Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa
File:                     323830343a343965633a3a2f33342d3334203d3e20323637323039.roa (raw, json)
Hash identifier:          LS+wpmVWHYx1hG6Eg1z4hvd0AV3hbC6HjSn47jpBhYg=
Subject key identifier:   B5:B6:2F:61:D1:2B:A7:23:CC:E4:29:F5:32:F4:BD:D6:D5:81:D5:F2
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       79DD3C75B7CFE2DBE36AD80B01C6617476AA7D7D
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:02 +0000
ROA not before:           Thu 06 Mar 2025 11:07:02 +0000
ROA not after:            Thu 05 Mar 2026 11:12:02 +0000
asID:                     267209
IP address blocks:        2804:49ec::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:3c:75:b7:cf:e2:db:e3:6a:d8:0b:01:c6:61:74:76:aa:7d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:02 2025 GMT
            Not After : Mar  5 11:12:02 2026 GMT
        Subject: CN=B5B62F61D12BA723CCE429F532F4BDD6D581D5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:04:10:d7:a0:08:28:a1:b9:c7:8b:23:3d:
                    91:4f:47:2d:af:dc:0c:56:e1:c3:c3:ec:17:da:7d:
                    27:cd:60:6e:cc:4b:85:4e:75:07:71:0d:b7:bc:36:
                    5f:52:d3:19:dc:78:16:f4:52:4c:7a:fa:4c:d5:23:
                    a5:49:40:5c:07:d4:a5:9a:8b:35:6c:04:b7:8d:e4:
                    10:73:29:0d:3a:2c:8d:6b:09:f6:87:73:cd:97:18:
                    05:75:a4:3c:e5:ca:5d:05:5a:52:57:b8:bb:67:ed:
                    c4:5d:3a:0f:17:45:2a:2c:d6:81:fd:03:b2:3b:bc:
                    9b:00:a1:f4:74:7a:df:71:7c:15:5f:c6:83:a2:cb:
                    79:e2:bc:00:12:a7:a4:4f:1e:75:08:c9:e4:61:da:
                    f5:ac:ce:ed:b3:21:88:b1:b3:1e:96:8f:71:f4:ce:
                    b9:0c:4a:e7:cf:53:1f:66:ec:2d:dd:05:83:d1:ca:
                    ab:fe:39:11:b3:73:84:0d:27:c0:96:bc:60:38:e2:
                    19:44:8a:e3:26:1d:1a:ae:df:41:4d:9f:9d:c4:d6:
                    79:53:68:f3:69:eb:e4:1c:5d:c7:f9:e0:2c:91:5e:
                    a5:4f:32:bd:d1:fe:55:8e:00:ae:cf:58:5f:67:0c:
                    b9:b6:da:4f:0a:1d:5a:db:76:b0:95:b6:4a:4b:21:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B6:2F:61:D1:2B:A7:23:CC:E4:29:F5:32:F4:BD:D6:D5:81:D5:F2
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a3a2f33342d3334203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:87:8d:01:81:b4:65:d2:f9:e4:e8:cb:c5:59:0a:60:71:
         da:41:92:72:35:d9:0e:f7:45:b8:f5:ca:fe:da:7b:db:fa:6c:
         71:ef:ef:ab:ce:55:12:eb:31:cd:64:bc:5d:ae:70:0d:71:d2:
         6e:97:ee:7f:ee:73:60:81:55:87:83:95:01:d5:01:42:69:80:
         16:66:bf:80:4a:20:b8:24:5f:ab:7e:c7:47:f8:4c:5e:9a:23:
         8f:8c:fa:b4:1b:50:6b:20:8b:bf:dc:98:ed:96:e8:3d:84:b5:
         03:d5:12:29:b0:30:5a:74:ec:98:84:e2:dc:71:22:81:0b:92:
         09:39:d9:a1:df:88:da:a6:c5:b1:07:0a:ac:8a:75:61:7d:f8:
         3d:04:e1:e6:96:4a:e4:2d:dc:21:91:3a:23:d3:a9:27:8c:4e:
         ec:f3:90:f1:e1:16:69:30:c0:df:df:1f:17:4a:3c:5d:57:be:
         ed:ec:46:41:89:76:26:2a:78:65:4c:f9:6b:c2:d3:96:d5:34:
         cb:e4:78:8e:b8:a7:7c:22:6f:f7:a0:b7:31:cf:2a:6c:60:5f:
         82:0c:bc:67:36:28:ec:25:dc:cf:88:96:a8:95:3f:16:42:07:
         ca:5d:7d:7e:20:8e:fd:e3:85:25:b9:03:2e:6b:e8:b8:e4:3f:
         d8:91:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:28 2025 by rpki-client