Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          kVrOhAuA5obfY543f7sYTyoz+sGvQmOAk04cbtCTgLA=
Subject key identifier:   6D:8A:3E:1F:AD:F5:FD:66:CD:84:77:2E:56:69:40:6C:7D:82:CE:F8
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       588C5F412F89243A2EB9A7B8B03592F8A20D6F27
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:54:56 +0000
ROA not before:           Mon 13 Jan 2025 12:49:56 +0000
ROA not after:            Mon 12 Jan 2026 12:54:56 +0000
asID:                     268144
IP address blocks:        2804:58b0:130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:5f:41:2f:89:24:3a:2e:b9:a7:b8:b0:35:92:f8:a2:0d:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:56 2025 GMT
            Not After : Jan 12 12:54:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:64:f2:12:f1:7c:04:81:fe:81:13:a7:85:
                    cc:52:4c:9e:26:00:da:43:2b:55:f4:b4:82:91:c3:
                    2e:62:7a:b3:3c:cd:bd:71:bc:e1:90:1e:cc:dc:a9:
                    ad:f5:7f:51:f1:30:b6:db:27:1c:83:96:9a:96:de:
                    e1:a7:27:9b:32:fb:5b:a9:c9:96:bc:1b:d1:46:07:
                    33:d9:13:08:16:df:44:0f:78:82:61:b1:d9:51:49:
                    f8:d8:38:26:3f:e4:17:77:e5:67:72:50:34:61:d3:
                    f3:7e:a0:ea:44:1a:e1:e9:22:47:a8:d7:7b:93:e8:
                    e4:4b:60:82:89:91:9d:b5:8e:9f:4c:59:9a:5b:18:
                    aa:4a:47:73:d8:1a:b9:57:78:0c:f5:3b:45:0a:bb:
                    fe:8c:9c:c1:b8:5a:54:03:26:59:6e:57:e3:82:37:
                    96:d8:0b:07:70:2c:04:e7:4e:a9:8b:ca:59:df:68:
                    6d:90:48:62:8f:32:e8:5e:36:4e:ad:1a:9a:9d:e8:
                    22:97:a8:02:53:6d:ae:f4:9f:60:56:3f:50:af:4f:
                    97:5a:b0:08:5e:7c:5b:10:dd:83:ce:6c:b5:64:02:
                    6d:37:7f:a3:30:e6:73:28:f9:80:a4:93:ad:bc:27:
                    6f:21:6c:3d:79:4f:7f:69:0e:d0:1c:5e:c4:18:16:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8A:3E:1F:AD:F5:FD:66:CD:84:77:2E:56:69:40:6C:7D:82:CE:F8
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133303a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:130::/45

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:5e:da:a8:03:7d:fb:f4:9b:c5:9a:ed:d6:25:4f:a0:99:
         1f:df:8e:2c:68:78:4c:bc:78:69:2c:8d:4a:9f:c3:e3:cf:75:
         58:56:de:44:4b:b1:1a:38:e3:2b:7d:7b:be:3f:88:95:f8:0a:
         46:23:10:ac:d2:bb:a9:9f:2c:ba:2e:9a:50:c1:c6:4b:0a:b5:
         9a:a6:ed:39:8f:ee:2c:54:1c:9e:aa:a0:68:aa:c1:c9:25:1a:
         81:96:40:52:33:f7:6b:bb:3c:dd:ba:ac:9f:40:37:5d:2c:f2:
         6d:73:6b:14:3a:b6:be:32:e5:e5:bd:33:78:1f:65:e1:fb:4e:
         65:9d:86:28:f1:e4:2c:66:de:3a:0f:2d:d7:56:34:98:cc:b2:
         ae:4d:24:87:8c:53:3d:af:f2:ff:a0:05:9e:df:fb:d5:15:0a:
         c2:17:6e:72:ee:2f:7f:a9:6d:8c:7d:49:9c:f3:c8:62:02:76:
         55:30:2a:2a:27:38:ed:89:16:ba:23:29:4c:a5:0d:63:6c:5a:
         43:f3:78:5b:d9:80:a7:17:39:0a:1e:28:1e:f2:1b:a4:3d:94:
         5f:df:c8:31:39:03:df:c6:35:18:1a:fd:08:b6:96:f1:8c:95:
         4f:ee:33:84:7e:7a:8c:0f:e1:ec:87:bb:66:68:4f:08:d5:d3:
         1d:31:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:26:41 2025 by rpki-client