Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d3332203d3e20323636343436.roa
File:                     323830343a333766343a3a2f33322d3332203d3e20323636343436.roa (raw, json)
Hash identifier:          eqxpPB5XAwja6jV+iVtvQUQ7DvtnMA9xHg8xBxaaJdw=
Subject key identifier:   6E:3B:6B:DF:17:55:01:78:3C:46:A9:6B:15:E0:47:23:9F:57:E9:F0
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       5E4EDF3A770046FBB78532763073E155F6AB9D30
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d3332203d3e20323636343436.roa
Signing time:             Fri 27 Dec 2024 13:19:35 +0000
ROA not before:           Fri 27 Dec 2024 13:14:35 +0000
ROA not after:            Fri 26 Dec 2025 13:19:35 +0000
asID:                     266446
IP address blocks:        2804:37f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 18:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4e:df:3a:77:00:46:fb:b7:85:32:76:30:73:e1:55:f6:ab:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Dec 27 13:14:35 2024 GMT
            Not After : Dec 26 13:19:35 2025 GMT
        Subject: CN=6E3B6BDF175501783C46A96B15E047239F57E9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:49:33:a1:88:d1:83:fe:9c:0f:34:1c:4f:
                    e8:62:c8:37:02:8a:45:ea:cf:cd:f8:9e:05:53:20:
                    3c:9f:06:77:7a:ac:f3:08:90:22:2b:e9:35:c3:18:
                    8b:fd:53:74:a5:89:00:d8:d4:85:36:10:92:67:35:
                    80:65:20:14:0e:14:1c:0b:0b:84:22:2e:c2:9a:ad:
                    86:8e:2a:7d:ec:30:e0:8e:4c:4f:a2:fc:9b:3e:1b:
                    fb:c1:36:9a:e7:07:9c:4a:e3:c2:d3:f8:e3:24:a7:
                    8c:8c:96:6e:6c:dc:0d:c4:56:fc:6e:4f:0f:13:92:
                    dc:3d:22:a5:22:54:e3:34:76:7d:75:e1:dd:de:1e:
                    53:e1:37:9b:d8:d6:57:38:94:ed:7b:dd:60:da:a7:
                    aa:1a:da:69:f4:71:e8:29:2c:c1:4b:14:ab:00:35:
                    3b:c0:b5:7c:50:68:aa:a9:16:e6:a6:26:ac:91:80:
                    bd:00:7b:b5:b4:16:cd:8d:54:fc:5d:9c:e4:86:76:
                    13:04:a1:c6:65:27:66:a9:63:cc:c9:44:51:e9:c3:
                    1b:1c:ac:08:9d:5c:04:4b:77:2a:b9:83:8c:fa:f1:
                    81:b5:a8:41:49:db:23:76:4b:c0:62:d0:64:9c:a3:
                    91:6f:f8:04:8d:b3:6c:22:13:6a:f7:f1:a8:38:d4:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:6B:DF:17:55:01:78:3C:46:A9:6B:15:E0:47:23:9F:57:E9:F0
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/323830343a333766343a3a2f33322d3332203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:76:90:1b:12:c8:c2:82:c5:7c:33:bc:b5:f9:e5:e3:c0:
         ed:41:5c:df:13:9c:05:f5:69:94:1b:43:ce:5c:5f:07:c6:29:
         7b:2f:ed:ea:23:e2:68:6c:9b:2f:b1:56:f5:7d:67:55:7f:ba:
         7c:e6:29:5a:0d:a6:f5:84:ec:12:97:70:10:b4:f2:4a:36:93:
         f4:85:0d:df:94:1a:61:37:25:f8:df:73:0b:a1:4c:a1:5d:da:
         7e:21:ae:a8:ca:52:3f:f4:2a:a7:8c:16:8c:de:42:6a:56:78:
         2b:6f:5b:9f:ba:11:3c:d6:3d:06:15:86:28:97:f9:e3:fb:51:
         f4:a4:1f:72:ea:5d:71:81:1b:a6:e2:d8:11:d7:c2:bc:5c:88:
         0e:fc:60:24:6a:a5:0c:d3:57:f9:05:6f:b7:87:14:47:53:af:
         6e:6f:76:9a:a7:95:14:6d:63:99:ca:89:85:2d:6c:ff:a2:9c:
         77:59:dc:b5:e4:07:c1:97:6b:84:ae:3e:ea:0a:23:04:76:04:
         aa:4a:54:7c:19:0b:ec:e2:e4:82:b8:67:5f:36:11:f9:56:5f:
         0e:30:22:d5:8d:30:d2:85:e2:9f:6d:ed:35:74:3d:44:3e:95:
         f2:73:93:34:22:9e:79:fd:15:ed:56:d9:72:36:de:d9:ce:36:
         dd:d1:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:54 2025 by rpki-client