Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33322d313238203d3e20323730343934.roa
File:                     323830343a366364303a3a2f33322d313238203d3e20323730343934.roa (raw, json)
Hash identifier:          r2GrmiYLSw9lRa/2GQrkwGUMhK7ICU7VIGYAH+P8Cy4=
Subject key identifier:   2A:57:8E:3A:C9:07:66:16:60:D1:2D:89:00:0C:79:30:45:DE:6D:9B
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       3BEC696FD7109E1F42FF719C1D3F142A500C6B66
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33322d313238203d3e20323730343934.roa
Signing time:             Tue 25 Feb 2025 19:36:12 +0000
ROA not before:           Tue 25 Feb 2025 19:31:12 +0000
ROA not after:            Tue 24 Feb 2026 19:36:12 +0000
asID:                     270494
IP address blocks:        2804:6cd0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
                          rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:69:6f:d7:10:9e:1f:42:ff:71:9c:1d:3f:14:2a:50:0c:6b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 25 19:31:12 2025 GMT
            Not After : Feb 24 19:36:12 2026 GMT
        Subject: CN=2A578E3AC907661660D12D89000C793045DE6D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:a9:45:48:2d:33:0d:32:cc:63:05:9e:bc:
                    de:3e:c8:91:2a:df:a1:1c:e1:78:98:a8:d8:06:12:
                    ca:7e:b4:ff:47:9c:32:b4:be:e0:a7:ef:d4:06:00:
                    46:d1:cc:54:05:c0:6b:f1:2a:de:1d:71:0c:97:ac:
                    50:01:2e:f7:2d:b4:45:b3:44:db:f4:2d:6d:ae:e4:
                    e6:c3:c4:ff:b2:99:a0:d6:15:e9:2e:02:66:b7:c7:
                    0a:69:22:88:38:e6:dd:40:df:d2:99:b8:ae:76:d0:
                    ea:91:0f:99:ba:52:29:2e:a2:83:1b:b3:eb:0a:71:
                    f5:0b:77:45:4d:c8:89:c8:11:d8:82:2b:d8:57:9e:
                    a2:f2:ce:e8:07:c7:f0:48:b9:31:45:57:30:9e:fd:
                    3d:b0:df:30:94:c1:41:3b:97:fa:15:b5:bf:c8:68:
                    b9:10:7f:57:78:7b:6f:48:2c:b2:49:5c:27:b8:ec:
                    ce:36:71:fd:4b:fd:41:8b:56:d4:9c:ce:47:65:4d:
                    e6:92:cf:c1:b9:9c:6d:d6:84:ab:34:bc:65:cf:b5:
                    03:b8:e7:18:f6:02:2b:19:3b:c6:bd:3b:4e:95:9d:
                    08:a8:49:d9:24:f5:ff:b1:46:4e:80:62:81:19:a6:
                    8e:6b:d1:b4:32:b4:c7:fb:9c:65:dd:a1:69:16:58:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:8E:3A:C9:07:66:16:60:D1:2D:89:00:0C:79:30:45:DE:6D:9B
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a3a2f33322d313238203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:03:b5:d6:20:7c:dd:b5:32:d2:5a:4d:86:66:da:8d:88:18:
         8f:0d:a9:44:be:1d:81:83:c7:98:42:c2:09:9e:99:98:93:83:
         3d:d3:8f:9a:ab:f7:0a:c8:e1:ba:5e:9c:2d:64:85:d4:e7:4c:
         92:46:4e:1f:c1:14:50:0f:9f:46:8c:77:91:10:bf:f8:ab:4c:
         9c:aa:a2:9c:c4:5b:58:0e:d0:36:03:64:e5:fb:74:b0:87:75:
         59:b2:cb:be:f7:bc:2b:16:a0:8e:b4:d9:1b:ba:f5:ec:65:75:
         8e:5b:68:04:3d:bf:27:d2:58:59:a8:68:e9:2e:fb:f3:4b:4a:
         4c:71:b1:fa:84:ef:40:c0:99:b2:41:79:87:4b:81:49:5b:d2:
         af:0f:96:d7:17:92:d7:96:4c:04:45:e5:9a:95:01:56:07:33:
         c7:06:3c:7b:69:25:53:2b:fe:dd:98:3f:16:26:b9:5f:07:04:
         98:28:b5:d9:1c:10:2a:33:9b:2d:f6:32:d6:3f:ea:f6:70:9a:
         c2:42:16:9f:19:36:bd:05:d8:c7:45:cf:5c:b3:48:ca:78:f7:
         3a:61:92:28:ff:d2:aa:ac:81:e6:d1:28:99:17:12:54:1b:4a:
         cc:e6:fc:7d:8c:38:7d:fa:61:37:5d:fe:bb:b0:24:31:4a:d4:
         7f:8b:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:17 2025 by rpki-client