Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34362d3436203d3e20323638353638.roa
File:                     323830343a353332633a3133383a3a2f34362d3436203d3e20323638353638.roa (raw, json)
Hash identifier:          Ovk6/S09YxVDTgGbLHIDMG8HfEYGG0VoEDJwouMNR1s=
Subject key identifier:   DA:31:27:CE:D6:E8:B8:DF:F7:CE:7C:59:94:0A:72:D7:2A:B4:D6:5B
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       3A74F2EDB384E35F755723219FB4E1E4C24D71E2
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34362d3436203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:55:01 +0000
ROA not before:           Mon 13 Jan 2025 12:50:01 +0000
ROA not after:            Mon 12 Jan 2026 12:55:01 +0000
asID:                     268568
IP address blocks:        2804:532c:138::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:f2:ed:b3:84:e3:5f:75:57:23:21:9f:b4:e1:e4:c2:4d:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:01 2025 GMT
            Not After : Jan 12 12:55:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:57:ff:77:e2:4a:84:cd:7c:7b:bd:97:fe:
                    e3:f4:d6:28:7f:4e:fc:a4:8c:6f:6d:91:fb:11:76:
                    0c:96:b6:c5:00:c8:8c:53:14:37:be:35:ff:4c:a0:
                    68:5f:e4:b0:3f:fb:6e:96:2f:86:24:c5:6f:61:79:
                    59:ca:ce:c6:28:e7:42:da:e9:09:9d:31:f1:fc:30:
                    30:d2:5a:97:07:77:b7:81:38:26:e0:5d:00:b1:02:
                    26:dd:fe:b5:c0:5e:7b:86:4d:40:d7:bc:86:fd:99:
                    48:a1:26:48:d5:b9:2e:21:51:0e:a0:67:9d:44:04:
                    aa:22:b5:5c:72:1d:7c:f5:78:1d:6f:66:a0:5f:59:
                    5c:4c:de:e9:9a:33:79:df:a5:52:4b:fb:98:e5:1c:
                    a1:60:ce:a1:a7:24:e4:cc:80:af:76:f8:bb:74:4a:
                    6f:a2:fb:15:b9:a1:7f:fc:58:65:df:fe:3d:e3:73:
                    42:c5:36:71:9e:ef:60:74:04:01:7e:28:90:21:1c:
                    3a:2c:f1:1c:b5:a9:d5:30:a4:0d:2e:5f:65:3c:19:
                    5e:83:53:47:03:5f:e5:0c:72:2c:3c:fb:22:56:b0:
                    1b:7d:5d:98:3f:95:41:5f:42:27:76:1d:26:fd:74:
                    01:6b:b8:30:f9:1a:2f:8d:5d:79:ea:44:52:b6:32:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:27:CE:D6:E8:B8:DF:F7:CE:7C:59:94:0A:72:D7:2A:B4:D6:5B
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133383a3a2f34362d3436203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:138::/46

    Signature Algorithm: sha256WithRSAEncryption
         92:26:b0:94:78:21:b2:c5:cd:20:9c:37:3f:96:25:d3:f3:36:
         aa:37:8a:71:13:87:d7:74:90:b3:f8:fe:cb:a1:43:69:94:ae:
         25:37:b8:cd:1d:a7:26:59:92:f3:71:cf:70:8c:6d:e5:43:db:
         6f:70:4d:50:c8:c3:1c:32:e6:87:2f:dc:93:82:81:8b:be:28:
         a6:fa:3a:33:99:1c:55:44:21:12:a3:a1:46:50:0c:33:42:37:
         95:eb:0c:23:ac:bb:a2:18:15:55:92:c8:a6:d5:19:b0:97:83:
         2d:bd:b7:fe:fa:35:fd:85:94:fe:17:7c:42:ed:8d:76:2f:f4:
         52:b7:f0:05:f5:3c:8e:2a:7b:e1:41:a3:79:a5:9b:a3:72:a8:
         5a:64:90:cd:44:fd:2e:98:4b:24:a8:12:9c:80:46:9b:21:e7:
         29:ec:55:34:1b:61:88:c8:4c:11:7b:1c:a0:14:5f:4c:e7:3d:
         22:4a:47:26:1d:51:a5:c9:d6:1a:af:54:09:3a:48:7f:5e:c9:
         85:87:91:73:5f:ab:e1:d5:53:57:c1:81:1a:9f:7d:d1:bb:d8:
         5b:da:62:eb:d7:44:e9:04:6d:08:6f:b6:bd:11:f9:0f:47:fb:
         d6:eb:3f:c2:e2:02:6d:88:9b:cf:9a:42:d7:5f:79:74:be:60:
         74:28:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:44:27 2025 by rpki-client