Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
File:                     323830313a62363a3a2f33322d3438203d3e20323633303833.roa (raw, json)
Hash identifier:          /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=
Subject key identifier:   93:78:DA:85:7E:85:EE:80:D0:A7:95:56:0A:AB:8C:03:97:07:F6:23
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       4085763536D47DB1CBAEAF963F7545F68F6FC4C8
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa
Signing time:             Thu 06 Mar 2025 01:00:04 +0000
ROA not before:           Thu 06 Mar 2025 00:55:04 +0000
ROA not after:            Thu 05 Mar 2026 01:00:04 +0000
asID:                     263083
IP address blocks:        2801:b6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:85:76:35:36:d4:7d:b1:cb:ae:af:96:3f:75:45:f6:8f:6f:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Mar  6 00:55:04 2025 GMT
            Not After : Mar  5 01:00:04 2026 GMT
        Subject: CN=9378DA857E85EE80D0A795560AAB8C039707F623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:d0:01:e8:46:7a:17:0d:75:d0:c7:6a:c3:
                    85:99:c1:2a:54:1f:8d:76:60:71:a0:fd:56:6e:3e:
                    a4:b8:fa:96:d8:ed:5f:9d:23:ea:ec:01:4b:42:29:
                    74:47:e2:5c:bd:16:55:9f:67:a5:a9:d5:34:5a:d3:
                    04:cf:77:3e:9a:0d:f6:80:3c:49:45:fa:85:e6:2e:
                    95:f9:f8:d1:25:24:e9:ee:00:8d:8d:fa:c7:c7:78:
                    1b:1e:1d:76:38:15:0a:1e:5e:49:4e:12:1c:d0:06:
                    b8:32:53:72:c9:a9:56:b1:02:3f:64:2e:9c:87:bc:
                    fa:11:c5:a2:c7:a0:a5:e8:b9:43:b0:0c:67:cb:45:
                    c3:e1:94:e3:53:11:74:93:4e:cb:5c:2a:8e:84:fb:
                    e6:f6:ec:de:1d:d6:ce:57:91:b8:94:fa:89:8d:00:
                    66:1c:41:67:f5:28:8c:ee:e4:7d:c4:a3:a8:0d:5e:
                    c7:e5:4a:93:dd:eb:68:eb:8f:48:e5:83:a0:28:6f:
                    c8:05:22:f1:ab:f8:7f:8a:f6:90:06:a4:9e:aa:b2:
                    10:ad:96:03:ac:ff:e1:cf:f4:89:2a:d8:cc:47:6b:
                    12:48:3f:39:a5:78:25:92:3d:12:f1:88:1d:bb:96:
                    f4:d7:dd:6d:26:04:ff:44:bc:52:59:0c:b4:48:62:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:DA:85:7E:85:EE:80:D0:A7:95:56:0A:AB:8C:03:97:07:F6:23
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/323830313a62363a3a2f33322d3438203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:20:97:eb:ef:cb:58:f9:5f:f8:a1:89:f9:76:b7:d8:0f:59:
         57:a5:1d:8a:a9:bf:01:77:04:34:61:c2:ad:64:35:b1:b8:83:
         dd:b6:99:36:f6:b9:19:da:94:d1:53:73:ee:63:d6:01:cd:fc:
         2c:21:93:69:b7:1b:c2:33:19:f2:f3:c9:ae:f7:90:ac:45:92:
         3a:a3:e3:53:84:69:2b:f9:b0:fe:ba:8b:06:9c:e2:30:c3:7f:
         6d:05:4f:e4:c9:a6:34:2a:fc:bc:e1:6e:cf:d1:3c:5b:f0:21:
         69:c1:0c:88:f1:79:65:67:bb:bc:27:17:5e:d0:49:09:8e:35:
         26:7b:9e:fe:6c:37:44:af:4c:ec:df:93:45:90:57:45:c3:a7:
         44:1c:41:3f:1e:d3:55:41:f0:76:02:15:85:fa:b6:6d:15:ba:
         06:f1:a2:2e:d1:84:42:0b:de:5f:c5:4d:57:3f:cd:9f:79:d7:
         79:db:01:b7:4f:87:97:36:4b:ee:84:e4:29:e6:40:cf:b7:fb:
         48:2f:a2:a7:35:fd:43:94:c2:87:92:18:7c:22:cd:05:6a:ce:
         ff:ce:74:7f:78:d8:b4:0c:38:35:d4:de:5f:7a:d3:b2:11:fb:
         5e:fa:e6:6b:84:dc:7a:04:83:93:8f:67:de:ad:78:55:df:16:
         6e:a8:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:58:44 2025 by rpki-client