Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa
File:                     323830343a366664343a3a2f33322d3438203d3e20323730363837.roa (raw, json)
Hash identifier:          zfDvBXOgdx50a0Xte5V/R9/XIscEwRmT9nttIOTrsVA=
Subject key identifier:   5F:98:08:F7:94:85:0C:C2:E3:3E:99:01:15:33:9A:CD:40:98:40:B7
Certificate issuer:       /CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
Certificate serial:       2E9C9B22465DD2F74932AA23BEB9C92811BB6A9F
Authority key identifier: F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa
Signing time:             Thu 06 Mar 2025 11:13:57 +0000
ROA not before:           Thu 06 Mar 2025 11:08:57 +0000
ROA not after:            Thu 05 Mar 2026 11:13:57 +0000
asID:                     270687
IP address blocks:        2804:6fd4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl
                          rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9c:9b:22:46:5d:d2:f7:49:32:aa:23:be:b9:c9:28:11:bb:6a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
        Validity
            Not Before: Mar  6 11:08:57 2025 GMT
            Not After : Mar  5 11:13:57 2026 GMT
        Subject: CN=5F9808F794850CC2E33E990115339ACD409840B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:55:7a:10:70:2b:47:9f:ac:33:ac:10:7d:f9:
                    81:bd:c7:7d:a7:35:6a:7c:9a:c4:90:f0:3f:91:76:
                    ab:ba:3c:4a:5b:b3:29:9a:de:f6:47:3d:1d:17:f3:
                    0f:03:f6:83:fc:32:c6:55:93:e1:76:59:09:83:e3:
                    03:92:20:e8:78:c8:6d:f3:34:94:a2:53:6a:4e:ab:
                    86:1e:1c:34:d8:e3:94:13:25:d5:30:14:23:41:56:
                    38:30:a2:95:3e:30:66:c9:50:3b:2c:60:1b:9a:bc:
                    57:41:e9:e5:01:48:fd:d4:31:5d:5a:75:69:3d:20:
                    6f:68:d8:a9:b1:d9:71:26:89:7f:00:66:98:2b:61:
                    bc:95:4f:7e:b1:ae:f7:d9:5a:6f:f5:a5:26:45:35:
                    e7:b6:e3:88:5f:50:2d:57:2b:4e:49:2b:a3:44:0f:
                    c2:1a:7f:7e:81:73:5a:d8:fb:5c:5e:d5:72:99:09:
                    8f:2b:0b:79:64:6d:4b:0d:e5:ca:2c:39:1f:c5:e9:
                    b9:e1:0a:0b:75:ef:da:06:15:02:65:df:60:a6:87:
                    c8:c3:a8:dd:13:94:24:cb:e8:0a:78:35:94:69:03:
                    94:2a:35:d1:3e:0b:42:7b:3f:b3:ce:38:f3:31:b1:
                    77:cb:d0:30:57:d2:8b:63:be:1c:5c:13:8f:0f:10:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:08:F7:94:85:0C:C2:E3:3E:99:01:15:33:9A:CD:40:98:40:B7
            X509v3 Authority Key Identifier:
                keyid:F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/323830343a366664343a3a2f33322d3438203d3e20323730363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:67:a3:54:74:9b:c8:27:be:4e:c4:13:11:80:2f:b6:1a:eb:
         33:2b:22:61:c3:c2:5d:a3:9a:36:a9:3a:3b:6b:0d:e7:88:0a:
         69:fc:82:8c:13:a6:c1:48:c5:9c:00:2f:c3:ab:e7:7e:a2:23:
         9e:78:95:14:2a:b6:d0:d7:de:8e:de:b3:96:72:bc:7f:7a:9a:
         5c:94:be:74:f8:54:45:69:50:1c:a7:0e:e4:d2:f0:d3:d0:08:
         e1:ee:dc:53:cf:04:d0:7b:7e:23:11:c3:6d:41:23:2c:e0:29:
         e2:a2:1d:78:30:3c:cf:c2:34:5a:98:95:43:e6:00:5a:ad:c1:
         e9:1c:a9:95:4f:c2:4b:b8:69:6b:0d:75:36:2e:36:49:57:f3:
         35:cd:0f:5f:e6:1a:f6:c0:2d:6f:d1:7f:1a:70:13:95:fc:08:
         78:cd:96:56:bf:17:cd:f0:3e:4d:04:a7:96:4d:7d:ed:1e:e8:
         c2:b2:b5:b0:74:0a:f5:2c:5a:a4:86:93:b8:49:62:bd:4b:9b:
         8b:9d:4f:ed:da:02:be:9a:37:f5:c9:21:ec:7c:6b:db:67:b5:
         b9:6b:e5:0b:39:db:2d:8d:67:5f:96:cb:d8:06:9f:b4:dc:87:
         c9:c0:0f:97:13:a7:88:68:3b:6f:ab:84:c6:22:10:34:0a:aa:
         8b:56:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:00:56 2025 by rpki-client