Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
File:                     323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (raw, json)
Hash identifier:          y8LJcjycfY1UJVKQP49+aa5SDzNSNeockL7W7RT1KcY=
Subject key identifier:   5B:0A:BD:F1:1E:E6:84:74:67:E2:6E:D9:BE:7C:47:DF:71:E9:8D:41
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       6424ACF35F1DAF21FB76C0EB104A95DA3AD23E5D
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
Signing time:             Thu 06 Mar 2025 15:26:03 +0000
ROA not before:           Thu 06 Mar 2025 15:21:03 +0000
ROA not after:            Thu 05 Mar 2026 15:26:03 +0000
asID:                     266385
IP address blocks:        2804:3708:8040::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 21:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:ac:f3:5f:1d:af:21:fb:76:c0:eb:10:4a:95:da:3a:d2:3e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Mar  6 15:21:03 2025 GMT
            Not After : Mar  5 15:26:03 2026 GMT
        Subject: CN=5B0ABDF11EE6847467E26ED9BE7C47DF71E98D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3a:35:a8:12:24:55:36:bb:0e:74:d7:c8:9d:
                    6d:e6:2c:6a:9a:86:b2:e0:3b:8d:96:39:d9:30:1d:
                    23:3a:0c:ff:0c:b5:4a:a3:39:13:1b:7c:4b:c9:11:
                    74:76:49:40:b1:e3:4b:62:cc:82:83:73:a6:7c:b0:
                    f6:a9:79:b9:b6:87:78:f5:99:cb:22:a4:56:7c:f0:
                    b3:bc:2e:22:cb:7f:38:66:72:0e:b9:31:36:1d:4e:
                    13:bd:d8:c6:3f:64:bf:1c:3e:60:6e:d4:68:7a:42:
                    09:18:88:54:a9:30:f9:4b:d1:1f:da:4a:b8:91:39:
                    1a:84:60:a9:b2:b5:a9:d6:dc:36:20:3a:09:a7:28:
                    85:52:ea:ef:8e:4e:f5:4b:ac:b1:04:76:dd:2b:cf:
                    fa:ca:7d:db:af:3a:39:22:50:2e:a2:ff:e0:f2:74:
                    0c:1f:45:f0:34:e5:0c:6a:61:6e:02:f1:e2:31:3d:
                    59:66:85:43:24:56:01:61:97:0e:e8:a0:5c:ce:52:
                    c0:9b:0d:1e:85:9c:31:90:a3:6e:d1:b3:1a:65:2d:
                    b1:25:11:fd:19:0c:87:f9:6a:28:35:56:ba:e8:12:
                    7a:73:1c:5e:73:dd:53:45:cd:7d:35:11:89:ec:eb:
                    ee:45:c4:c2:c4:d6:18:a4:6f:49:80:1a:1f:32:97:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:BD:F1:1E:E6:84:74:67:E2:6E:D9:BE:7C:47:DF:71:E9:8D:41
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708:8040::/42

    Signature Algorithm: sha256WithRSAEncryption
         ab:00:37:5e:20:81:0d:b2:94:ac:ac:81:11:22:ae:25:cb:b1:
         16:6b:3e:11:5c:63:79:3f:cd:56:3a:64:2e:3c:aa:e0:e5:4e:
         bb:6d:73:4e:65:fe:79:d2:0e:aa:ef:88:90:a4:93:3e:23:fc:
         8e:ae:9d:96:07:2a:8d:41:58:2c:26:31:c8:79:fa:14:28:7c:
         0f:e7:86:08:48:03:24:e8:13:58:39:dc:9b:89:9f:92:f7:99:
         2c:50:77:ac:a9:f8:5e:26:db:8f:f5:f3:33:0b:dd:74:cc:a3:
         c4:4d:28:48:b6:7c:f9:28:99:1b:90:b2:41:e5:20:66:d9:19:
         99:f9:84:ff:06:93:02:80:d4:20:42:0b:2a:08:80:b2:02:23:
         cb:f5:6b:1e:a3:dd:1a:10:49:cb:5d:f5:8f:c6:18:a9:21:92:
         3e:7a:cd:c4:85:ca:f2:39:b0:4c:f8:c3:ca:36:aa:fe:e4:66:
         35:20:c2:45:9a:10:55:e2:a7:c5:bb:ce:4a:8e:ff:a8:ad:b7:
         fc:69:68:e7:47:95:e7:ad:b6:06:15:5c:d2:58:ce:d2:fe:09:
         46:44:b0:19:61:a1:b4:c6:02:f5:07:dd:3e:02:4f:e3:bb:39:
         0c:16:41:e3:db:c6:f8:b7:f4:d6:ab:6f:d9:26:dc:43:ad:d4:
         7b:af:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:57 2025 by rpki-client