Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa
File:                     323830343a376435343a3a2f33322d3634203d3e20323731353534.roa (raw, json)
Hash identifier:          RYiCh8h4iYk5Bodg+qNyqafNs1TQ5RI/X+hLNxnAX+8=
Subject key identifier:   4C:1D:0F:20:99:89:14:F9:EB:01:AE:CB:29:C1:A6:D0:BD:35:D6:B1
Certificate issuer:       /CN=F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14
Certificate serial:       39F76B999D8F63E3958BC7D724399D44C7DD0606
Authority key identifier: F3:F0:B9:AD:D0:8C:4E:35:42:27:AF:7D:76:1D:7D:BE:22:62:AC:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa
Signing time:             Fri 11 Apr 2025 17:49:44 +0000
ROA not before:           Fri 11 Apr 2025 17:44:44 +0000
ROA not after:            Fri 10 Apr 2026 17:49:44 +0000
asID:                     271554
IP address blocks:        2804:7d54::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.crl
                          rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f7:6b:99:9d:8f:63:e3:95:8b:c7:d7:24:39:9d:44:c7:dd:06:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14
        Validity
            Not Before: Apr 11 17:44:44 2025 GMT
            Not After : Apr 10 17:49:44 2026 GMT
        Subject: CN=4C1D0F20998914F9EB01AECB29C1A6D0BD35D6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9a:7c:32:70:7d:85:eb:06:6a:27:75:2b:
                    cc:a0:8b:5e:b4:e7:12:c8:d8:4a:f0:79:bf:b6:c2:
                    1a:43:8e:93:80:f4:17:af:de:a8:22:5e:1d:71:84:
                    36:7a:74:b3:04:ee:64:48:2a:17:29:cf:71:db:6a:
                    f6:80:b5:cf:05:42:c0:b7:f4:ca:cb:ed:9a:0d:31:
                    47:88:e9:ab:44:33:7e:43:66:65:cb:3c:27:05:ec:
                    04:8f:18:06:3e:c2:0c:85:58:a5:1e:77:78:95:48:
                    22:04:d0:33:a3:6f:0b:ec:7e:fe:0c:8e:87:0c:a8:
                    ef:5d:5e:17:ab:57:8d:3c:d0:62:50:67:e3:46:8a:
                    51:a6:0c:2b:a5:0c:7b:cc:87:71:c8:03:a0:2e:5d:
                    9e:95:51:3e:3b:52:16:bc:05:33:54:0b:b2:04:52:
                    44:47:b0:1f:8a:63:14:18:63:e4:2f:01:a9:05:e2:
                    6c:cf:4d:75:5f:3e:16:7a:bf:77:57:2e:61:2e:f3:
                    81:83:04:77:76:c8:a7:ce:df:ab:07:f9:12:91:59:
                    c6:f4:b7:97:cf:c3:80:fa:2e:97:88:d9:2d:dd:c7:
                    f2:53:05:21:72:4b:e0:6e:ec:fc:b7:30:d4:dc:9a:
                    2e:3f:4d:dc:1b:b5:27:96:c6:e3:de:35:64:eb:a3:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1D:0F:20:99:89:14:F9:EB:01:AE:CB:29:C1:A6:D0:BD:35:D6:B1
            X509v3 Authority Key Identifier:
                keyid:F3:F0:B9:AD:D0:8C:4E:35:42:27:AF:7D:76:1D:7D:BE:22:62:AC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3F0B9ADD08C4E354227AF7D761D7DBE2262AC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/323830343a376435343a3a2f33322d3634203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:7a:5e:3a:0c:71:c8:ba:6a:e5:da:94:fa:b1:54:04:f7:
         2a:78:d7:85:c8:cf:60:46:d1:d8:f5:03:18:e2:77:22:95:48:
         24:84:3a:94:32:30:b3:05:40:0e:82:b7:27:0f:de:80:a2:03:
         11:7d:f9:98:62:7f:86:b3:08:e8:c5:3e:13:a1:85:77:a4:cd:
         b4:ff:ad:49:9d:3d:de:b7:c5:c5:16:2f:38:52:2c:de:a9:7e:
         94:c3:46:10:af:19:57:d8:45:07:7f:85:53:a4:03:38:bc:a4:
         76:67:2e:5d:78:03:16:f8:3c:10:38:1a:84:3b:48:00:89:83:
         14:39:32:94:b2:c9:51:dc:7a:80:a4:c4:bd:e4:e4:2b:d5:23:
         f1:b5:81:1c:4f:c8:99:43:36:ba:0e:b3:02:45:e3:a0:8d:b7:
         c1:fe:96:5d:8f:87:72:42:ae:b8:e4:92:de:0d:e0:6b:f1:de:
         61:56:3d:48:bf:35:2b:b6:8a:e3:1d:a5:c8:80:74:c1:73:10:
         9c:13:70:23:8f:14:59:a8:c5:99:b8:f7:4f:89:00:7e:b7:69:
         4d:a1:6b:b1:69:98:81:9d:c0:8e:f3:bc:ca:97:9f:71:25:f8:
         6b:b8:52:4d:50:7d:f8:6f:67:7e:91:be:28:35:2f:a7:f7:2d:
         e5:ca:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:54 2025 by rpki-client