Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
File:                     323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (raw, json)
Hash identifier:          jwGypfEcZTI1iJl0YRFLhbSSCMtq7GuPrRa/9uXHV5g=
Subject key identifier:   F7:EE:25:08:9C:83:41:86:8E:00:A8:0F:53:58:9C:BC:EC:0A:C4:DC
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       0D8BC7519BA26A1C5927A1082873C89C76144145
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa
Signing time:             Thu 06 Mar 2025 17:11:10 +0000
ROA not before:           Thu 06 Mar 2025 17:06:10 +0000
ROA not after:            Thu 05 Mar 2026 17:11:10 +0000
asID:                     262772
IP address blocks:        2804:30e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 18:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8b:c7:51:9b:a2:6a:1c:59:27:a1:08:28:73:c8:9c:76:14:41:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Mar  6 17:06:10 2025 GMT
            Not After : Mar  5 17:11:10 2026 GMT
        Subject: CN=F7EE25089C8341868E00A80F53589CBCEC0AC4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:6c:9b:da:80:70:8a:b6:2d:01:7a:3f:5e:
                    78:e6:26:be:38:19:5c:06:a8:9d:13:2e:6d:44:7c:
                    09:08:46:5c:8a:3a:af:bf:f9:fb:7f:9c:61:eb:bd:
                    76:ce:50:f9:9c:2b:23:30:cc:25:cb:98:94:51:88:
                    08:13:ff:a4:79:7d:f1:5f:91:90:89:e9:e6:ce:7e:
                    86:bc:6d:70:44:48:95:52:40:d6:3e:a8:1a:e7:b9:
                    d0:f3:a5:28:69:8c:2e:d5:49:d5:5d:a1:e1:72:96:
                    0e:bb:3c:30:30:6e:58:44:11:ab:b7:dc:21:56:80:
                    03:c5:a0:24:c2:b9:d7:26:89:6c:e8:d8:ed:9e:1a:
                    40:af:3b:7b:7c:a6:68:19:b1:20:5d:2c:9c:f1:99:
                    cc:06:9e:6e:1b:b4:78:24:14:cc:f5:0e:44:64:03:
                    0d:2e:59:c0:e3:30:08:b1:03:b5:60:2d:4a:f4:64:
                    58:aa:f4:18:6c:fc:ff:f1:17:8b:72:54:d6:28:52:
                    2e:86:06:9c:03:4d:2d:20:8a:cb:bd:73:63:4b:65:
                    b3:92:ba:fb:01:04:d0:b9:80:c9:df:30:89:a3:d8:
                    1c:53:a8:03:45:ee:ed:8f:40:a7:08:b8:ad:75:16:
                    ef:74:37:01:12:e7:6f:92:5d:42:af:0a:dc:5b:44:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:25:08:9C:83:41:86:8E:00:A8:0F:53:58:9C:BC:EC:0A:C4:DC
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/323830343a333065343a3a2f33322d313238203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:94:fd:43:49:2a:eb:b4:d7:64:49:b6:79:7e:fe:62:cc:
         0b:40:96:09:78:c6:0a:b8:b7:96:af:1e:f8:ad:f5:40:d3:39:
         b9:0c:9c:f6:27:bc:50:9c:1a:bb:02:eb:4d:cb:98:7a:76:e1:
         1f:3b:c7:6c:c4:b0:43:0e:08:81:bb:5a:6f:60:46:77:fd:e1:
         fb:f0:90:91:53:a9:4c:2e:ea:30:30:c9:fc:d0:21:02:23:0e:
         d7:ee:ec:4e:1a:96:18:76:42:73:0e:63:fd:6e:87:71:a3:11:
         ac:af:90:1e:8d:92:1a:6a:17:9f:b5:aa:35:cb:5e:aa:e9:ad:
         59:3e:4f:f6:cf:2d:66:58:fe:92:4f:4b:b6:af:a2:51:ef:77:
         c3:a2:b2:fb:56:d1:2f:f0:73:ab:39:70:64:a7:5c:45:7a:d2:
         ef:9e:6a:53:7e:48:59:05:59:17:61:e0:ac:d8:e0:da:9e:e8:
         6d:a5:d3:99:65:04:d8:02:90:00:f0:0a:8f:d4:c5:1d:60:80:
         17:9e:f6:44:01:c4:49:1c:63:e4:e2:85:75:fd:11:1a:69:62:
         b1:f1:ec:57:90:3f:bb:c6:b6:4b:93:33:29:ca:c5:7d:29:64:
         f3:cf:31:5c:70:02:3d:72:6e:02:80:f6:fd:07:3a:ef:5c:8c:
         55:f6:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:52 2025 by rpki-client