Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3334203d3e20323730373339.roa
File:                     323830343a373061343a3a2f33322d3334203d3e20323730373339.roa (raw, json)
Hash identifier:          dFftuQlkSETjtVykQC5txl31EHRm3yUlAHnX7j2bwB4=
Subject key identifier:   72:39:0B:DB:69:57:75:00:EF:1A:9E:29:8D:55:84:A6:41:AD:DB:C5
Certificate issuer:       /CN=FD8C18E1D2945514AA3C8ACB1428F1EBBF805633
Certificate serial:       2401CF6F7A5D3B82AF65C58324535631DF47A644
Authority key identifier: FD:8C:18:E1:D2:94:55:14:AA:3C:8A:CB:14:28:F1:EB:BF:80:56:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3334203d3e20323730373339.roa
Signing time:             Fri 10 Jan 2025 15:03:02 +0000
ROA not before:           Fri 10 Jan 2025 14:58:02 +0000
ROA not after:            Fri 09 Jan 2026 15:03:02 +0000
asID:                     270739
IP address blocks:        2804:70a4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.crl
                          rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 13:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:01:cf:6f:7a:5d:3b:82:af:65:c5:83:24:53:56:31:df:47:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD8C18E1D2945514AA3C8ACB1428F1EBBF805633
        Validity
            Not Before: Jan 10 14:58:02 2025 GMT
            Not After : Jan  9 15:03:02 2026 GMT
        Subject: CN=72390BDB69577500EF1A9E298D5584A641ADDBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:bf:ac:01:75:1d:92:8f:7c:75:36:68:6e:
                    cb:9f:20:bb:8d:91:10:12:dd:6e:78:fb:54:3b:ab:
                    19:b2:32:42:5c:be:71:5a:9a:db:23:7c:bf:20:39:
                    71:63:14:79:bf:d4:f6:9b:c0:4c:46:57:90:a8:ac:
                    a3:18:31:c4:2f:32:82:3c:c4:e1:51:c6:cf:4a:bd:
                    b2:82:7e:20:bb:32:79:18:aa:da:cd:4a:d8:54:c5:
                    44:e4:4b:c7:63:89:56:07:dc:ab:08:84:c7:e4:d6:
                    3d:e7:2e:06:19:29:62:bd:9c:be:8f:7a:dd:fa:e9:
                    85:60:9f:ba:9c:0c:17:ba:29:d2:32:79:cf:fc:0e:
                    4a:0d:9d:5d:8b:c8:e6:30:80:eb:7b:41:ac:42:c6:
                    1c:a3:a9:31:fd:be:d2:23:d1:ad:58:9a:5c:bc:7c:
                    d5:4f:86:9e:8a:85:7c:2e:3d:3e:55:78:55:cb:fa:
                    2f:9b:29:ce:62:00:eb:de:a4:54:02:f9:f1:70:ec:
                    0c:ea:62:9d:51:b6:f1:4a:ce:63:25:48:af:b6:d5:
                    77:bf:5b:d9:ad:4f:46:a0:26:39:90:6a:4b:30:6e:
                    58:53:02:e5:e0:5c:5b:3c:a5:c9:58:75:b5:aa:ef:
                    64:7e:d1:da:93:a5:b5:28:cf:ce:18:40:e4:0c:89:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:39:0B:DB:69:57:75:00:EF:1A:9E:29:8D:55:84:A6:41:AD:DB:C5
            X509v3 Authority Key Identifier:
                keyid:FD:8C:18:E1:D2:94:55:14:AA:3C:8A:CB:14:28:F1:EB:BF:80:56:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8C18E1D2945514AA3C8ACB1428F1EBBF805633.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tzCM28VmLcWb2bAwF2h5ezzquFUiomV6jrRd8B4WYg3/0/323830343a373061343a3a2f33322d3334203d3e20323730373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:74:3a:2a:e1:ff:07:72:19:48:79:f7:3b:94:78:78:69:f7:
         20:3b:97:ca:3a:e9:d5:f3:85:6b:8b:4e:a5:dc:59:89:5f:c8:
         b1:21:f1:5b:a5:9b:33:96:8c:0a:5e:e0:1c:3b:75:6c:35:da:
         da:4e:6b:0f:dd:1e:43:17:8c:f6:02:16:97:e3:5c:0f:42:19:
         68:93:5d:a6:21:9c:6c:5e:af:11:33:a1:9d:cb:e6:4c:03:19:
         53:0e:16:a8:45:52:b6:f6:60:27:46:4f:97:f8:9d:bb:ce:60:
         b4:da:e3:5a:ae:cf:95:a1:5f:d8:66:2f:b4:ca:68:9c:82:b9:
         42:66:e8:ef:ea:8d:fa:27:b9:67:43:29:fb:d9:2d:be:fb:fa:
         68:b6:ee:0e:06:a9:58:64:06:be:92:c6:2d:67:5c:71:bf:16:
         59:7c:b4:61:0b:13:02:58:79:16:cb:f8:8d:a8:f5:b9:7f:a2:
         51:53:68:f3:fa:c1:a4:87:5a:18:50:e2:01:f9:c1:7f:3a:96:
         f9:98:37:57:1f:f8:3a:6a:5d:ba:39:52:f3:ef:7c:33:d6:db:
         73:ec:ec:6b:31:85:fd:b4:7f:a3:a8:ae:66:4e:6d:17:d9:af:
         ff:9f:42:cd:3b:a2:86:c1:7f:55:7d:6e:3d:50:67:1f:58:be:
         46:11:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:00 2025 by rpki-client