Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          kF04j6O2ulO58XkY1u+D69/cVmj2Egot1h+WRgrJloA=
Subject key identifier:   77:C6:E4:0A:E6:F0:AE:C3:3F:75:2E:0A:07:76:78:9F:38:16:34:80
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       6DAE6CBB4E699C785F24318AF293311D06849DF0
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:57 +0000
ROA not before:           Mon 13 Jan 2025 12:49:57 +0000
ROA not after:            Mon 12 Jan 2026 12:54:57 +0000
asID:                     268568
IP address blocks:        2804:532c::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ae:6c:bb:4e:69:9c:78:5f:24:31:8a:f2:93:31:1d:06:84:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:57 2025 GMT
            Not After : Jan 12 12:54:57 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:f1:e0:a6:4a:8f:15:a8:36:d3:f4:84:39:
                    95:dd:f3:49:28:6e:43:3e:11:c4:ab:5e:1b:8c:81:
                    98:c9:be:60:70:75:34:ab:5c:aa:f7:17:42:3f:65:
                    a2:39:d2:2b:23:90:4a:06:ba:9f:3e:cb:7f:35:ef:
                    b3:46:9a:09:31:8e:84:2d:a6:e9:f8:f4:9e:49:b0:
                    83:d9:0c:51:70:8e:c6:4d:b0:ed:12:f6:72:56:a1:
                    b0:2d:c5:da:b7:ce:b6:67:32:a3:4a:95:0c:80:8c:
                    fe:af:4f:93:e9:3d:47:2e:1c:fd:8e:76:95:7f:f8:
                    7e:a2:46:a3:de:3a:39:f0:3d:2d:52:1b:50:2e:7f:
                    30:2c:90:96:a9:3c:1c:6f:cb:d9:02:43:91:73:0a:
                    ce:8f:db:1c:bb:31:e6:e6:54:a6:53:4c:5c:e0:06:
                    27:3c:a7:d4:20:10:6f:22:af:0d:0c:f3:6f:a5:9a:
                    55:26:8d:f1:07:29:d7:90:45:a9:27:7a:ac:9f:8b:
                    26:cb:52:2b:61:40:bb:63:ab:74:98:93:c1:b8:f5:
                    8b:f6:bd:7f:fa:5a:1f:53:fd:c4:32:ca:97:5d:a7:
                    57:42:53:40:d0:ee:9d:3d:21:6f:98:05:c7:f7:a2:
                    9f:a0:54:18:37:87:98:9e:19:6b:79:67:eb:68:18:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:E4:0A:E6:F0:AE:C3:3F:75:2E:0A:07:76:78:9F:38:16:34:80
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/45

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:76:fc:fb:e0:3b:2f:9b:58:99:8c:12:9c:b7:a7:f4:4c:
         16:5d:e4:6f:49:d4:ed:f8:30:98:54:68:a4:18:5b:2a:12:ff:
         56:37:e0:14:26:66:53:f8:50:9b:39:ae:fd:37:8f:10:45:7c:
         c4:ac:09:e4:35:5a:ed:23:43:c7:d8:54:4c:52:5a:59:22:c2:
         e5:fc:da:2c:38:5d:99:90:45:f6:89:47:44:50:5a:6e:b1:87:
         a2:52:bc:8d:4e:ed:65:6f:cc:36:a3:af:54:e0:69:a8:07:76:
         4f:19:84:d7:03:d6:f6:b3:a4:ea:a7:ed:33:72:fd:e6:53:f6:
         38:1e:8c:9f:5e:35:49:42:69:55:c4:0b:8c:e0:ef:42:7b:7f:
         81:a2:7b:f1:d2:45:c4:15:e7:40:e3:cb:77:27:01:13:ae:a6:
         82:33:f7:a9:db:4a:38:03:1d:41:d0:e2:6b:70:54:ea:8e:06:
         39:56:b5:97:a3:74:da:87:a9:05:db:92:fc:0e:7d:3a:40:5b:
         75:49:89:7a:5b:84:81:9e:95:15:11:50:b5:7a:d3:63:64:c5:
         2d:94:11:dc:cb:09:55:3d:fd:d6:67:2c:8c:be:51:e7:9b:60:
         8e:3d:ea:82:fb:97:08:97:5f:02:88:49:c6:b3:27:7b:33:4a:
         95:7e:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:44:36 2025 by rpki-client