Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          75NUT72O1zgPVVUdm7qqef4yd6jHRhYX+riZ0fZmPdo=
Subject key identifier:   FA:99:74:73:CC:98:93:A0:E0:3D:54:A1:E0:5B:79:19:8D:6B:6D:CD
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       7E3D3CB810D039346A55F1E35D14DF41C0FF253B
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:16 +0000
ROA not before:           Wed 05 Mar 2025 18:55:16 +0000
ROA not after:            Wed 04 Mar 2026 19:00:16 +0000
asID:                     266623
IP address blocks:        2804:3ed4:73aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 08:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:3c:b8:10:d0:39:34:6a:55:f1:e3:5d:14:df:41:c0:ff:25:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:16 2025 GMT
            Not After : Mar  4 19:00:16 2026 GMT
        Subject: CN=FA997473CC9893A0E03D54A1E05B79198D6B6DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:2d:d5:1f:a9:ad:5f:4b:f7:24:27:7c:bd:
                    86:dd:4b:03:59:da:99:21:08:d1:2b:97:8c:93:0e:
                    4d:80:16:b9:76:bd:07:3b:b9:41:5f:2d:be:f8:5a:
                    4a:61:2a:a3:d6:b6:97:56:b2:fc:b9:9b:7c:dc:25:
                    2d:15:41:af:33:9e:ac:da:4b:2e:bc:09:37:ff:a7:
                    42:8e:25:99:4e:28:a8:c4:1a:6e:3e:19:5d:56:99:
                    84:cb:82:cf:94:17:ea:a2:3c:cb:d3:de:32:9f:6b:
                    f4:04:6f:9f:8d:66:13:2a:e1:49:20:6b:0a:a5:3c:
                    10:1d:94:d6:11:6a:d6:da:9d:ea:ca:17:1a:77:55:
                    0d:6d:cd:06:48:75:1f:5e:5a:14:29:a3:1e:c7:98:
                    a1:9b:9e:ec:71:83:51:7c:ce:68:c8:dd:0f:19:9e:
                    12:a6:35:0c:68:58:85:25:1b:42:02:b7:a5:7f:72:
                    11:5b:df:03:21:4f:48:a4:b4:9b:7a:79:93:ab:13:
                    77:f2:69:02:9f:b4:f6:f8:2f:e9:2f:b6:db:0f:2e:
                    74:87:7c:a1:6b:16:b7:98:0a:08:04:c2:7d:aa:0a:
                    e9:d3:e5:52:56:9b:0b:de:31:26:dd:e5:af:1f:0b:
                    43:5f:bf:35:08:f2:39:c2:d1:ee:45:f2:5e:99:2e:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:74:73:CC:98:93:A0:E0:3D:54:A1:E0:5B:79:19:8D:6B:6D:CD
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a373361613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:73aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:d7:1f:06:29:f9:6a:00:88:55:96:3b:ee:9e:e6:89:c5:
         77:e9:fc:18:fc:f7:34:fc:3f:a5:c4:15:5d:62:3e:d7:e6:46:
         40:fd:99:1c:d2:82:4a:61:79:90:47:92:99:0a:f4:02:61:c1:
         e5:db:68:29:2f:a9:17:0e:c8:a7:ff:7c:43:12:ca:d0:e7:1e:
         9e:00:13:16:dc:50:70:2b:0b:fc:5c:27:fb:13:95:72:01:d0:
         3c:ec:45:a0:c2:bf:a7:19:1c:03:ac:2a:62:bd:6a:67:b6:9d:
         b2:93:e0:47:ba:06:0b:96:dd:84:6a:3b:15:2f:58:a0:46:fa:
         53:ee:57:e3:ee:91:50:54:6f:b4:c7:f8:aa:a6:d9:6e:50:32:
         4f:d9:3a:fb:89:71:3a:37:11:f8:8e:b7:fb:c6:70:19:0d:36:
         ac:4d:a3:d4:95:3d:93:a7:3b:9e:ce:0a:ba:46:28:fa:fc:a7:
         46:d2:d0:30:80:a1:c6:0a:82:5c:b4:84:57:3f:c2:99:7f:df:
         ae:db:ba:c0:70:ce:7d:ef:a9:08:10:35:24:b0:ef:a8:4e:9a:
         e5:6a:4f:52:0e:d0:05:ed:3c:05:85:de:db:6b:5b:09:1b:e7:
         34:93:b6:a1:f6:75:31:d2:f9:4a:09:7c:a7:bf:50:02:ab:af:
         c4:a6:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:28 2025 by rpki-client