:75:
                    e4:43:ed:5e:43:c3:c4:1a:65:50:0f:d9:45:c4:c6:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:8A:17:DB:3E:D5:FC:C2:1D:68:E1:F5:47:24:20:02:A3:2D:B7
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a613534343a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:a544::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:61:94:00:aa:52:1f:26:c0:86:ad:2c:0c:85:17:1d:0c:8a:
         07:15:20:dd:3b:36:81:67:f7:f4:f9:2b:8f:fb:22:94:9d:6d:
         78:65:cb:e0:29:3f:9a:81:d1:67:e2:09:2c:82:7f:b8:41:3d:
         8e:22:02:cf:c8:0b:a4:20:67:55:b0:c1:32:cc:2f:39:78:fb:
         71:0d:ab:f0:68:b8:41:38:50:83:5c:fa:0c:9c:a4:ae:ed:1a:
         81:ad:48:28:96:9c:87:de:be:dd:cf:32:a0:d0:c8:de:21:07:
         e3:fc:9a:5a:e2:aa:0c:5a:15:ca:f2:69:68:55:f5:5d:53:49:
         ac:42:c5:78:04:46:d5:81:d6:fa:82:90:f0:ae:bf:5a:98:83:
         8e:16:b8:d6:18:a9:45:5f:98:a4:26:00:34:e4:05:b6:d6:ed:
         72:1b:9c:dc:7e:46:56:97:b8:bf:6e:67:5f:4d:19:68:e2:90:
         d7:eb:d7:80:82:dc:af:4a:49:f5:88:51:38:7c:1e:a1:24:21:
         8b:0a:b1:bc:e5:b0:da:b3:5d:f6:aa:fe:75:aa:98:37:76:16:
         79:b4:7e:af:74:d6:1d:69:01:04:14:b6:4f:14:85:ef:b9:24:
         13:f2:6e:2b:20:59:fb:97:67:8e:51:ed:72:66:25:39:17:00:
         23:a0:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:57:30 2025 by rpki-client