Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a633030303a3a2f33342d3334203d3e20323638333439.roa
File:                     323830343a346663383a633030303a3a2f33342d3334203d3e20323638333439.roa (raw, json)
Hash identifier:          JX/yeHynKplujRMdoekwSXz+gxE11nm3FE8N5QiqKh0=
Subject key identifier:   E7:F1:59:46:9F:34:EA:3B:97:43:33:2F:3B:77:5A:C0:03:21:5C:AB
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       4B03256D7E3DE7B2C0A8A5FAAEC2F9B03766DBBF
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a633030303a3a2f33342d3334203d3e20323638333439.roa
Signing time:             Wed 02 Apr 2025 21:51:10 +0000
ROA not before:           Wed 02 Apr 2025 21:46:10 +0000
ROA not after:            Wed 01 Apr 2026 21:51:10 +0000
asID:                     268349
IP address blocks:        2804:4fc8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:03:25:6d:7e:3d:e7:b2:c0:a8:a5:fa:ae:c2:f9:b0:37:66:db:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Apr  2 21:46:10 2025 GMT
            Not After : Apr  1 21:51:10 2026 GMT
        Subject: CN=E7F159469F34EA3B9743332F3B775AC003215CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:4c:33:81:fe:3e:4c:5f:fc:67:d1:c2:aa:
                    32:34:0b:9e:9f:96:df:b4:c4:d6:b1:3f:00:f7:cc:
                    8e:0d:5d:19:61:42:7c:dc:27:10:22:c8:2a:d1:25:
                    11:96:22:ad:b9:d1:2a:f8:5d:20:0c:08:78:1b:46:
                    f6:3b:bb:07:10:5f:b2:68:91:3c:02:59:9f:59:e4:
                    c2:aa:4c:f9:43:82:8d:43:7a:3c:63:fc:f2:58:c2:
                    07:26:1f:f0:a0:da:81:e6:bf:32:64:8c:ae:2a:40:
                    54:26:41:1c:6e:e8:3e:b8:7d:77:ed:1b:68:c5:bf:
                    99:18:45:d6:28:bd:ed:eb:f1:3f:24:2c:26:30:a3:
                    c7:4e:5f:16:86:a2:2d:ac:32:e2:e2:b5:8b:65:34:
                    30:3e:a1:57:f8:13:17:cc:09:69:fc:09:92:f7:23:
                    3e:67:ba:71:3a:4b:bf:65:b7:ef:57:9d:e5:91:6d:
                    10:9f:14:be:27:27:4f:f4:c0:b8:44:04:46:14:89:
                    e6:8d:08:0c:9e:48:ca:53:cc:fa:0e:31:9e:b3:33:
                    a4:62:ec:09:6c:a5:c9:58:35:8e:2c:f7:8c:51:b0:
                    c7:51:da:5b:61:db:6a:5c:e4:77:4e:ce:22:f7:86:
                    4a:f8:25:7e:86:53:45:ca:ef:dc:7c:af:dd:34:02:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:59:46:9F:34:EA:3B:97:43:33:2F:3B:77:5A:C0:03:21:5C:AB
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/323830343a346663383a633030303a3a2f33342d3334203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fc8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:73:d2:94:ff:cd:ea:f3:a9:1f:f0:dd:4e:78:86:3c:ec:28:
         d1:85:70:d4:89:bb:72:1a:7e:3b:ad:76:0e:22:3d:93:67:8c:
         f6:fe:8f:ce:f4:fb:a7:79:f1:88:ef:02:e3:e6:85:ce:20:9d:
         b0:e4:0b:a6:01:60:12:85:5b:34:50:7e:1d:82:de:e4:b7:53:
         c0:ab:1e:70:4b:5c:3d:b5:f7:35:1c:9c:e0:78:90:7f:c7:19:
         c2:6e:6c:00:55:3a:90:98:1a:64:5e:68:e3:9c:a0:9e:f8:d4:
         95:f5:1b:8d:2c:31:49:6d:4e:81:a9:65:cb:a9:23:c8:c0:22:
         ef:9b:ba:c3:c2:30:77:14:ed:11:9b:38:a0:26:07:2b:aa:f1:
         a9:17:bf:44:dd:76:4e:6b:7a:77:27:b1:de:5d:fa:c2:3c:2c:
         75:2c:ca:65:4e:96:c4:41:f5:c3:a1:cd:1d:48:9d:47:89:db:
         f0:61:ef:1d:58:93:73:dd:5d:54:32:eb:ad:17:a5:4e:5c:b5:
         0c:c5:76:db:6a:05:08:a1:62:25:6c:46:0d:4c:f9:c3:40:69:
         b6:83:f1:ef:90:3b:68:eb:0d:63:ec:28:d4:04:eb:45:39:2f:
         c6:33:32:11:92:26:bb:4b:fb:04:f3:e1:f5:9e:8f:6f:ee:e8:
         f9:97:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:01 2025 by rpki-client