Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3336203d3e203532393130.roa
File:                     323830343a316633633a3a2f33362d3336203d3e203532393130.roa (raw, json)
Hash identifier:          lfqZkpYjQtoRCrlJD+BBcFVCp7Q4ArEgJm8EQlnhS+8=
Subject key identifier:   31:0D:D8:B8:FC:A4:6A:45:AF:02:C3:B8:64:92:8C:32:B0:5E:3A:08
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       3E34457EF9C468AE71DB2A499691A090B1EDF797
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3336203d3e203532393130.roa
Signing time:             Wed 04 Jun 2025 13:08:07 +0000
ROA not before:           Wed 04 Jun 2025 13:03:07 +0000
ROA not after:            Wed 03 Jun 2026 13:08:07 +0000
asID:                     52910
IP address blocks:        2804:1f3c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl
                          rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 16:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:34:45:7e:f9:c4:68:ae:71:db:2a:49:96:91:a0:90:b1:ed:f7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Jun  4 13:03:07 2025 GMT
            Not After : Jun  3 13:08:07 2026 GMT
        Subject: CN=310DD8B8FCA46A45AF02C3B864928C32B05E3A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:48:9f:02:e6:cb:b8:98:97:a7:a4:09:e3:
                    a0:53:c9:f4:3a:8c:9d:48:6a:a2:ee:80:66:11:ac:
                    37:ae:3d:03:9d:b9:c6:45:bf:64:4c:5e:08:53:bc:
                    0b:12:11:ea:10:9c:42:d0:2c:b6:6d:04:6f:d8:ea:
                    1e:8b:31:4d:01:83:bd:bd:6d:60:5d:d6:32:6e:b0:
                    d2:c4:d5:bd:2d:b2:e3:c9:5e:cc:f1:a6:aa:26:ef:
                    4f:e9:c0:5a:fb:16:f1:a7:5f:b2:91:5f:71:f3:ad:
                    87:00:b9:f2:f0:1e:0c:39:a8:42:5c:1a:d1:c3:2b:
                    f1:ec:37:52:9a:97:02:be:5a:38:e6:47:af:83:44:
                    c0:ab:ae:a2:6a:06:fa:d7:f0:fd:53:6a:24:7a:07:
                    7c:60:17:9d:3a:a0:bb:f4:03:d3:f2:9e:fe:ed:21:
                    24:48:72:ce:4c:9c:29:8e:24:aa:a3:51:60:7a:1b:
                    78:32:89:b5:17:da:27:71:45:f8:48:c4:82:6c:82:
                    b1:75:bf:2e:f5:56:50:18:dc:6f:b9:bc:41:55:d1:
                    67:e2:37:40:e5:9c:b8:86:be:34:3b:3d:3d:84:6a:
                    45:8b:7d:ab:66:99:3e:13:aa:f6:bc:07:2f:c3:77:
                    5e:c2:6b:da:c1:bf:ed:67:1a:a2:cc:26:fb:d1:e4:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0D:D8:B8:FC:A4:6A:45:AF:02:C3:B8:64:92:8C:32:B0:5E:3A:08
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/323830343a316633633a3a2f33362d3336203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:fa:5f:64:a0:a7:1e:a6:f5:1e:09:c1:1a:fd:be:d8:4e:
         5f:dd:da:ac:e7:0c:07:49:72:94:be:11:40:07:f7:40:6a:bd:
         d6:0c:5f:04:ad:b4:72:06:90:85:86:38:d9:6a:f9:19:c0:49:
         b4:f5:53:b1:bf:4a:7c:fd:97:33:f8:75:d7:c4:1e:5f:27:7f:
         ba:fc:2b:db:1c:b3:87:e9:a2:24:8e:1a:b7:36:26:f1:7c:f4:
         86:80:98:c3:ea:61:ea:4b:cb:50:85:11:1e:c3:19:db:c2:d4:
         88:87:3c:8d:d6:68:93:44:26:72:e9:dd:eb:d0:e5:17:4e:c7:
         11:ed:f2:ac:72:5e:e6:91:cf:1c:2b:61:ce:ae:27:42:f2:b6:
         ca:1c:b1:8f:bf:3b:e1:67:47:7f:6d:ab:bf:e4:4b:15:a0:28:
         a6:ca:89:1b:1f:a6:b9:6e:30:c2:65:8e:e3:7e:ae:e9:82:18:
         ec:b8:b5:76:90:5d:3b:4e:70:c0:5e:b8:50:3d:2b:08:85:00:
         f7:ce:7e:0a:92:1d:43:6b:6e:23:58:57:0e:20:60:5e:d9:8d:
         3b:96:87:cd:57:d4:52:be:c2:2d:69:19:fc:3f:1d:98:7c:5e:
         29:3c:00:af:2a:91:0a:49:14:96:2b:94:2b:9c:30:d5:45:3a:
         06:96:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:49 2025 by rpki-client