Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
File:                     323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (raw, json)
Hash identifier:          J+wRwomABKCbVl4EP5JD2Yfly2BPeIoqIkLJ9ZSvj4s=
Subject key identifier:   D5:07:71:BD:22:EE:16:1F:B2:85:6C:35:AE:72:65:4E:9C:5D:EE:65
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       60AFA5123BA67D1C06AF80315B6203147DAD655A
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa
Signing time:             Thu 06 Mar 2025 14:07:48 +0000
ROA not before:           Thu 06 Mar 2025 14:02:48 +0000
ROA not after:            Thu 05 Mar 2026 14:07:48 +0000
asID:                     270277
IP address blocks:        2804:698c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 07:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:af:a5:12:3b:a6:7d:1c:06:af:80:31:5b:62:03:14:7d:ad:65:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Mar  6 14:02:48 2025 GMT
            Not After : Mar  5 14:07:48 2026 GMT
        Subject: CN=D50771BD22EE161FB2856C35AE72654E9C5DEE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:87:cb:ee:67:6a:0d:c5:3c:50:cf:18:78:
                    64:a0:56:1d:21:36:7d:5f:33:16:56:68:61:e5:b0:
                    a9:6e:99:ba:32:b0:f4:e8:e7:4d:7a:64:9e:1b:a2:
                    41:67:99:92:90:cd:d0:73:9a:6c:6b:84:f1:72:8d:
                    a7:4a:2b:3a:71:5e:e4:a6:c9:d0:ab:1f:44:10:fc:
                    4b:75:ed:15:b8:36:32:a9:e6:02:e0:46:25:00:cd:
                    1e:0e:6d:dd:6c:b6:f6:f5:73:ad:53:33:15:db:4a:
                    fb:8d:82:5d:63:2f:72:d1:94:29:ae:1c:0a:94:85:
                    2e:39:d4:5c:e8:ac:db:5a:b9:a6:fa:18:24:38:91:
                    31:c6:bd:39:d2:6f:88:fe:b4:df:c9:f6:76:e0:7b:
                    31:c6:0f:2e:ce:b4:e4:4d:fa:9a:e3:4e:d5:0a:fe:
                    72:49:67:4b:12:a9:86:bb:98:c5:e1:49:49:2f:b9:
                    5a:fe:35:8f:a1:51:30:ea:25:6a:e1:2b:6e:14:35:
                    6c:6d:cf:1d:35:e1:ef:9b:fb:b5:d8:63:c9:f2:4e:
                    69:eb:07:cf:eb:95:f6:e1:dd:93:86:5b:16:6b:ea:
                    7d:4e:0d:5c:b7:d5:31:42:e8:af:0e:c0:cd:0f:95:
                    66:4a:fa:65:9f:72:1b:c5:d6:8a:6e:42:f4:35:d2:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:71:BD:22:EE:16:1F:B2:85:6C:35:AE:72:65:4E:9C:5D:EE:65
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/323830343a363938633a3a2f33322d3334203d3e20323730323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:cf:b2:a3:35:51:ee:72:11:86:20:6b:84:8d:66:01:dd:
         10:83:c0:9d:98:d9:c1:bf:2a:3d:78:7e:2b:11:4c:b5:20:58:
         f6:e4:92:df:18:eb:03:88:b6:38:29:1f:f1:43:52:b4:9a:cb:
         41:39:1a:fb:00:fd:eb:a1:7e:bf:e6:98:3a:dd:67:7c:8f:70:
         d0:e0:cb:8d:6d:36:02:cf:7f:09:60:a7:09:7f:12:2e:92:fa:
         89:74:bd:58:ef:c6:1c:37:a3:1f:cc:c1:6c:fc:30:57:39:54:
         d4:89:08:5b:67:ad:21:08:ed:58:8a:87:2a:ce:0d:ec:0a:86:
         d3:23:13:27:e6:7f:a3:4a:a9:2a:74:81:a1:7d:ac:45:49:0e:
         b6:06:0f:d9:81:eb:ff:4b:6e:64:04:56:d4:1a:24:97:63:56:
         25:92:ea:e0:2f:26:62:3b:3b:61:12:ee:6e:b0:c1:26:89:1e:
         55:1c:f4:f5:18:0d:d0:f7:1f:bb:70:fc:14:e9:a1:0b:6f:3e:
         bf:90:16:7f:ad:74:1f:68:05:9a:f9:0a:d1:83:db:72:50:63:
         5e:ca:b9:0f:19:4b:a5:bf:ad:87:48:63:ae:23:3d:26:1a:59:
         10:1c:6e:ea:a9:cf:54:a2:f0:22:fe:5a:0d:f7:01:a6:e1:2f:
         cf:75:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:26 2025 by rpki-client