Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
File:                     323830343a383636303a3a2f33322d3332203d3e20323732363339.roa (raw, json)
Hash identifier:          7rrIE5OP03n9aZiR4IkJPKUOmCBVjnU3eRdX3MiZIVw=
Subject key identifier:   F5:C3:C0:F2:F3:B3:5C:D9:67:30:64:25:A7:E5:25:69:46:E3:69:9D
Certificate issuer:       /CN=2102F1879CA4D61251D630CB79E650FDA70A9610
Certificate serial:       7C77BA346E943E9A988F171195B433E079107A31
Authority key identifier: 21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa
Signing time:             Wed 05 Mar 2025 22:59:51 +0000
ROA not before:           Wed 05 Mar 2025 22:54:51 +0000
ROA not after:            Wed 04 Mar 2026 22:59:51 +0000
asID:                     272639
IP address blocks:        2804:8660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl
                          rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:77:ba:34:6e:94:3e:9a:98:8f:17:11:95:b4:33:e0:79:10:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2102F1879CA4D61251D630CB79E650FDA70A9610
        Validity
            Not Before: Mar  5 22:54:51 2025 GMT
            Not After : Mar  4 22:59:51 2026 GMT
        Subject: CN=F5C3C0F2F3B35CD967306425A7E5256946E3699D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:52:07:8e:46:ec:79:9b:bb:f4:b0:12:79:
                    f9:73:12:df:35:f9:2b:00:a7:6e:fb:93:c3:37:f3:
                    2e:24:6b:7b:31:66:f0:c6:50:b4:01:2d:db:e6:ed:
                    ae:32:cb:0b:45:d7:ad:bd:45:13:05:60:f3:82:e0:
                    2b:ec:57:bf:07:0f:bc:dc:85:13:49:f5:96:9f:6f:
                    68:b7:d7:0e:5d:09:bf:b6:17:c4:22:c6:78:16:34:
                    12:49:94:d2:60:f9:b6:56:bd:8e:29:c6:6d:74:22:
                    27:e0:b1:0f:9b:00:02:c8:30:0a:bb:c0:2d:86:c0:
                    73:ad:20:cc:7c:87:01:10:54:21:16:db:fa:1e:0d:
                    10:e7:27:cf:15:57:fc:93:f6:d4:cc:b4:73:3d:ac:
                    f2:8c:f1:9b:4f:91:2e:0f:f1:42:4a:81:ad:22:91:
                    a1:8b:9a:2a:2d:9a:bd:91:72:b6:74:b7:d9:cb:4b:
                    c5:57:af:04:e0:37:39:68:3f:f1:3c:12:ab:04:ae:
                    ed:c2:c4:f2:aa:36:a6:52:15:e9:f0:6a:3a:d1:74:
                    86:8d:a3:82:da:a7:b2:d2:e2:0a:5f:81:dc:07:51:
                    5c:01:5f:f8:b9:93:83:fe:3d:67:d9:ce:2e:1d:ce:
                    dd:fd:b6:35:e2:62:12:85:34:b3:bc:55:7a:93:10:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C3:C0:F2:F3:B3:5C:D9:67:30:64:25:A7:E5:25:69:46:E3:69:9D
            X509v3 Authority Key Identifier:
                keyid:21:02:F1:87:9C:A4:D6:12:51:D6:30:CB:79:E6:50:FD:A7:0A:96:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/2102F1879CA4D61251D630CB79E650FDA70A9610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2102F1879CA4D61251D630CB79E650FDA70A9610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xhzCjtGqfyJ4TPu2f6FAMXi5VUJoKdLn4RrkoV23Ey/1/323830343a383636303a3a2f33322d3332203d3e20323732363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:17:6f:16:17:00:86:1b:ce:df:b0:86:24:32:05:c0:52:
         47:fa:6f:51:9b:71:de:c3:53:6a:27:da:2e:be:e1:83:bf:c5:
         ae:22:a7:11:08:55:1f:b2:4a:fd:7a:75:e2:3b:71:a1:7a:a0:
         05:89:7f:eb:c1:ea:7a:4d:c4:12:65:1f:f4:ed:e1:0d:07:fe:
         3c:c2:e0:08:fe:0e:bd:0d:05:5d:a3:ef:00:16:fc:ac:1a:ef:
         3f:b1:e6:ea:e7:b3:ed:da:6d:e1:66:90:50:92:f5:05:9c:65:
         f0:21:08:8e:19:f6:bc:2b:15:b8:90:ff:28:5d:f9:21:de:d2:
         69:02:43:d0:17:85:21:6b:10:30:9c:a6:6c:72:2b:80:4f:26:
         b7:9f:eb:71:20:f7:27:bc:4b:44:22:7d:f8:a9:cb:ea:f7:bb:
         07:4c:93:d3:74:ed:eb:99:08:fe:e9:45:32:3a:5e:28:a0:66:
         2c:ec:67:f6:f0:3c:0b:67:73:61:99:fc:28:18:13:98:66:5d:
         f1:f6:fe:02:e4:be:7f:22:34:dd:9e:fc:b4:a5:63:d5:64:8d:
         29:19:e2:04:8d:51:0d:a7:9c:65:dc:5a:4d:26:f6:6c:c5:6f:
         dd:99:fb:dc:e0:c3:6b:57:2e:9e:ef:f6:24:1a:4c:13:7b:e6:
         07:d9:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:56:16 2025 by rpki-client