Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a643030303a3a2f33362d3336203d3e203631373937.roa
File:                     323830343a313937633a643030303a3a2f33362d3336203d3e203631373937.roa (raw, json)
Hash identifier:          nIw0gxx80B+uf7QL2nwCN/N6THoP3VsqcAWD1U1gbjs=
Subject key identifier:   00:08:29:5F:76:04:6C:49:00:5B:99:37:8F:7E:B7:DF:3A:50:30:01
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       5B5FDD1AEFD5534535ABEC2B33C6332E1AB08BB8
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a643030303a3a2f33362d3336203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:06 +0000
ROA not before:           Fri 06 Jun 2025 11:39:06 +0000
ROA not after:            Fri 05 Jun 2026 11:44:06 +0000
asID:                     61797
IP address blocks:        2804:197c:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 01:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:dd:1a:ef:d5:53:45:35:ab:ec:2b:33:c6:33:2e:1a:b0:8b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:06 2025 GMT
            Not After : Jun  5 11:44:06 2026 GMT
        Subject: CN=0008295F76046C49005B99378F7EB7DF3A503001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:4d:54:96:f5:50:ab:60:15:a0:a4:71:92:
                    3e:de:62:b5:7e:47:74:03:18:c1:22:02:86:37:31:
                    22:4f:02:eb:49:47:06:11:08:80:10:31:a4:1a:a9:
                    06:b4:e4:a9:88:4d:35:6b:43:46:80:e8:e0:00:51:
                    e8:96:60:24:f5:3a:ed:22:31:cb:9a:03:85:56:f0:
                    c0:d2:fa:ec:bc:c0:e0:56:6d:c9:12:63:4b:65:a3:
                    c4:2a:be:f3:d1:66:7d:3b:6c:36:02:98:ce:64:c7:
                    c3:39:2e:f0:8a:10:fd:65:db:f7:dd:dd:b9:a1:2e:
                    e3:9c:19:9e:eb:33:dd:24:06:fd:6a:ad:9a:df:b3:
                    d0:73:c2:6d:f4:2c:31:a6:c9:cb:25:0a:af:67:75:
                    f3:e7:1f:35:0b:20:a1:56:04:fd:6f:30:a4:82:17:
                    5d:9d:24:cb:af:33:5e:00:e2:b0:39:8d:09:1c:a0:
                    4f:11:1b:32:17:28:1b:c5:76:f2:48:c9:7f:97:9c:
                    b1:c6:d8:81:6e:e6:e7:ff:7b:b2:cd:85:e1:1b:be:
                    46:87:d0:1a:ce:ee:38:af:2b:69:da:9b:04:a0:92:
                    7c:e8:01:2b:cc:2b:81:12:66:6d:95:8e:7c:d6:f6:
                    bb:1f:12:0b:a7:ce:48:71:06:2f:7e:cb:00:c8:1c:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:29:5F:76:04:6C:49:00:5B:99:37:8F:7E:B7:DF:3A:50:30:01
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a643030303a3a2f33362d3336203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:197c:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:5e:ee:ce:99:30:ff:69:47:37:6f:46:81:66:f8:d4:0b:
         17:00:e7:37:50:84:6c:b2:f7:36:4b:a7:d3:2e:84:3c:6a:13:
         98:b9:9c:15:0e:4a:fc:c9:c3:74:73:e9:57:60:be:3a:82:10:
         53:f7:70:7e:d7:aa:06:04:5e:6e:bf:e2:c7:99:dd:d8:77:4c:
         2b:4b:2c:a2:61:56:50:30:b0:ee:46:82:b7:9c:65:58:af:44:
         a6:14:79:6b:cb:f9:cf:e9:51:80:3d:be:bd:95:fe:32:43:23:
         a5:7a:dd:c6:dd:24:a9:57:c8:69:cb:b8:80:cd:25:26:7f:04:
         98:c4:b3:c7:6e:e8:10:da:31:c6:0f:6b:09:67:4c:47:9f:80:
         db:ce:05:24:ad:c8:cd:1a:e4:f5:4e:b7:79:87:f3:db:be:51:
         2b:72:ce:90:68:59:b3:17:c3:0d:de:e4:9b:97:d7:ee:19:c3:
         fd:c3:c7:06:72:13:91:12:22:79:b1:4c:43:d2:2e:3c:c0:ed:
         b0:0a:10:91:71:dd:f7:10:83:8a:76:cd:a0:ba:3e:eb:d2:cc:
         c6:6f:31:6e:aa:cc:4b:f5:28:45:40:b7:9c:b9:12:86:23:20:
         b7:be:37:22:1c:2c:61:35:d1:a4:18:ae:c9:4e:01:a9:60:01:
         7a:62:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:14:04 2025 by rpki-client