Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
File:                     323830343a366566303a3a2f33322d3438203d3e20323730363238.roa (raw, json)
Hash identifier:          FX2mqRTExM6Srb5g02w6obZRgwBMNdMZ7q+HBJHuhAE=
Subject key identifier:   9B:3F:14:B0:00:1B:12:B8:F8:A0:4D:CD:C0:4A:E7:D2:62:A5:DA:6B
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       2DA21979F53942A25EF2ABA39A10546B9235E9B9
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     270628
IP address blocks:        2804:6ef0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:19:79:f5:39:42:a2:5e:f2:ab:a3:9a:10:54:6b:92:35:e9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100B1C8B538BB83356742730D472B0C669EBE13D3E8621DD33D65C7B007392EF1591425A9DEFA7F1A99ADB1DCC22B5A73D50075A34801326FDCBF9170C418588E4B0A2AF4A1D8A8D462E8BB0DA3BBDAB19013132D7892DEE12CB52BEB0528225AC91F19FA85DDBD54CADA821E52D6907A9565E4C6061D07F35DFDC4741644CB465E548CB424B55DAE2F0BF5BCF95915BA53F9C6378AAE44D4AC9BF9F8D9CFFBEBBAC77819273F0E405323E936150AE9A9DF79A70DEA7D4775C2978EB5ABAFC126409AE912FDBAEB7C8C58A809EFC644AF322A1E49A5C03A1230C6EA8561E3C83BAF4F29757A81A04A9FAEA1B5C7A77FA3ADA01B1D5B9C96D7F20C021BAF88E4828B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:b5:38:bb:83:35:67:42:73:0d:47:2b:0c:
                    66:9e:be:13:d3:e8:62:1d:d3:3d:65:c7:b0:07:39:
                    2e:f1:59:14:25:a9:de:fa:7f:1a:99:ad:b1:dc:c2:
                    2b:5a:73:d5:00:75:a3:48:01:32:6f:dc:bf:91:70:
                    c4:18:58:8e:4b:0a:2a:f4:a1:d8:a8:d4:62:e8:bb:
                    0d:a3:bb:da:b1:90:13:13:2d:78:92:de:e1:2c:b5:
                    2b:eb:05:28:22:5a:c9:1f:19:fa:85:dd:bd:54:ca:
                    da:82:1e:52:d6:90:7a:95:65:e4:c6:06:1d:07:f3:
                    5d:fd:c4:74:16:44:cb:46:5e:54:8c:b4:24:b5:5d:
                    ae:2f:0b:f5:bc:f9:59:15:ba:53:f9:c6:37:8a:ae:
                    44:d4:ac:9b:f9:f8:d9:cf:fb:eb:ba:c7:78:19:27:
                    3f:0e:40:53:23:e9:36:15:0a:e9:a9:df:79:a7:0d:
                    ea:7d:47:75:c2:97:8e:b5:ab:af:c1:26:40:9a:e9:
                    12:fd:ba:eb:7c:8c:58:a8:09:ef:c6:44:af:32:2a:
                    1e:49:a5:c0:3a:12:30:c6:ea:85:61:e3:c8:3b:af:
                    4f:29:75:7a:81:a0:4a:9f:ae:a1:b5:c7:a7:7f:a3:
                    ad:a0:1b:1d:5b:9c:96:d7:f2:0c:02:1b:af:88:e4:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:14:B0:00:1B:12:B8:F8:A0:4D:CD:C0:4A:E7:D2:62:A5:DA:6B
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/323830343a366566303a3a2f33322d3438203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ef0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:da:17:2f:3a:64:22:75:54:be:c1:bf:4d:b1:b6:5e:49:fb:
         55:6b:01:1e:30:85:7b:b8:d9:a6:05:3e:7c:71:9f:88:79:b6:
         b3:b4:26:0c:7b:a9:6a:f0:35:01:b6:45:8f:9b:ee:b2:07:98:
         94:7b:62:6e:49:52:0e:c8:c5:b3:71:a3:86:a7:49:45:e3:14:
         0a:b2:a7:57:8f:fb:8a:9b:06:2d:89:e8:3b:71:01:db:5b:b8:
         31:2f:06:19:d0:e8:d6:46:77:71:5c:45:06:82:35:77:68:4c:
         7b:5b:5a:f5:29:43:2e:84:de:f8:2e:76:3e:dc:98:99:6a:9c:
         52:bc:cc:a2:b0:9b:1a:d9:40:3b:67:a5:2f:0d:52:c4:77:11:
         b8:44:8c:98:09:c0:d2:8c:1f:a7:b5:02:13:5e:a9:b4:eb:c8:
         b9:50:c1:f1:d7:6d:b7:78:06:5f:3a:02:e0:b0:88:d1:d0:9c:
         94:8a:d4:fa:26:47:1b:99:74:1c:d7:d5:e2:7b:8c:62:97:01:
         82:a7:84:93:6e:e6:a4:b9:35:16:e1:68:43:37:5d:5d:47:69:
         f0:b5:0e:39:10:89:0f:3d:ab:7a:9b:34:4e:8c:75:c6:21:56:
         c3:c7:8d:be:b5:0d:c5:d3:0e:17:95:fc:94:77:14:c4:bb:ea:
         9c:22:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:54 2025 by rpki-client