Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          jYqIvgvI7eoe1oKBoIW6be65albM2mDC2tG8E2kwjyg=
Subject key identifier:   48:03:70:40:89:2B:BB:F6:B9:3B:85:69:78:57:C7:06:49:F2:31:88
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       3561B45C3316F6F23DFF41D58215D121BCAB0CA5
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:56 +0000
ROA not before:           Mon 13 Jan 2025 12:49:56 +0000
ROA not after:            Mon 12 Jan 2026 12:54:56 +0000
asID:                     268568
IP address blocks:        2804:532c:128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:b4:5c:33:16:f6:f2:3d:ff:41:d5:82:15:d1:21:bc:ab:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:56 2025 GMT
            Not After : Jan 12 12:54:56 2026 GMT
        Subject: CN=3082010A0282010100D5770F7A22C792D4F279E9E5E5C4631EA08404976FDBF26386752234FEA5FE500F76FD67DB47CD5E69B9830855516EB51CA9E11CDB2FC6F311C692E989CB52E600255D42EA52B13FE8B1C2AACCB732119A41BF2C8AC3269984B533FF408A6A2E64B20AC2F536BC5FEAE5D60CEE866A3C9080266E9BE9E6A8BC2E76BB2EEE996C9998E1A5A4C2585DE8EA1D446E532CA68EEB9B080E055975528F44BE1730E9E1F3F3E0FDBF426273366C124DEC20C667628FFB68B6F6EF378ADDE7BF2F92344190C709FC4944D70D23EA047D37771FC16B748F5D2F76E3BF482E64281AC06AF49256E659AEE2748C0F674492B5437301BE95BE86F5E0C8EC23DAA7CEC54BB9B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:0f:7a:22:c7:92:d4:f2:79:e9:e5:e5:c4:
                    63:1e:a0:84:04:97:6f:db:f2:63:86:75:22:34:fe:
                    a5:fe:50:0f:76:fd:67:db:47:cd:5e:69:b9:83:08:
                    55:51:6e:b5:1c:a9:e1:1c:db:2f:c6:f3:11:c6:92:
                    e9:89:cb:52:e6:00:25:5d:42:ea:52:b1:3f:e8:b1:
                    c2:aa:cc:b7:32:11:9a:41:bf:2c:8a:c3:26:99:84:
                    b5:33:ff:40:8a:6a:2e:64:b2:0a:c2:f5:36:bc:5f:
                    ea:e5:d6:0c:ee:86:6a:3c:90:80:26:6e:9b:e9:e6:
                    a8:bc:2e:76:bb:2e:ee:99:6c:99:98:e1:a5:a4:c2:
                    58:5d:e8:ea:1d:44:6e:53:2c:a6:8e:eb:9b:08:0e:
                    05:59:75:52:8f:44:be:17:30:e9:e1:f3:f3:e0:fd:
                    bf:42:62:73:36:6c:12:4d:ec:20:c6:67:62:8f:fb:
                    68:b6:f6:ef:37:8a:dd:e7:bf:2f:92:34:41:90:c7:
                    09:fc:49:44:d7:0d:23:ea:04:7d:37:77:1f:c1:6b:
                    74:8f:5d:2f:76:e3:bf:48:2e:64:28:1a:c0:6a:f4:
                    92:56:e6:59:ae:e2:74:8c:0f:67:44:92:b5:43:73:
                    01:be:95:be:86:f5:e0:c8:ec:23:da:a7:ce:c5:4b:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:70:40:89:2B:BB:F6:B9:3B:85:69:78:57:C7:06:49:F2:31:88
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3132383a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:128::/45

    Signature Algorithm: sha256WithRSAEncryption
         94:68:33:db:de:a3:f7:76:21:b9:7e:0a:14:cd:80:96:03:a4:
         76:e6:2b:89:d1:bb:df:0e:29:ae:ba:2f:da:f5:46:ea:d5:e4:
         bf:80:0e:60:29:29:7e:3b:5b:69:84:e0:ed:f4:c2:29:d9:4a:
         99:2d:54:40:e7:65:30:ee:4a:2e:be:70:04:e4:2d:87:e5:2e:
         6a:5e:ff:ce:b4:97:4f:e3:ac:ea:e5:1d:25:3c:79:e3:7e:8c:
         93:b1:93:2d:3b:99:bc:b9:bf:3b:8d:e9:25:2a:00:a2:33:5f:
         dc:e3:5f:03:19:1f:e7:ad:f2:81:09:3b:c0:a1:a0:bd:66:b8:
         bd:dd:6d:2f:5b:94:e6:25:69:bc:02:e1:25:99:5f:95:79:c0:
         bb:39:42:74:fc:dc:03:d1:44:23:63:19:43:2f:10:20:bb:c3:
         e0:fa:4a:92:64:65:80:e4:a3:fa:27:b7:47:1a:f7:cf:11:3b:
         b1:dc:60:f7:3c:62:1e:84:55:74:1a:cf:be:de:50:5f:9d:ef:
         a1:16:8d:93:79:09:6f:20:e7:52:e7:9f:0d:6e:ee:bc:7c:72:
         3f:8c:fa:b7:1b:f7:b2:36:8c:b7:cf:e6:2c:c2:a2:ae:8e:52:
         2a:06:4a:af:b1:62:c8:93:4e:f9:3e:8d:e2:af:62:87:b3:93:
         92:38:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:45:32 2025 by rpki-client