Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa
File:                     323830343a363766633a3a2f33322d3334203d3e20323639363633.roa (raw, json)
Hash identifier:          Z/ZoAE+K4R1PK5V1pKPr01Zqgfgmpxn63gmpsTuRCpQ=
Subject key identifier:   F0:0D:07:28:1A:ED:F7:E6:6E:20:2E:2D:21:BC:61:6C:3D:95:EE:BF
Certificate issuer:       /CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
Certificate serial:       21A336F4F89B9DADDE2F32BD18128474B2DE76CE
Authority key identifier: F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa
Signing time:             Thu 13 Mar 2025 12:15:23 +0000
ROA not before:           Thu 13 Mar 2025 12:10:23 +0000
ROA not after:            Thu 12 Mar 2026 12:15:23 +0000
asID:                     269663
IP address blocks:        2804:67fc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.crl
                          rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a3:36:f4:f8:9b:9d:ad:de:2f:32:bd:18:12:84:74:b2:de:76:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
        Validity
            Not Before: Mar 13 12:10:23 2025 GMT
            Not After : Mar 12 12:15:23 2026 GMT
        Subject: CN=F00D07281AEDF7E66E202E2D21BC616C3D95EEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:45:89:8d:a0:d0:6d:08:5d:8b:c8:0c:2a:08:
                    10:bb:45:50:9b:a4:ce:18:20:5c:83:7b:63:86:af:
                    b9:76:d4:fb:1f:e8:30:89:97:e6:81:8d:3b:e2:25:
                    12:20:bd:6b:c0:db:73:f2:5e:d7:4a:c8:04:4f:a8:
                    fa:53:e3:d0:9f:b2:4d:ea:25:e3:b9:04:8e:48:2f:
                    e9:31:31:83:5a:e5:e7:e0:93:a7:f5:39:2a:4d:e7:
                    ed:de:33:c3:ed:3c:9f:53:85:48:10:01:bb:0f:1e:
                    65:bf:a5:ac:c6:0c:54:37:7b:34:28:03:14:3b:e9:
                    db:88:d6:72:0c:52:29:ba:dd:d4:46:05:3f:68:e8:
                    33:06:91:49:a4:92:ab:89:32:ea:3b:fb:de:71:52:
                    d0:a6:7c:32:9a:8e:f6:74:f8:6e:d3:34:3b:82:b8:
                    bc:f2:dc:ad:e3:dc:97:bc:ae:67:ce:68:5e:23:40:
                    aa:c6:2e:a9:f8:02:2e:d1:be:82:f3:13:c9:74:e7:
                    74:0f:d3:6a:c4:22:1e:07:88:0f:43:2a:b0:9d:78:
                    66:70:77:20:7a:98:e6:b7:65:2f:7b:05:1c:0d:e5:
                    2f:c4:30:67:d4:54:a4:00:4b:28:10:0f:44:29:64:
                    22:af:f8:23:22:45:7b:4e:a6:8a:77:11:4a:8e:4d:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:07:28:1A:ED:F7:E6:6E:20:2E:2D:21:BC:61:6C:3D:95:EE:BF
            X509v3 Authority Key Identifier:
                keyid:F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/323830343a363766633a3a2f33322d3334203d3e20323639363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:92:0d:c8:40:63:33:aa:62:35:7a:bb:78:12:b9:1c:4e:
         8b:bf:0d:a7:83:26:97:5d:d5:25:51:46:e6:08:42:6c:cd:fe:
         95:74:0c:26:e4:47:76:a3:c5:f1:01:62:99:57:a9:25:d0:6a:
         59:fe:0b:44:ff:f1:dd:ec:7e:b4:52:8f:28:55:1e:0b:06:6a:
         d1:73:2f:cf:a6:72:c8:61:fb:95:c9:c0:82:83:c4:a3:df:70:
         ca:28:55:54:4f:4c:99:df:a3:2a:dd:6c:88:51:55:6c:34:49:
         7d:c5:ba:31:bb:6d:04:5f:2f:fb:49:3a:04:e8:d5:13:45:1e:
         34:a9:2b:cc:7f:39:d6:b5:4e:f1:15:3b:c7:35:cd:11:96:32:
         7e:72:17:0b:81:d3:f5:50:01:25:aa:56:55:a7:ad:83:6d:6b:
         a4:bf:b1:11:b0:d6:d8:ac:cc:00:c1:3e:67:03:2b:a0:10:69:
         f9:5a:8b:02:92:d9:b3:ff:44:56:05:ce:3a:07:1b:14:a4:01:
         35:ff:09:aa:ac:f7:ef:1c:59:f7:4e:4d:8d:1d:c0:30:4a:4b:
         00:9c:d6:b9:40:89:62:b4:0b:46:72:aa:2d:3a:a3:03:58:a8:
         e9:1f:d0:45:60:29:6a:05:de:47:e3:b5:f9:e1:89:73:4b:2b:
         23:56:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:39 2025 by rpki-client