Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
File:                     323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (raw, json)
Hash identifier:          edskOHpW2pdhHQhvjIVKnvr7EZZ66i7jQPAm2cJdUjw=
Subject key identifier:   0F:E5:0B:03:D4:56:A8:05:6C:C0:11:00:C7:EA:AC:25:60:C5:AF:38
Certificate issuer:       /CN=FF2D630E978417F06D6A73D00219A91B07536236
Certificate serial:       0C192EECC8AF234991A95B3063D5C993CA579E3E
Authority key identifier: FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
Signing time:             Wed 03 Apr 2024 18:30:21 +0000
ROA not before:           Wed 03 Apr 2024 18:25:21 +0000
ROA not after:            Wed 02 Apr 2025 18:30:21 +0000
asID:                     269435
IP address blocks:        2804:6490::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl
                          rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:19:2e:ec:c8:af:23:49:91:a9:5b:30:63:d5:c9:93:ca:57:9e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF2D630E978417F06D6A73D00219A91B07536236
        Validity
            Not Before: Apr  3 18:25:21 2024 GMT
            Not After : Apr  2 18:30:21 2025 GMT
        Subject: CN=0FE50B03D456A8056CC01100C7EAAC2560C5AF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:99:e9:da:22:c5:48:83:f4:c5:b3:8e:93:
                    0e:8e:e5:da:02:f4:32:73:13:79:4c:5a:a5:93:f2:
                    59:62:93:a8:32:c7:b1:7a:bb:75:48:45:e8:58:d0:
                    25:a2:64:c5:6a:72:b1:59:1a:56:99:f0:b4:a5:73:
                    32:c3:90:03:18:c5:4b:48:68:c5:34:c6:28:07:e1:
                    85:cc:29:ca:17:7a:85:04:40:3d:28:db:6a:08:82:
                    61:58:e4:8f:c5:b2:6c:a1:c1:c1:85:fb:b7:21:56:
                    f1:96:86:61:84:ae:fd:52:0d:ff:f9:27:e2:4d:e2:
                    91:51:18:08:7b:62:bf:1c:fb:b5:2f:dd:da:09:e4:
                    8b:b1:aa:9f:b1:95:0f:8f:bc:1e:ea:54:da:0c:04:
                    0a:9c:a2:9b:16:c9:df:36:d6:c1:fc:00:ad:b1:8d:
                    51:6c:83:13:0d:f3:9d:20:de:33:e7:bc:5d:4a:32:
                    74:9d:49:4b:d3:c8:9e:77:06:44:86:00:af:68:65:
                    6b:8d:d2:5f:11:e9:c7:2b:1c:7c:12:3c:11:57:65:
                    da:96:1c:80:16:20:3d:1d:8c:e1:9c:83:c8:ca:6a:
                    a7:2b:df:99:fc:84:a8:e0:ba:f0:88:3e:9b:3d:7d:
                    ba:3f:0e:00:95:30:ae:7c:46:40:e8:40:4c:aa:69:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:0B:03:D4:56:A8:05:6C:C0:11:00:C7:EA:AC:25:60:C5:AF:38
            X509v3 Authority Key Identifier:
                keyid:FF:2D:63:0E:97:84:17:F0:6D:6A:73:D0:02:19:A9:1B:07:53:62:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/FF2D630E978417F06D6A73D00219A91B07536236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF2D630E978417F06D6A73D00219A91B07536236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/1/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6490::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:85:a8:fc:b7:70:17:4c:d9:60:6e:c1:89:6b:73:05:7c:73:
         9b:56:85:40:38:95:b9:8f:09:60:1b:c2:1b:0d:fa:ff:7a:5a:
         24:6b:92:55:79:3d:fe:ec:56:ff:d5:db:c4:f1:ff:a2:45:3b:
         5e:12:de:86:94:3a:47:12:e2:f5:ba:96:b3:da:5d:b1:2b:07:
         2e:15:1c:04:24:f8:6d:3c:7f:4c:d8:7c:08:99:ab:45:bd:4d:
         b2:2c:58:a8:64:52:10:a3:24:80:9b:cd:30:b8:04:3a:7f:14:
         ac:93:9b:35:de:f2:85:b9:2f:a4:0a:4e:b2:f6:6b:13:c5:91:
         9a:fc:a8:9c:24:fb:1b:f1:e5:2e:83:d4:d1:79:e6:e6:f4:a8:
         d8:fb:8e:14:f2:9d:ab:41:6a:42:1d:8c:82:52:69:45:ce:93:
         4e:ef:08:7a:47:f5:fd:de:09:e4:de:5e:74:e3:cd:a5:e6:e5:
         43:50:7f:5a:88:f2:32:f1:d0:04:eb:5d:82:22:f1:0e:55:58:
         03:f0:70:05:eb:a3:3c:70:c9:95:8b:7c:e7:d0:08:98:e4:da:
         ff:ee:9e:0d:2e:2d:88:3c:84:07:a5:0c:99:5a:39:95:20:31:
         8a:5e:c9:ad:76:8c:9c:de:25:9b:4a:0c:5b:69:48:73:79:a6:
         5c:20:59:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:19 2025 by rpki-client