Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa
File:                     323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa (raw, json)
Hash identifier:          bpnpBe+nCXZxIuIwfvmucCURVZrY8XGv9TogrcR2egg=
Subject key identifier:   AF:CA:79:0E:4A:46:6A:F5:95:42:DB:DE:DC:1D:D6:BC:49:12:19:19
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       7CF10D14ACB5783B3211178932E96C1D1706BB59
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa
Signing time:             Thu 03 Apr 2025 13:48:35 +0000
ROA not before:           Thu 03 Apr 2025 13:43:35 +0000
ROA not after:            Thu 02 Apr 2026 13:48:35 +0000
asID:                     263484
IP address blocks:        2804:1290:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f1:0d:14:ac:b5:78:3b:32:11:17:89:32:e9:6c:1d:17:06:bb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Apr  3 13:43:35 2025 GMT
            Not After : Apr  2 13:48:35 2026 GMT
        Subject: CN=AFCA790E4A466AF59542DBDEDC1DD6BC49121919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:83:d9:18:47:cc:86:28:07:c7:eb:d8:07:
                    d3:93:4f:75:5a:d9:28:a7:fd:b2:65:11:5c:7a:1a:
                    50:d5:38:61:da:27:52:13:cd:a7:fa:22:7e:d5:e1:
                    26:41:cc:24:d5:cc:c1:c7:19:d4:a8:28:9b:ee:e0:
                    dd:07:fd:88:9d:e1:dd:16:ac:54:d6:bd:a7:27:04:
                    95:af:b8:67:ad:de:7e:d8:6a:8f:04:74:99:a7:ec:
                    b7:59:a3:11:97:98:65:7b:08:75:ca:46:3b:16:ac:
                    f4:20:b4:e8:60:00:3d:33:4c:8f:e5:fc:f5:e7:d7:
                    dc:29:ef:6a:d8:04:d1:f0:a5:59:ef:94:1a:7b:e8:
                    39:f2:1c:d6:3a:7d:c6:0b:4b:4a:4d:c5:5e:4a:0c:
                    2c:43:d7:d1:a1:b9:9b:9e:25:bf:9d:69:8a:8d:ff:
                    34:73:75:c2:73:6d:f8:12:17:1d:8d:f4:e9:02:db:
                    5a:78:b4:4b:49:86:ee:c3:5d:14:b7:a1:0d:3f:af:
                    06:54:7b:93:1b:f8:e0:ed:cb:2a:28:7d:56:58:e4:
                    b0:fa:20:c8:84:c4:62:06:7d:81:b1:0f:c4:09:90:
                    da:34:73:e4:0a:5b:ad:d4:96:56:4f:b6:4e:fa:65:
                    51:ba:ca:b5:ab:06:3e:0c:49:a5:c2:8b:b3:41:26:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CA:79:0E:4A:46:6A:F5:95:42:DB:DE:DC:1D:D6:BC:49:12:19:19
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/323830343a313239303a343030303a3a2f33342d3334203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1290:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:74:a8:16:eb:b8:01:e3:a4:82:d6:3a:cf:2d:72:e5:4c:
         8e:e7:8f:75:57:e0:c0:37:76:14:bc:94:21:84:6b:2b:20:78:
         e0:f7:0e:12:07:74:36:3b:34:f8:6b:b0:c5:81:7c:f0:56:c2:
         15:b2:7e:91:d5:f5:a5:67:72:55:d4:a6:4d:53:47:79:2c:af:
         ff:36:aa:0c:e9:22:55:70:f1:af:c4:1c:13:dc:ff:f3:ec:80:
         4a:54:10:99:9b:61:9d:63:5e:39:b0:54:c5:a9:1a:f9:91:36:
         ae:60:6f:46:52:f3:50:7f:e9:8c:d2:34:45:50:97:b6:62:85:
         97:57:18:4e:e6:e4:e7:01:67:13:23:2b:22:2c:14:54:4f:4a:
         23:bf:ca:d3:27:1d:08:0f:75:73:85:55:6a:d4:42:4d:34:0e:
         95:1f:da:4e:65:da:dd:f0:08:2a:e0:28:10:57:78:71:04:14:
         6a:cd:0f:8a:d9:22:d5:94:3e:fc:5a:7a:a0:85:c3:dc:ca:98:
         e9:79:a5:52:1c:13:59:53:d8:4a:8d:19:ce:da:18:52:83:6a:
         6a:5f:cd:4a:d8:21:72:a2:1c:1d:f5:9b:bc:78:e9:f0:ba:e2:
         d1:ed:9f:7d:62:c6:f6:7a:c6:a6:da:51:89:0b:dd:84:14:11:
         ce:42:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:40:10 2025 by rpki-client