Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa
File:                     323830343a363432633a3a2f33342d3334203d3e20323639343131.roa (raw, json)
Hash identifier:          3eUdHwuUY0GBUH3aIKwPb9o7T8Haz8Bm7Q6RGWx2efY=
Subject key identifier:   BB:08:14:4D:9E:48:95:E7:A2:3F:65:31:BA:C3:67:70:0F:AF:49:B6
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       7D355B536D4C766CB3E626833864834D3E0434CF
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa
Signing time:             Wed 15 Jan 2025 15:46:21 +0000
ROA not before:           Wed 15 Jan 2025 15:41:21 +0000
ROA not after:            Wed 14 Jan 2026 15:46:21 +0000
asID:                     269411
IP address blocks:        2804:642c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:35:5b:53:6d:4c:76:6c:b3:e6:26:83:38:64:83:4d:3e:04:34:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Jan 15 15:41:21 2025 GMT
            Not After : Jan 14 15:46:21 2026 GMT
        Subject: CN=BB08144D9E4895E7A23F6531BAC367700FAF49B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:58:1f:83:6a:4b:f4:e7:93:a1:5f:16:4c:
                    a0:4e:ab:b8:41:65:5a:df:28:58:87:bc:77:7e:2e:
                    17:26:3e:2f:9c:77:bd:30:93:84:cf:c4:1b:4d:a5:
                    3e:93:f9:28:77:b8:26:3f:19:fc:f0:a1:e7:b5:96:
                    ac:22:aa:69:f3:56:d1:b9:61:80:6e:fb:a9:30:22:
                    9f:6d:56:0d:80:05:ec:92:13:5f:3c:1b:48:b5:8c:
                    30:22:00:7b:25:bc:6b:96:8d:16:a2:f8:fd:4e:45:
                    8c:63:3b:34:07:cb:e5:45:b2:fa:79:a1:59:a5:64:
                    20:a6:ee:f3:6b:b4:89:4f:dc:32:10:ae:fb:c3:4f:
                    57:23:aa:16:b3:85:23:3c:32:79:48:4a:1d:22:4b:
                    96:ee:d7:b3:c1:2a:8c:20:f3:a0:11:67:23:da:59:
                    76:e8:2f:93:0f:8a:a2:34:ad:d2:c1:79:6f:09:cd:
                    e0:c7:d5:06:2a:80:98:53:a8:e3:0a:68:30:c3:2a:
                    3d:fd:e3:c7:41:19:65:73:10:5a:4a:e2:95:ab:c9:
                    f3:5d:f5:35:38:87:68:17:07:99:71:6b:b0:b4:ab:
                    44:0c:43:6e:fd:14:a2:04:9a:80:86:33:c3:f0:c6:
                    b7:b6:52:b3:ea:3f:de:35:b9:e0:a8:e9:da:4e:b3:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:08:14:4D:9E:48:95:E7:A2:3F:65:31:BA:C3:67:70:0F:AF:49:B6
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33342d3334203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:d9:d1:ad:7f:60:70:5f:f9:59:b9:5c:27:23:8c:31:70:
         47:24:93:1c:b8:2f:49:e5:e0:00:43:8e:cd:8a:4c:c5:04:cc:
         7d:52:d2:5d:56:b2:de:6e:20:07:53:ab:da:f5:e7:d8:a0:ed:
         26:90:60:8c:69:75:4c:7a:76:61:8a:05:db:6c:dc:b3:96:68:
         12:e5:cc:4d:39:68:51:53:51:1d:ae:95:9e:bf:fe:c9:9b:26:
         2f:91:c0:46:7e:55:e3:9e:1c:7b:62:20:51:12:13:04:cf:2a:
         e3:ba:07:74:69:1b:78:8c:68:15:cd:95:26:8a:e1:28:d2:57:
         c4:cc:3d:10:b1:a6:43:89:7a:db:a8:63:75:f7:b0:82:de:28:
         2a:68:1a:73:87:e5:a6:92:b4:1b:75:74:72:91:f4:d5:d9:77:
         8b:9e:b3:03:cb:3c:f3:1a:74:af:77:f2:16:b0:1c:b7:1d:25:
         cd:84:d6:ef:c3:31:a1:44:c1:b1:a4:5b:3d:4e:75:7d:bc:0a:
         25:7e:ec:74:a0:94:33:98:e8:01:41:09:61:16:15:f9:42:55:
         9a:e7:0b:17:62:24:e9:94:1c:60:81:3a:c0:26:07:f3:d2:fc:
         72:67:01:8c:86:7b:af:1d:e6:f1:46:43:d4:3e:3d:2f:a4:18:
         d4:ec:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:54 2025 by rpki-client