Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33392d3339203d3e20323639323632.roa (raw, json)
Hash identifier:          XaSoRDttNOMbimVoocW6RFur+KBkL2rIwyk0Oz+kIas=
Subject key identifier:   E4:09:25:91:CF:90:4F:81:16:A9:EA:36:6E:49:9E:3E:3D:EB:AC:CC
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       696F118FF1531E507B802CDB32A09326C4D0467A
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa
Signing time:             Thu 06 Mar 2025 08:16:22 +0000
ROA not before:           Thu 06 Mar 2025 08:11:22 +0000
ROA not after:            Thu 05 Mar 2026 08:16:22 +0000
asID:                     269262
IP address blocks:        2804:61e0::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6f:11:8f:f1:53:1e:50:7b:80:2c:db:32:a0:93:26:c4:d0:46:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Mar  6 08:11:22 2025 GMT
            Not After : Mar  5 08:16:22 2026 GMT
        Subject: CN=E4092591CF904F8116A9EA366E499E3E3DEBACCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:5e:78:3f:71:43:40:e3:f4:5e:f9:af:d3:
                    1a:f6:d7:9a:c7:f4:d3:ec:31:fa:2f:88:47:c0:a0:
                    02:62:47:00:31:a1:42:13:38:bd:fe:69:6c:38:57:
                    f9:8e:d9:a7:6a:40:dc:d5:a8:1f:35:6a:c5:2e:51:
                    c4:c6:e0:5c:da:9a:97:24:33:f9:f6:2e:02:63:e0:
                    d0:51:ab:09:63:7c:38:f6:2c:e2:c2:6d:07:f4:67:
                    a0:ae:01:17:c7:00:84:30:fd:70:b6:4b:cd:90:c1:
                    52:c8:23:5a:a5:82:3d:6d:ef:34:fe:1f:c8:08:b8:
                    cf:ee:5b:30:25:b1:7e:56:96:d7:86:99:06:a3:77:
                    85:f5:34:cd:ad:09:d3:4a:0f:b1:49:2b:73:ee:e7:
                    43:c8:57:88:04:5d:b0:76:c7:df:b5:cc:1a:c4:3f:
                    65:f7:9c:cd:65:8e:07:3c:c2:c5:e1:f3:ac:e2:b2:
                    e0:52:4d:ff:fa:48:87:b9:fa:e9:a1:85:5f:2b:8a:
                    cd:2b:9c:2a:45:da:83:27:27:48:99:22:67:c0:f0:
                    5f:b7:57:13:95:af:60:06:ed:34:3b:73:92:a0:71:
                    fa:8d:93:1f:77:4b:a5:24:bd:a5:03:06:62:ae:69:
                    61:86:00:a0:f9:09:2a:9d:12:ad:33:66:1e:a3:5e:
                    08:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:25:91:CF:90:4F:81:16:A9:EA:36:6E:49:9E:3E:3D:EB:AC:CC
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:82:85:85:b3:b4:49:f5:62:3d:61:88:ee:90:33:e2:c7:
         d6:b7:e0:65:aa:f3:ab:d2:3a:2d:99:16:c8:b7:97:5a:41:5e:
         60:48:4b:52:8b:60:f9:0b:9b:23:32:a3:4f:b4:8d:48:5c:c7:
         55:a0:df:f0:ec:33:6b:0f:e2:85:35:52:09:c5:4d:87:d5:f4:
         90:19:59:f2:6f:c8:fa:0a:2d:c2:c0:bb:dd:e3:4e:fa:c4:cd:
         65:d6:eb:86:ca:ee:cc:cf:fe:53:45:0f:b3:45:5e:bd:b9:d0:
         fd:cd:4c:5b:38:25:5a:33:28:fc:e8:9f:38:1c:02:7d:a9:0e:
         99:0b:2d:75:c7:65:b4:7a:3a:d6:fd:20:55:6e:f5:f0:3a:74:
         86:6b:bb:43:cd:99:b9:18:c8:a0:e5:63:7e:72:f8:7c:0b:5e:
         45:35:f1:e0:90:6b:e4:27:12:76:eb:f2:a7:a5:82:a3:52:7c:
         77:76:88:e4:fc:3e:d2:cd:ba:81:2e:99:ad:f6:69:5f:7b:d8:
         60:d1:8f:cf:3e:b6:22:ba:f0:ef:81:c8:93:12:cb:8d:69:d4:
         6c:bd:da:9a:86:18:e8:73:c6:69:77:84:10:38:42:44:a9:6b:
         b1:a8:94:fb:f6:66:ac:72:69:65:fc:4e:51:0d:c7:ac:23:db:
         e9:93:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:35 2025 by rpki-client