Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa
File:                     323830343a333538343a3a2f33322d3334203d3e20323636323931.roa (raw, json)
Hash identifier:          lkmjvYDPqVkblOjpaEFz4u9Xo2srNA/KNaRy2PPUBr4=
Subject key identifier:   F0:BD:3F:2A:72:32:60:4C:12:7C:A0:72:1C:97:24:D8:4C:02:1B:B5
Certificate issuer:       /CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
Certificate serial:       2CA88C8D8F4FD7BA68897F4942DA678584E58306
Authority key identifier: F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa
Signing time:             Mon 09 Jun 2025 12:09:49 +0000
ROA not before:           Mon 09 Jun 2025 12:04:49 +0000
ROA not after:            Mon 08 Jun 2026 12:09:49 +0000
asID:                     266291
IP address blocks:        2804:3584::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl
                          rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:8c:8d:8f:4f:d7:ba:68:89:7f:49:42:da:67:85:84:e5:83:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EED8A6EE01716F638718C9B96D754CF5CB3706
        Validity
            Not Before: Jun  9 12:04:49 2025 GMT
            Not After : Jun  8 12:09:49 2026 GMT
        Subject: CN=F0BD3F2A7232604C127CA0721C9724D84C021BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:7c:e0:8b:7b:8f:43:f4:91:dc:38:70:d3:
                    10:f0:ac:28:46:bc:0f:14:57:b9:2c:0c:7a:37:70:
                    18:5b:33:41:ca:7f:54:67:9d:50:fa:2d:64:9a:23:
                    6b:58:10:f3:42:80:6c:90:e7:44:6f:c0:72:2e:c6:
                    d6:0d:1b:be:e9:d1:6a:f8:8c:ed:8c:17:a6:57:96:
                    9a:bf:c8:73:89:d6:a6:3a:6d:8d:c0:33:6a:7c:98:
                    de:5e:b5:a8:28:f6:6d:4e:94:45:e3:bd:bd:ea:1c:
                    bf:6d:a2:36:0a:08:48:d3:3b:dd:1c:4a:d0:f6:bf:
                    fa:2f:54:56:63:40:f4:f3:88:ef:00:2a:25:77:06:
                    7a:81:61:a1:08:aa:7b:f8:62:17:ba:d8:d4:97:fa:
                    49:a6:a1:c6:08:e3:b3:f1:47:48:f8:b0:e4:91:ef:
                    48:bb:b8:a5:4f:2d:bd:6f:ee:3c:9e:72:71:0e:52:
                    bf:3d:dd:00:9b:61:6f:f3:48:05:cc:a8:da:4f:6e:
                    7c:f0:5d:2c:a9:60:51:07:05:d0:84:a3:c7:a6:9a:
                    55:45:5f:7f:07:ef:e7:87:1d:02:44:71:ac:f4:7b:
                    4a:40:8f:10:bf:7e:19:d9:2b:b2:45:cd:ae:af:d4:
                    35:68:e5:ab:0d:af:f5:d3:be:36:de:ac:70:35:7f:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BD:3F:2A:72:32:60:4C:12:7C:A0:72:1C:97:24:D8:4C:02:1B:B5
            X509v3 Authority Key Identifier:
                keyid:F3:EE:D8:A6:EE:01:71:6F:63:87:18:C9:B9:6D:75:4C:F5:CB:37:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/F3EED8A6EE01716F638718C9B96D754CF5CB3706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3EED8A6EE01716F638718C9B96D754CF5CB3706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wYFcmBUnH4bQ5E8jUFGA9BHSnw2CxwHevfM3aqHFFfd/0/323830343a333538343a3a2f33322d3334203d3e20323636323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3584::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:46:1b:40:56:6c:57:18:95:52:6a:7e:d2:98:5d:1f:ab:
         2a:41:14:d4:5c:8e:02:09:89:20:47:c7:a9:74:e4:18:cd:fb:
         07:8d:26:66:1f:e8:7c:b7:24:03:11:53:a6:fa:76:ea:97:62:
         dd:49:66:a2:f0:c3:ac:bf:18:b7:34:21:38:04:2d:97:4e:3f:
         75:ed:ee:26:ee:a9:f0:23:c8:37:9a:1c:b0:c8:e6:17:f4:9e:
         17:d5:7b:7a:ed:23:3c:15:2f:1a:47:eb:71:9a:e6:29:73:d0:
         02:a4:0f:ab:48:e4:f6:f9:c2:ea:fe:ae:f9:fd:49:8e:99:39:
         a0:80:4e:57:9c:d8:54:56:4d:12:ff:53:fc:d1:9f:17:cd:08:
         2e:d1:49:46:fb:5d:65:1d:d7:fc:06:9d:55:87:3f:7a:2a:43:
         51:fb:96:0c:e9:43:e0:bc:06:3d:f9:8a:a2:03:0f:e0:79:cf:
         4d:01:82:48:61:33:26:75:5f:6f:73:79:e4:f5:14:d8:8b:bb:
         99:64:46:5c:46:e5:c0:ff:7c:8a:ab:b9:0c:32:ee:52:43:7e:
         46:1a:40:88:1a:69:4e:ec:75:02:b6:bb:e9:e6:27:20:80:1b:
         20:0b:f2:13:c5:df:db:c1:70:ee:be:ff:d3:be:9a:d4:cf:05:
         64:51:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:10:33 2025 by rpki-client