Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
File:                     323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (raw, json)
Hash identifier:          N77OEG9pmlHUj8lD205/hv715RlaC7sqCWqYTtfKTMM=
Subject key identifier:   10:72:8B:7F:5B:A4:D4:65:10:98:D2:EB:9F:AF:2C:F1:31:C8:41:67
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       67406F52F94B2FC9D40D452FCB7E1148D1AC2A8D
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     270770
IP address blocks:        2801:80:3980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:6f:52:f9:4b:2f:c9:d4:0d:45:2f:cb:7e:11:48:d1:ac:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100BC18795E849356DE8AA21C45E57C99C26B650F71DC831E5742F5A69C726A503A213895E695BD7A8C15B1AB2D31CECF1399B11057CB94F1130892C34F30E8087C8A47247DB811061E6F9312AE012DE7A22E44174E917916772AA9E68AAF285D9D379631843D65A856195040096EEC0498D2270311AA27B852006B7F550D14804E861A3415C26138528F9A2CC1BEF4A0C92BBA09E98DA61A5E39759007103B71B9EC487C21A5AFB3F0DA9FAFBA2DFF28D6CAF2B65EDAD327E9D7083B3C96067CE1186AE40F53D925DD19FC862E5B4D2BCF8C3398BD5FEFA2B5F696DF76EF696FCE355F738904F89999DD3949C9D40432FCFA552961E19718EDC21928C71A5C06BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:79:5e:84:93:56:de:8a:a2:1c:45:e5:7c:
                    99:c2:6b:65:0f:71:dc:83:1e:57:42:f5:a6:9c:72:
                    6a:50:3a:21:38:95:e6:95:bd:7a:8c:15:b1:ab:2d:
                    31:ce:cf:13:99:b1:10:57:cb:94:f1:13:08:92:c3:
                    4f:30:e8:08:7c:8a:47:24:7d:b8:11:06:1e:6f:93:
                    12:ae:01:2d:e7:a2:2e:44:17:4e:91:79:16:77:2a:
                    a9:e6:8a:af:28:5d:9d:37:96:31:84:3d:65:a8:56:
                    19:50:40:09:6e:ec:04:98:d2:27:03:11:aa:27:b8:
                    52:00:6b:7f:55:0d:14:80:4e:86:1a:34:15:c2:61:
                    38:52:8f:9a:2c:c1:be:f4:a0:c9:2b:ba:09:e9:8d:
                    a6:1a:5e:39:75:90:07:10:3b:71:b9:ec:48:7c:21:
                    a5:af:b3:f0:da:9f:af:ba:2d:ff:28:d6:ca:f2:b6:
                    5e:da:d3:27:e9:d7:08:3b:3c:96:06:7c:e1:18:6a:
                    e4:0f:53:d9:25:dd:19:fc:86:2e:5b:4d:2b:cf:8c:
                    33:98:bd:5f:ef:a2:b5:f6:96:df:76:ef:69:6f:ce:
                    35:5f:73:89:04:f8:99:99:dd:39:49:c9:d4:04:32:
                    fc:fa:55:29:61:e1:97:18:ed:c2:19:28:c7:1a:5c:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:8B:7F:5B:A4:D4:65:10:98:D2:EB:9F:AF:2C:F1:31:C8:41:67
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3980::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:70:96:45:3d:ad:9b:8b:41:6d:1d:e5:6d:a2:d0:53:1b:d2:
         50:73:df:8e:bd:cc:f3:d4:8a:c1:ef:be:80:d8:2b:9c:39:e7:
         33:4a:1f:cd:0a:8b:18:87:08:db:55:57:4f:97:b9:cd:31:d6:
         f0:08:97:af:19:26:4e:1d:b9:33:d7:bf:3e:4b:e1:b4:14:cf:
         5f:ed:26:34:39:8a:dd:18:16:6c:22:9e:81:3f:33:71:a4:5a:
         d8:b1:1e:a6:1b:fe:7e:4a:ef:d2:6d:d8:cf:6a:56:e8:2d:00:
         1e:fa:a7:6f:19:01:47:a8:ef:35:fc:ef:ea:97:bb:53:a8:22:
         91:ce:d3:81:77:8c:4d:f3:5a:53:35:d2:7a:9e:47:80:74:24:
         fd:35:df:13:62:04:a8:db:d5:bc:3d:8b:3b:28:c2:c7:b4:da:
         60:d2:a9:b0:33:e8:11:ea:57:75:ee:a7:7f:27:4b:6a:12:85:
         0a:11:85:e8:55:6f:2a:14:3b:11:5a:1d:c4:27:8c:ac:f1:70:
         f0:bb:35:ce:88:45:98:c0:f6:65:a6:4d:46:01:38:e6:00:9b:
         23:f6:74:85:85:21:3b:0b:7e:d1:7c:f4:3b:bd:1b:bd:ef:e6:
         98:9a:06:91:b9:79:2e:a0:c8:4c:3c:76:43:62:01:3d:5d:37:
         ff:1e:65:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:44:22 2025 by rpki-client