Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
File:                     323830343a353332633a3a2f33322d3332203d3e20323638353638.roa (raw, json)
Hash identifier:          gkl4MnMeeueHQiPG9UIO9VxjoN+GprJn2ji+OYV4up8=
Subject key identifier:   F1:9D:8C:A8:1E:94:75:0A:89:47:39:33:CD:B8:C0:C1:93:C2:81:2F
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       3E70C91A32B1869CCDD5F2323BB1CAE5803AAC98
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:55:02 +0000
ROA not before:           Mon 13 Jan 2025 12:50:02 +0000
ROA not after:            Mon 12 Jan 2026 12:55:02 +0000
asID:                     268568
IP address blocks:        2804:532c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:70:c9:1a:32:b1:86:9c:cd:d5:f2:32:3b:b1:ca:e5:80:3a:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:02 2025 GMT
            Not After : Jan 12 12:55:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:57:62:f3:1f:52:c8:95:bc:13:61:20:19:
                    e9:b1:d8:89:d8:cc:1e:df:7e:10:fa:01:4b:a7:32:
                    ba:ac:cb:b3:f2:57:3e:18:93:71:ad:33:f2:4b:21:
                    ac:a9:eb:c3:26:a6:7e:44:4f:b1:a7:22:75:4f:d6:
                    f9:87:96:f8:20:1e:4d:7a:b7:16:87:18:77:bd:52:
                    ed:8c:8a:38:ed:03:1e:59:b5:13:84:f8:82:47:26:
                    4a:76:1f:69:21:fd:12:eb:53:68:67:06:94:40:f6:
                    b4:33:2c:e1:3f:74:22:52:bc:59:01:0b:65:10:ee:
                    f4:10:0e:ce:5f:31:13:71:88:4a:0b:9c:72:f5:e4:
                    57:fe:3c:49:30:35:cf:12:d7:56:c8:65:2b:3e:82:
                    11:b0:8d:41:73:bd:02:17:61:55:ee:e8:5a:d9:e1:
                    a1:6b:21:4b:91:54:46:99:c3:57:34:ed:55:bc:74:
                    02:a1:4e:f9:04:a6:de:95:7c:07:0d:b3:19:a4:b1:
                    45:7f:0d:e7:70:48:d9:df:61:e4:bf:63:e0:3c:53:
                    da:fa:a9:44:87:56:1b:3b:c9:d5:f9:ae:ac:4a:67:
                    82:35:2a:c9:36:56:5f:1e:e5:2c:d4:a9:78:b0:49:
                    15:0a:4b:db:b6:26:6f:bf:1c:05:40:fb:40:b9:eb:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9D:8C:A8:1E:94:75:0A:89:47:39:33:CD:B8:C0:C1:93:C2:81:2F
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f33322d3332203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:ec:56:45:76:ba:0c:e9:ba:b5:13:b5:c9:2c:2a:a4:f8:1f:
         e0:f4:c3:4e:fc:79:e5:63:31:5a:1a:4e:14:a4:10:69:b5:0b:
         d0:86:64:15:15:ee:6b:2b:20:0a:58:bf:c3:a0:b8:7b:cd:a7:
         aa:39:c6:e4:69:41:c1:6e:55:b0:40:47:a1:9e:ff:52:99:db:
         55:c7:1b:a1:8c:61:7b:c2:a0:9d:5c:ae:c0:16:ed:ad:37:30:
         09:bf:a1:b4:36:53:4c:d4:08:f2:bc:db:15:fe:85:a7:c4:cb:
         81:5f:3a:09:7a:cb:a3:30:69:5a:1e:20:5f:6d:96:11:48:e2:
         fe:c0:9b:e9:87:b6:8a:45:a3:70:6b:35:16:13:ee:69:b8:a5:
         da:54:77:f9:e1:3f:68:f5:23:3f:2b:6a:7d:5d:cc:6a:57:3e:
         05:db:44:31:0b:04:ef:ee:1c:ef:34:8f:b2:4a:0c:3a:db:48:
         a8:23:98:0d:eb:e4:2a:5c:41:d2:2f:f2:6e:2e:e2:53:c5:cc:
         74:06:bd:7e:55:a3:ce:24:3a:1c:c6:2a:d0:bf:bf:c0:46:ec:
         5b:f4:b4:d8:cc:93:08:9f:98:6a:c4:0d:f0:5d:dd:15:d2:ab:
         f2:13:45:c0:21:17:2c:55:c4:43:85:14:84:49:80:79:9d:2c:
         29:c0:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:57:48 2025 by rpki-client