Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
File:                     323830343a356664633a3a2f33322d3332203d3e20323639313238.roa (raw, json)
Hash identifier:          14KZ9Q+gMC0ZLE745QuWTAtFarJzS+4PBmi0MjkTMBM=
Subject key identifier:   CF:F4:CB:83:BA:84:3F:1D:97:97:27:93:07:BC:66:45:6E:DA:7F:98
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       08D8368F43055280CBF8B38DCB2AC41224D7BEC9
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa
Signing time:             Thu 06 Mar 2025 09:00:32 +0000
ROA not before:           Thu 06 Mar 2025 08:55:32 +0000
ROA not after:            Thu 05 Mar 2026 09:00:32 +0000
asID:                     269128
IP address blocks:        2804:5fdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 15:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:36:8f:43:05:52:80:cb:f8:b3:8d:cb:2a:c4:12:24:d7:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Mar  6 08:55:32 2025 GMT
            Not After : Mar  5 09:00:32 2026 GMT
        Subject: CN=CFF4CB83BA843F1D9797279307BC66456EDA7F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:b6:40:d0:63:2e:80:a2:7c:72:c1:3e:b8:
                    e4:51:d9:12:85:1e:02:c7:de:e4:d9:2f:3e:06:f7:
                    3c:1f:76:0b:c1:88:bd:f0:49:80:8e:5e:11:98:ac:
                    a9:61:de:2a:64:e4:92:21:12:ec:c2:aa:50:31:5e:
                    78:ae:20:d1:d4:b5:22:0c:93:ec:1f:9b:f1:4a:e5:
                    24:07:4c:96:b9:e6:f8:88:c6:6c:be:a7:c4:5f:8d:
                    1e:a8:e0:07:8b:f3:41:3b:1a:1d:53:c6:a5:3b:41:
                    69:ef:84:28:de:12:e2:9f:a1:6d:0c:7e:bd:9a:8a:
                    50:cb:20:e2:0e:2b:17:ad:0b:09:36:63:db:16:7a:
                    26:6b:3a:8e:d8:f0:0d:be:d3:86:c7:80:7d:c2:17:
                    65:2f:97:46:68:8d:ec:06:6d:d9:6f:90:32:35:30:
                    bd:0c:05:45:76:d7:e6:38:7c:e9:f4:e0:99:25:81:
                    8a:15:99:0a:21:7e:2c:3e:41:cd:2a:57:7d:6e:7f:
                    d4:3f:46:d3:33:e3:3b:94:96:bc:e9:9a:b7:78:4f:
                    5d:49:19:65:01:6f:9f:13:4f:7e:f2:77:93:8a:68:
                    1c:fe:0d:9f:d7:26:68:fd:25:8a:81:c3:2f:95:c3:
                    2b:90:10:18:57:fb:c6:df:d7:30:93:36:42:85:c1:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:CB:83:BA:84:3F:1D:97:97:27:93:07:BC:66:45:6E:DA:7F:98
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/323830343a356664633a3a2f33322d3332203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:c2:d0:0b:1a:b8:f9:18:f8:bb:73:8c:95:12:36:35:db:98:
         70:6e:26:43:0c:b4:b0:56:6e:cc:5e:a6:d5:8d:4f:ec:26:8c:
         e0:00:9b:a3:37:f9:a9:d8:06:cf:b9:62:25:04:71:05:25:4a:
         b8:25:9a:1f:c1:54:c3:2b:53:8d:f3:c6:9b:ae:57:bb:da:cd:
         73:5d:a0:69:55:89:82:27:ba:73:a0:50:82:0b:4b:c9:49:b5:
         1e:d4:e5:fa:1b:84:0f:b3:d5:f2:97:6a:f0:9f:d0:5a:3d:b0:
         3d:7a:c4:3c:56:35:f4:fb:47:4b:b8:b5:ea:bc:cc:f2:08:ef:
         96:fc:4d:4c:02:30:e2:0a:bd:6c:d0:48:e2:ba:8e:d7:a5:07:
         13:c7:f6:db:9a:f2:6e:c5:00:9a:e3:8a:e5:15:49:af:98:2a:
         82:7d:38:e7:d0:1c:aa:19:96:2d:64:bb:ef:ea:57:d1:00:8d:
         92:1e:42:4d:22:60:1a:de:92:76:42:98:8c:71:0b:49:ab:d8:
         d4:8e:05:b4:09:03:48:4c:2b:79:51:47:48:29:d3:8f:53:ae:
         7e:7e:a1:53:54:e3:50:46:d5:f3:3e:53:ce:99:4b:7a:cc:1e:
         4e:7c:dc:06:8b:18:95:03:7d:8d:05:1b:fd:44:6e:bc:58:50:
         98:c2:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:53 2025 by rpki-client