Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34332d3433203d3e20323635313837.roa
File:                     323830343a326330303a3363303a3a2f34332d3433203d3e20323635313837.roa (raw, json)
Hash identifier:          H91TogxO4o0GsCagBmYA2Y04mVQhJw3OJ4+3+ISfXwg=
Subject key identifier:   B6:96:04:31:47:6D:5B:B4:EB:63:A7:64:38:A0:BB:62:FD:B2:33:01
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       4B73CF5A927DBF6714EEFFFEBCA761F9DC0FBA34
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34332d3433203d3e20323635313837.roa
Signing time:             Sat 01 Feb 2025 20:31:13 +0000
ROA not before:           Sat 01 Feb 2025 20:26:13 +0000
ROA not after:            Sat 31 Jan 2026 20:31:13 +0000
asID:                     265187
IP address blocks:        2804:2c00:3c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:cf:5a:92:7d:bf:67:14:ee:ff:fe:bc:a7:61:f9:dc:0f:ba:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Feb  1 20:26:13 2025 GMT
            Not After : Jan 31 20:31:13 2026 GMT
        Subject: CN=B6960431476D5BB4EB63A76438A0BB62FDB23301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:a1:3b:47:2a:51:81:72:be:8a:b5:c9:f3:
                    a8:12:36:04:36:77:a2:50:0e:7f:f5:59:54:55:dc:
                    2f:57:d7:18:1f:3f:4c:77:28:65:c9:c4:f2:e0:1d:
                    2b:ea:fd:f3:c8:8a:c6:44:cf:a4:3a:68:d3:0f:7b:
                    f2:76:2e:cd:7f:02:c3:8e:48:55:bb:9f:b0:78:5f:
                    4f:bd:4b:ee:41:f5:02:4f:89:8e:14:5f:f9:7e:38:
                    48:dc:4e:2f:c6:0c:dd:70:4e:50:39:9b:a2:57:39:
                    dd:34:1f:a1:0a:26:c0:aa:ee:32:06:c1:d7:49:ea:
                    33:06:11:03:43:f8:ee:22:cf:f5:dc:a9:c5:ba:f3:
                    51:76:06:d3:3e:01:17:88:3c:9a:6a:41:8e:6a:ef:
                    1b:6c:39:8d:31:3f:cf:1a:22:3a:cd:9c:c5:28:29:
                    cb:44:b7:79:fa:d8:be:93:ce:8e:a0:98:59:fc:30:
                    f5:a4:a2:be:e4:2d:91:e5:39:8b:14:17:ec:fc:0a:
                    67:f3:51:04:bf:92:03:b1:fc:87:49:69:a3:e1:5a:
                    c8:19:f5:88:ff:2a:a5:f3:10:51:19:e9:3c:f4:2b:
                    75:12:18:9c:8a:5b:e1:59:24:62:f7:50:44:9d:3b:
                    58:ae:fa:3c:bd:38:b4:fb:16:e7:65:c6:50:e1:5b:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:04:31:47:6D:5B:B4:EB:63:A7:64:38:A0:BB:62:FD:B2:33:01
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3363303a3a2f34332d3433203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:3c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:81:3d:bd:af:14:72:8f:0a:28:a9:e9:2f:ae:12:d0:9a:
         aa:8b:a3:a7:e2:19:0e:45:45:7a:8b:2a:c1:81:eb:27:f0:a2:
         0c:ba:48:25:75:79:74:ae:0b:e8:93:05:5c:0e:cc:3a:98:c4:
         55:61:c3:c5:4b:5b:7d:47:59:89:93:2f:c5:05:1b:f5:67:c6:
         1f:9a:77:0c:51:47:77:f9:ec:6f:55:bd:28:15:51:ff:52:d0:
         1d:ec:10:11:75:f1:59:c7:ff:39:e7:70:ec:21:a2:24:4d:a3:
         ee:2b:0b:56:34:bf:08:7b:0c:63:c2:51:ad:f1:eb:58:3f:72:
         c1:3b:ff:80:d9:d6:99:94:35:89:e6:51:0e:26:bf:93:db:bb:
         41:fd:7b:2e:4d:5b:6f:de:18:c0:b4:fa:dc:5e:7a:54:e8:43:
         d2:fd:7a:dc:da:59:0f:2a:c6:10:94:b6:96:93:ca:73:cd:cd:
         e4:45:b3:8f:22:bd:bb:4e:02:eb:32:76:52:2e:db:e6:8a:d3:
         e2:ae:fe:b4:ee:16:f6:53:5c:37:c0:38:c2:e2:6f:e9:7a:2e:
         41:02:7f:bd:1e:3e:d2:9d:cc:39:5e:1d:d0:32:7e:0e:10:21:
         f9:e7:40:01:13:ef:fe:51:c7:e5:7d:18:9c:ac:cb:14:07:d9:
         f7:a9:65:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:01:55 2025 by rpki-client