Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/323830343a343938383a313430303a3a2f34302d3430203d3e20323637313839.roa
File:                     323830343a343938383a313430303a3a2f34302d3430203d3e20323637313839.roa (raw, json)
Hash identifier:          nuSK1x9rUi+QKorRPopF6grtVK/+EUhyGFjsYQTI2MA=
Subject key identifier:   2F:76:F4:3C:88:51:1E:82:45:B6:45:69:40:EB:CD:37:C6:28:CA:A5
Certificate issuer:       /CN=F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C
Certificate serial:       14BC54F61EC0599F96B99019024FB50772559D99
Authority key identifier: F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/323830343a343938383a313430303a3a2f34302d3430203d3e20323637313839.roa
Signing time:             Thu 06 Mar 2025 05:33:10 +0000
ROA not before:           Thu 06 Mar 2025 05:28:10 +0000
ROA not after:            Thu 05 Mar 2026 05:33:10 +0000
asID:                     267189
IP address blocks:        2804:4988:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.crl
                          rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:54:f6:1e:c0:59:9f:96:b9:90:19:02:4f:b5:07:72:55:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C
        Validity
            Not Before: Mar  6 05:28:10 2025 GMT
            Not After : Mar  5 05:33:10 2026 GMT
        Subject: CN=2F76F43C88511E8245B6456940EBCD37C628CAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:7a:37:13:33:d0:9a:05:b4:dd:e0:63:af:
                    37:ee:87:d1:a1:f5:3b:b0:e8:6f:14:33:8b:69:6b:
                    e1:f3:d3:a7:eb:37:4c:97:9c:0f:36:95:83:0e:40:
                    83:1e:94:32:2a:08:2f:71:e7:9e:52:33:f5:8a:3b:
                    ee:e3:45:7c:60:4c:e0:b9:c5:90:77:c4:5b:4e:2f:
                    e9:0e:48:f6:48:4b:2a:98:1d:db:e6:7f:55:61:ea:
                    a9:1d:4d:79:58:2d:74:ab:c0:11:3e:38:36:e9:bb:
                    c0:ba:89:aa:86:d2:92:3a:4f:a0:2c:e3:0f:64:03:
                    18:bd:3b:49:b5:62:1b:6f:e8:94:3c:8e:14:46:f2:
                    ed:9a:27:ed:3a:a3:f1:4d:b7:e2:06:7e:c9:da:70:
                    80:f8:a0:ad:8e:3f:3c:36:e3:05:6c:ae:bb:7a:83:
                    02:7c:3d:5b:6e:5e:6c:e7:41:bd:cd:80:5d:8f:95:
                    6d:3a:42:c4:9b:4e:51:6f:d8:ae:e9:64:ad:1b:8e:
                    56:ce:d5:e8:d5:c4:5b:79:17:b1:ae:26:41:74:2e:
                    e9:9b:09:ff:54:88:a1:57:b1:f4:83:23:cf:f1:73:
                    a4:f5:c3:3f:36:85:34:0a:c7:d6:76:d8:d5:03:5a:
                    bf:06:4c:ca:66:27:19:6f:be:ff:2e:e6:09:18:07:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:76:F4:3C:88:51:1E:82:45:B6:45:69:40:EB:CD:37:C6:28:CA:A5
            X509v3 Authority Key Identifier:
                keyid:F2:CB:48:A6:1A:AA:AB:5F:64:93:BE:9B:14:1A:93:5A:7B:0B:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CB48A61AAAAB5F6493BE9B141A935A7B0BDD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/1/323830343a343938383a313430303a3a2f34302d3430203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4988:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:51:ef:db:00:e3:1a:1d:ce:79:35:7f:c2:32:94:aa:ef:dd:
         29:f1:3b:c3:44:48:9d:42:6d:7f:ce:d0:94:e6:3d:70:9b:60:
         f9:51:92:f8:12:e3:4f:50:5d:e1:56:7e:b7:ee:24:59:6a:06:
         b1:c6:93:08:3a:05:dd:d1:4f:40:07:97:d9:b2:0a:87:39:d3:
         cd:60:f0:15:e9:9d:15:b1:3e:7f:19:3c:cf:fd:73:46:e4:55:
         7d:2c:e0:65:33:81:d9:9b:93:81:58:bb:54:3d:52:c9:75:7e:
         48:58:21:2b:34:2e:61:44:d0:8c:79:91:19:15:4b:9a:92:f7:
         5f:1e:fb:3b:58:15:83:f1:e3:c6:e4:d0:df:de:c2:1f:37:2a:
         ca:a0:1a:69:95:96:b0:a1:9a:de:6d:1d:70:85:cb:7f:1e:7a:
         89:3d:9c:3d:2f:1f:d2:8c:fa:56:39:0e:7e:db:51:bc:d2:fd:
         c9:9e:09:62:82:2a:08:ff:da:46:54:47:24:0a:eb:67:ea:d1:
         c3:fe:73:3b:73:ac:d5:14:cd:89:11:e4:e1:30:ff:c6:e0:a6:
         b4:28:ec:4a:71:59:31:41:21:f2:03:b9:17:ee:85:6e:7a:b7:
         91:73:b5:d0:54:69:92:1c:c6:1e:de:de:96:cd:b4:30:18:9d:
         18:0b:af:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:17 2025 by rpki-client