Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          eZvAZsyqsQNmar2dclskqGzDL9+kQtEp4+OsNC//EpA=
Subject key identifier:   A0:26:3B:AF:ED:C3:FF:C2:7C:15:6F:D0:AD:75:A1:22:CC:AF:3C:44
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       424BA6CF9A24D80DE7908BABDA689CC35F165960
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:55:02 +0000
ROA not before:           Mon 13 Jan 2025 12:50:02 +0000
ROA not after:            Mon 12 Jan 2026 12:55:02 +0000
asID:                     268144
IP address blocks:        2804:58b0:134::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4b:a6:cf:9a:24:d8:0d:e7:90:8b:ab:da:68:9c:c3:5f:16:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:02 2025 GMT
            Not After : Jan 12 12:55:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:9c:de:34:c4:40:90:9c:68:38:7f:ae:96:
                    ae:2a:a6:b8:4f:7f:76:b8:40:8f:aa:a7:4d:7d:82:
                    a4:da:ee:08:b4:43:81:23:64:fd:6d:19:cb:19:a7:
                    97:54:c7:f5:84:4e:e0:a1:fb:08:fc:37:45:55:f2:
                    ff:78:48:b0:9d:b4:59:3e:cb:07:b8:8e:be:77:02:
                    c6:98:7e:79:5f:1e:7c:d4:43:5b:64:c4:b4:17:d3:
                    0e:e5:48:69:f7:fa:63:69:2a:22:e3:81:cf:8c:bd:
                    c5:b5:30:75:2a:8c:0c:fd:d4:a8:56:74:23:31:96:
                    29:e3:e3:d3:5d:7a:d3:61:ba:49:cf:b2:d5:1b:61:
                    af:ec:ad:65:54:e7:26:9b:b7:b1:ae:4b:99:2d:00:
                    86:98:da:93:a3:90:65:97:93:fe:0b:76:3a:3b:30:
                    82:97:42:a2:3c:ef:91:a9:b2:44:db:37:5f:f7:f0:
                    b4:34:a8:bb:dc:5d:89:92:45:09:80:f1:4a:22:b5:
                    f2:bb:98:0a:cf:85:17:09:1c:da:2c:55:d2:d7:5a:
                    d1:72:a5:e9:a1:51:e1:e9:26:eb:0d:0a:48:b1:c5:
                    e0:f7:ce:bd:5f:28:30:65:6a:0c:c8:0a:71:ee:5a:
                    19:e1:39:4a:1f:cc:4b:24:11:b6:24:39:13:d8:c7:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:3B:AF:ED:C3:FF:C2:7C:15:6F:D0:AD:75:A1:22:CC:AF:3C:44
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133343a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:134::/46

    Signature Algorithm: sha256WithRSAEncryption
         d0:83:f1:71:fc:dc:51:94:7d:19:ab:e0:e2:43:6c:20:2c:fe:
         48:03:5a:ce:a3:9b:6c:cc:ef:fa:3f:cb:76:eb:f5:f2:39:95:
         68:79:69:d1:9c:3c:4f:0d:90:a5:5f:a1:df:18:4c:7c:ac:c3:
         86:7f:90:8d:32:9f:a3:ab:12:bf:d7:e3:3a:c0:5e:af:7b:45:
         04:8c:1a:77:61:72:d8:17:6c:b8:f0:a4:a4:b5:a0:06:ee:cf:
         cb:2e:87:e4:82:c2:2c:47:cc:a7:4e:20:c6:4b:23:57:b6:e4:
         f3:a0:b7:3f:c4:f5:83:87:53:2d:08:c4:9c:a9:ad:25:f4:57:
         28:a9:6b:cd:23:fb:ec:fa:28:33:e5:b9:c1:17:35:e4:1d:48:
         94:2f:db:44:4c:36:f3:32:ab:af:c9:60:fb:f6:f1:71:2d:ad:
         d7:fc:2e:2e:f7:ec:39:25:09:46:44:3f:72:51:42:e2:f4:3e:
         77:90:8b:2f:68:ed:aa:03:a7:85:49:e0:26:8c:9f:de:9e:75:
         a6:38:53:5f:75:61:01:bb:40:f9:91:6c:f1:39:47:dd:06:a4:
         bd:08:14:44:12:e9:88:ab:b9:2a:f3:51:9d:2e:e7:90:d6:1c:
         55:68:85:99:cb:a2:5c:28:8c:f0:92:b4:78:b3:7d:09:08:49:
         e2:26:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:18 2025 by rpki-client