Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa
File:                     323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (raw, json)
Hash identifier:          KSeK4lhYmOTdbJQOlr7X8q333VSMjL2Wv4gSWrJVW14=
Subject key identifier:   2F:19:15:D2:C7:EE:51:FC:E0:D3:32:C0:67:F7:03:EE:E9:FA:4A:5C
Certificate issuer:       /CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
Certificate serial:       3BDFCB0A7C55F50BEDD12587CEF0377DE67A399F
Authority key identifier: F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa
Signing time:             Tue 28 Jan 2025 14:16:51 +0000
ROA not before:           Tue 28 Jan 2025 14:11:51 +0000
ROA not after:            Tue 27 Jan 2026 14:16:51 +0000
asID:                     272201
IP address blocks:        2804:837c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl
                          rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:df:cb:0a:7c:55:f5:0b:ed:d1:25:87:ce:f0:37:7d:e6:7a:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F
        Validity
            Not Before: Jan 28 14:11:51 2025 GMT
            Not After : Jan 27 14:16:51 2026 GMT
        Subject: CN=2F1915D2C7EE51FCE0D332C067F703EEE9FA4A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:46:14:24:bd:40:82:9b:eb:4f:b5:57:1e:
                    d9:67:08:d6:b2:e1:61:ef:60:86:56:9a:b6:06:3a:
                    9d:f8:88:92:ef:91:ae:d2:3a:c9:ff:b0:5f:ec:3f:
                    4f:16:df:86:29:7e:1c:ca:4d:be:51:3b:3d:29:b4:
                    0e:2c:7a:be:8e:85:29:0c:f3:73:06:0e:8b:b3:89:
                    2d:b7:48:37:62:dc:fb:ae:b8:61:86:b3:3b:b7:e0:
                    56:7b:38:6c:d3:f4:ab:27:e9:cc:7b:43:b8:56:fb:
                    fd:a0:3a:b3:43:18:01:24:fd:e8:bf:8d:42:ee:b5:
                    e0:29:3c:71:a9:86:13:a5:7e:c7:c7:5c:c1:42:dd:
                    98:aa:2c:fc:f1:df:b8:db:20:a2:86:2c:87:6f:39:
                    b1:2c:68:c3:a7:03:51:57:5f:27:1e:2e:d6:73:19:
                    25:ba:4c:92:30:34:97:c8:4e:3d:44:b4:e4:b5:2d:
                    26:78:cd:81:27:3d:0f:6d:3c:5b:ff:b4:60:18:7f:
                    cf:38:42:ae:4d:fd:8b:cd:e7:9a:33:f5:a9:44:a2:
                    75:15:5c:d6:59:db:8e:b6:80:6f:6e:cc:76:e0:58:
                    a4:3c:71:f2:69:3f:a0:27:2d:e0:1f:da:ef:41:47:
                    55:9a:ef:b4:7e:7b:77:b8:76:f2:6c:0a:c2:a8:15:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:15:D2:C7:EE:51:FC:E0:D3:32:C0:67:F7:03:EE:E9:FA:4A:5C
            X509v3 Authority Key Identifier:
                keyid:F1:03:2A:8A:64:5D:69:24:D6:71:2A:3A:9A:17:E2:FA:3F:B1:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1032A8A645D6924D6712A3A9A17E2FA3FB1F29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:837c::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:a4:c6:ee:e0:ff:9b:fb:da:ed:12:c8:94:69:36:55:90:
         62:7b:26:7d:9a:41:0d:09:d0:12:88:66:36:18:7c:e1:d3:6d:
         7d:df:33:b4:b7:4f:3a:2b:fd:8d:4d:78:f5:2f:ab:7c:0f:e5:
         77:b9:fb:8a:e8:f7:93:3f:b7:69:d6:ce:c0:d9:fa:ae:04:fe:
         55:ac:0d:87:42:1a:ab:82:2a:03:d7:5a:cb:ff:5e:f6:4a:d5:
         b3:af:65:ed:54:e4:89:58:4d:53:f5:78:6e:3e:83:9b:7d:1e:
         01:70:58:45:2c:e5:fa:1b:bd:e2:9e:2f:d4:e4:a7:52:fd:b5:
         1c:37:c8:ff:9e:96:18:a0:16:bd:e9:f7:e0:fb:bb:44:85:16:
         69:c5:ff:be:be:1c:54:90:19:2d:1b:7c:fe:ea:5b:69:12:11:
         73:44:3b:ac:ac:70:7b:e1:bc:3d:2d:a3:58:6d:74:1f:83:03:
         4d:fe:4e:20:8c:21:5d:02:ea:5e:8f:b3:28:c0:df:47:32:73:
         29:a8:82:b7:c8:2d:09:37:d9:0e:bf:58:c1:88:45:b0:dc:39:
         2b:8c:54:03:fb:91:bc:ec:a2:d8:fa:c7:c9:70:2c:f8:21:47:
         0e:8c:d5:a9:b7:42:dc:c0:e6:c8:08:43:ac:9b:ce:10:3a:94:
         48:eb:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:39:41 2025 by rpki-client