Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/323830343a353365343a3a2f33322d3332203d3e20323638363134.roa
File:                     323830343a353365343a3a2f33322d3332203d3e20323638363134.roa (raw, json)
Hash identifier:          cjAoMPM2psEaSw8zxB4plQgXEYZIMYrNCpWljAZm2tQ=
Subject key identifier:   41:18:0F:20:59:3B:0B:2A:98:FD:64:A6:96:19:D5:AD:10:7F:A5:32
Certificate issuer:       /CN=FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6
Certificate serial:       6491CEC43651D55A4881AED0601E79E4A948F6F9
Authority key identifier: FE:4C:0A:FB:B9:25:3C:1A:5D:BC:E0:0D:E2:D1:F6:9C:AB:C5:41:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/323830343a353365343a3a2f33322d3332203d3e20323638363134.roa
Signing time:             Thu 06 Mar 2025 19:13:31 +0000
ROA not before:           Thu 06 Mar 2025 19:08:31 +0000
ROA not after:            Thu 05 Mar 2026 19:13:31 +0000
asID:                     268614
IP address blocks:        2804:53e4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.crl
                          rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:ce:c4:36:51:d5:5a:48:81:ae:d0:60:1e:79:e4:a9:48:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6
        Validity
            Not Before: Mar  6 19:08:31 2025 GMT
            Not After : Mar  5 19:13:31 2026 GMT
        Subject: CN=41180F20593B0B2A98FD64A69619D5AD107FA532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:91:62:ac:52:56:17:a2:33:ef:55:9a:f7:
                    3f:0f:78:2e:f6:fb:2b:33:15:f8:e9:45:b2:99:38:
                    1d:74:ca:d4:df:98:89:90:69:28:db:9d:4f:cd:94:
                    03:34:57:1b:5b:e0:eb:03:4a:a7:b3:20:a7:6e:bf:
                    d7:36:c3:9e:41:68:22:d6:1f:86:82:c8:2f:f5:d0:
                    18:2c:0e:23:76:3c:4f:10:7f:8a:ec:ff:db:96:08:
                    88:eb:6a:36:5a:ba:ca:e8:4e:11:b8:e8:65:3b:a8:
                    00:d0:e4:c3:60:12:36:b7:43:2d:da:65:22:99:f4:
                    b2:6f:d9:15:c2:66:f2:d0:0e:c6:b2:8c:0c:f0:e4:
                    b9:58:e7:0e:a9:ef:14:f8:a5:61:03:a8:82:20:58:
                    45:fc:c3:f0:92:91:2e:f0:0d:a2:1f:f1:ab:5c:9b:
                    9a:71:36:db:9e:5d:7d:47:b9:80:83:df:cf:d5:cb:
                    15:cc:2f:bd:d6:60:79:49:f0:f1:32:60:8a:7a:76:
                    26:64:ab:80:af:84:d8:e3:53:77:fd:ab:9f:c5:4c:
                    84:15:75:3b:88:bf:5b:52:3a:17:b6:ec:c5:b3:b2:
                    85:47:31:cd:59:a5:bf:42:83:8b:f3:8a:f7:24:b1:
                    ac:ae:c5:05:2b:18:11:51:ab:74:f5:d8:d3:16:1a:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:0F:20:59:3B:0B:2A:98:FD:64:A6:96:19:D5:AD:10:7F:A5:32
            X509v3 Authority Key Identifier:
                keyid:FE:4C:0A:FB:B9:25:3C:1A:5D:BC:E0:0D:E2:D1:F6:9C:AB:C5:41:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4C0AFBB9253C1A5DBCE00DE2D1F69CABC541A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/1/323830343a353365343a3a2f33322d3332203d3e20323638363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:67:f0:b7:d3:ce:a0:cb:c6:0f:38:bd:96:c9:3b:5a:6c:bb:
         a4:c3:92:33:9b:ed:f4:24:cc:2d:ae:c9:1d:6e:78:c1:a5:e4:
         28:67:58:e5:66:fd:48:93:8b:5b:74:43:a2:2a:57:8a:bc:8d:
         53:a1:25:5c:34:f4:a8:66:c5:10:ed:3d:ac:fc:8b:ef:79:44:
         5b:eb:1d:0c:2c:56:08:3f:ca:de:ee:a1:89:24:58:3c:26:43:
         1f:71:55:c7:8b:cc:a3:89:94:6d:d2:d7:8f:77:fb:91:81:18:
         70:1b:81:a5:9d:cd:03:96:ff:80:82:be:7c:45:fa:67:c0:85:
         70:1f:19:3e:aa:5d:7e:c6:14:3f:55:c4:4b:c0:60:1a:b3:d6:
         38:1d:c0:24:fc:d3:61:e6:98:55:f8:e3:9d:ca:52:de:46:64:
         a7:9f:0e:98:94:16:47:c2:79:b1:a6:4a:1a:60:8d:39:3c:2a:
         66:b1:64:0d:f8:48:32:1a:57:20:dd:fd:37:1e:52:29:c8:65:
         bf:48:25:17:3f:d6:91:96:04:f4:eb:8b:59:22:79:3c:15:f1:
         ad:4d:56:bf:52:a8:a1:79:d4:11:80:00:a9:ff:aa:9c:18:ad:
         ee:17:76:b1:34:c0:96:68:e2:36:2f:44:b4:34:27:9b:60:e8:
         33:01:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:38:00 2025 by rpki-client