Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
File:                     323830343a333730383a3a2f33332d3333203d3e20323636333835.roa (raw, json)
Hash identifier:          2ea2zUok3QicjwTRLjyp8YcIwK2t9c4LcSt30zEetgE=
Subject key identifier:   9E:BA:1A:DF:98:AE:64:B1:CD:A0:4D:E1:20:51:9A:C1:1A:9B:34:80
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       5AF87FEB4F9F0EE0BDE4206ACD188722BE16AABE
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
Signing time:             Thu 06 Mar 2025 15:26:03 +0000
ROA not before:           Thu 06 Mar 2025 15:21:03 +0000
ROA not after:            Thu 05 Mar 2026 15:26:03 +0000
asID:                     266385
IP address blocks:        2804:3708::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f8:7f:eb:4f:9f:0e:e0:bd:e4:20:6a:cd:18:87:22:be:16:aa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Mar  6 15:21:03 2025 GMT
            Not After : Mar  5 15:26:03 2026 GMT
        Subject: CN=9EBA1ADF98AE64B1CDA04DE120519AC11A9B3480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:92:dd:37:43:0d:69:87:dd:d9:9a:b2:ef:
                    38:79:8f:ac:f0:2f:92:07:cc:a2:a3:86:0d:a8:d9:
                    68:e7:41:1b:01:ee:46:c0:73:88:af:44:39:a0:32:
                    44:4f:e6:a2:c3:64:40:eb:6e:c8:69:d7:9b:dd:b2:
                    19:2f:14:18:66:9c:cf:43:20:0c:7d:9c:ee:93:d7:
                    2a:d8:d9:1c:9c:ed:3d:d0:03:51:9e:fb:ea:9d:34:
                    19:b4:bb:e4:ec:fc:d9:e1:1f:24:05:a4:80:0f:ad:
                    12:88:7b:9f:3c:27:3d:95:8a:2b:ec:30:6b:93:1c:
                    e8:f0:af:82:0b:98:79:d5:21:37:08:85:8a:f0:40:
                    d3:24:af:c3:6d:d4:c2:d1:d7:22:1f:80:27:af:8a:
                    1f:c7:27:ba:28:5c:31:a2:28:a7:e4:df:94:b1:86:
                    82:0f:1b:35:1e:be:64:d9:51:d3:4d:63:ac:be:61:
                    19:9e:40:03:e1:37:78:3d:0e:a1:db:6f:05:b6:cf:
                    15:86:1d:9e:3b:fa:c6:e0:9f:37:ce:17:d1:89:47:
                    f5:b7:ad:40:a2:ba:c2:92:1b:e3:0f:c9:7c:a6:69:
                    e8:92:a2:b2:9a:1c:8b:57:54:e6:7e:bc:a7:18:53:
                    00:bb:22:1e:16:a9:ab:66:06:3c:d3:f6:8e:17:8d:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:1A:DF:98:AE:64:B1:CD:A0:4D:E1:20:51:9A:C1:1A:9B:34:80
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:fd:d2:9c:07:8e:12:b4:42:30:2b:10:89:63:a6:24:77:
         92:bf:11:0c:e5:d1:40:00:1f:93:47:48:cb:d3:76:c8:03:ec:
         67:8c:ec:79:fe:0b:1c:7d:7a:b9:06:13:70:f9:67:2e:52:17:
         3a:bf:f2:ca:20:ca:5c:73:91:48:44:af:13:40:90:0b:b2:d2:
         18:39:81:93:b9:23:e2:be:a6:c1:de:95:60:6d:75:0b:b4:35:
         8a:de:49:d3:a6:3d:f9:29:06:7b:69:31:e2:76:80:5b:11:f6:
         18:ea:ac:01:9f:72:db:ff:c2:55:3a:cf:63:80:9a:1c:09:0e:
         0a:b3:d4:05:1e:c0:a3:86:1e:ae:67:8c:f4:4c:6f:40:90:32:
         ca:ef:fd:af:5e:50:1e:a4:4b:b3:d1:c0:22:6a:af:d5:58:4a:
         59:83:6b:46:ed:e1:ff:20:87:a9:03:c1:c2:b1:4d:fa:7a:d8:
         65:f3:7e:7c:50:02:17:dd:61:c0:79:42:27:b8:f0:00:d8:07:
         90:68:ba:c8:5a:18:90:b0:bf:94:e9:82:56:0b:a3:48:9b:12:
         13:7c:5a:97:43:4b:84:69:15:32:bf:71:96:a6:b4:27:77:38:
         b6:98:46:08:ac:e8:c8:09:92:f4:6f:8a:39:1d:b5:22:2e:1e:
         1d:60:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:50:44 2025 by rpki-client