Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          b1I9SwLX2uCFiaKppeaZOgnAI5oJ2+i8eRjQyjnBQCM=
Subject key identifier:   63:05:99:1D:47:FB:50:F0:67:02:F3:56:4C:79:33:E6:61:22:91:47
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       754CBE2DA7E698AF083B5F7D0B37F19307B7175A
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 15 Jan 2025 15:46:21 +0000
ROA not before:           Wed 15 Jan 2025 15:41:21 +0000
ROA not after:            Wed 14 Jan 2026 15:46:21 +0000
asID:                     269411
IP address blocks:        2804:642c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 03:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4c:be:2d:a7:e6:98:af:08:3b:5f:7d:0b:37:f1:93:07:b7:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Jan 15 15:41:21 2025 GMT
            Not After : Jan 14 15:46:21 2026 GMT
        Subject: CN=6305991D47FB50F06702F3564C7933E661229147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:a9:57:76:97:d7:da:f6:4f:b5:9c:07:71:
                    21:40:83:8c:cc:dc:b2:a4:76:22:37:a8:ec:65:b7:
                    f3:a3:cb:f6:6a:b2:b0:e6:2c:dd:0f:22:b1:63:6d:
                    04:00:68:0c:46:21:a6:0e:36:4d:42:ff:cf:9c:4e:
                    a2:52:c5:70:c1:0d:d0:75:71:74:c8:3c:a5:23:0c:
                    c9:b1:5a:48:ce:6c:9b:b4:87:14:c0:2b:16:6d:39:
                    ef:1b:8d:a7:d9:39:74:2f:ad:09:62:54:d5:fc:af:
                    64:2c:cb:2a:c1:e1:59:cc:72:3a:e2:34:3d:2d:21:
                    cd:78:f6:64:c4:52:46:1d:28:30:99:82:97:26:21:
                    5f:a9:82:85:20:ef:09:62:32:88:77:42:9f:dd:d5:
                    0c:95:63:a9:df:f2:f3:98:c3:0d:b5:0e:ea:41:a8:
                    f1:fa:61:18:f1:84:47:73:a1:20:e8:32:6d:e7:ef:
                    cd:e4:3c:ac:08:66:d9:ea:af:30:a2:f8:e3:a5:96:
                    e2:4c:a5:c4:d3:fa:1b:59:a9:9f:75:a1:d7:f4:df:
                    cd:fb:13:4f:5c:37:56:5f:7e:e0:ea:c2:aa:6b:52:
                    c4:af:b7:50:4d:9a:fa:4f:9e:cb:0d:38:b7:ff:79:
                    d3:23:0c:c5:91:cd:e5:dc:d4:79:1d:99:38:bd:ca:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:99:1D:47:FB:50:F0:67:02:F3:56:4C:79:33:E6:61:22:91:47
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a383030303a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:68:69:66:10:3e:d3:81:a6:bc:32:d5:b6:fa:f2:b7:f8:
         36:f2:cb:a6:b1:68:09:58:96:5c:0a:5d:0c:e2:02:ca:82:97:
         90:a3:de:7d:68:ec:42:b1:35:b5:cf:00:e6:f6:52:77:e1:ba:
         d6:20:51:b5:07:a3:8b:ee:b4:3a:7e:c6:0f:33:38:72:f1:f3:
         ed:e2:16:4d:cd:8c:54:9b:17:05:18:c5:2c:4e:4e:07:56:34:
         11:77:6e:7d:21:40:4d:90:ef:06:ce:b1:a0:bf:b3:32:6c:5d:
         7d:13:4d:b4:33:47:51:c1:0b:d5:68:df:1b:24:a7:34:d7:f3:
         e3:ed:6e:f6:a8:0f:ae:67:73:59:1a:80:b6:f3:36:65:5c:86:
         9b:d1:2b:a6:7b:97:6e:f4:83:09:36:a2:99:1e:bf:02:d9:d5:
         2c:ab:67:10:e2:1f:97:6a:67:b4:c6:5e:bd:b8:26:c8:49:30:
         6d:f3:ca:10:5b:14:9f:10:f6:13:12:46:7b:c0:02:a6:90:dc:
         68:4b:9b:7c:53:7a:37:ee:4b:ae:36:4e:28:7e:af:60:80:6e:
         c6:07:03:f0:05:2f:e5:6b:cc:04:d7:71:b6:9b:af:13:7c:6b:
         d5:b2:7c:88:84:e9:dc:8c:37:8f:3e:2a:58:5e:b8:83:05:03:
         09:34:37:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:42:37 2025 by rpki-client