Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a633030303a3a2f33342d3334203d3e20323637323039.roa
File:                     323830343a343965633a633030303a3a2f33342d3334203d3e20323637323039.roa (raw, json)
Hash identifier:          suZ8OaovjZugOhipCyUdLJYca/QmTXVYdPWCrmqDfJA=
Subject key identifier:   3B:80:F2:5D:48:86:7D:A5:0E:38:88:4D:48:EC:40:45:4D:5D:C6:97
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       6385D13ACE8B13726DB58CB93B981A883B44AC56
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a633030303a3a2f33342d3334203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:01 +0000
ROA not before:           Thu 06 Mar 2025 11:07:01 +0000
ROA not after:            Thu 05 Mar 2026 11:12:01 +0000
asID:                     267209
IP address blocks:        2804:49ec:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:d1:3a:ce:8b:13:72:6d:b5:8c:b9:3b:98:1a:88:3b:44:ac:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:01 2025 GMT
            Not After : Mar  5 11:12:01 2026 GMT
        Subject: CN=3B80F25D48867DA50E38884D48EC40454D5DC697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:3a:2e:ba:a2:1b:df:72:83:a0:9d:d9:25:
                    51:e0:32:68:31:d4:b9:01:78:ae:8e:d0:ad:5e:37:
                    90:bb:01:f3:f7:b6:a7:d2:3a:3d:12:45:c6:64:ea:
                    36:07:e6:98:66:16:0f:97:86:61:c0:8c:62:b7:ee:
                    f7:01:c4:5d:43:dd:2a:e1:59:ad:3f:3c:11:f8:bf:
                    89:d7:4c:c1:47:85:0b:8f:f5:d6:47:8f:16:89:ef:
                    fb:4e:ad:2f:a8:de:d2:6e:b2:a5:f2:ff:37:88:32:
                    fa:06:72:39:35:b9:44:e8:95:9b:ad:f6:03:82:0d:
                    c4:72:29:d9:2b:71:dd:62:ab:95:83:f9:af:45:8c:
                    56:4a:64:59:03:ac:77:fe:43:36:72:9d:45:56:5c:
                    b4:c2:0e:a1:9f:a1:80:eb:37:11:ed:75:6d:94:32:
                    a8:ed:16:b4:c1:ed:f0:59:0b:ed:92:96:aa:f6:b9:
                    d8:a2:2e:b6:50:48:b4:89:4a:b3:4d:f2:38:aa:dd:
                    8a:de:53:18:c2:3e:bb:76:04:92:7f:a5:5a:a2:17:
                    b3:8c:45:5b:22:15:f4:1d:50:1f:1f:8a:d7:a1:70:
                    b8:ed:fc:e7:70:21:f8:45:75:1f:d4:79:03:cb:42:
                    87:eb:db:54:14:d4:b8:d3:b9:80:d8:62:b7:c0:24:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:F2:5D:48:86:7D:A5:0E:38:88:4D:48:EC:40:45:4D:5D:C6:97
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a633030303a3a2f33342d3334203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:88:77:c5:f2:81:8c:8a:bc:8b:fd:b4:ac:72:e1:f8:02:
         50:de:56:e7:f1:7c:a3:6f:3a:17:52:f5:10:47:e0:0b:7d:4a:
         b3:25:42:14:a4:a2:52:0c:e7:df:e9:9c:3f:49:b8:fb:87:66:
         8e:6b:8f:cf:27:64:66:b0:2f:1c:84:5a:29:60:9c:32:9c:16:
         a3:d0:66:cc:7f:89:77:e2:40:0e:b9:8f:30:26:3c:92:c2:1e:
         15:7d:86:72:2c:f8:6e:c7:ad:d2:58:f6:73:6b:51:78:e9:ba:
         07:d3:28:4c:92:1b:68:bc:01:45:98:82:b5:c7:82:72:73:96:
         7f:6d:3e:47:7b:82:ca:70:cf:59:1c:52:bb:56:34:8d:b6:40:
         7b:b1:3c:e5:98:21:28:9c:92:89:cc:bd:32:ff:95:31:09:10:
         36:5e:6f:59:a2:49:1c:a2:d9:0a:7e:e7:e7:88:a9:df:d8:44:
         77:5f:72:c4:a3:a3:07:e2:e4:c3:54:13:c9:2a:88:6d:8b:b5:
         c6:a0:26:c0:62:4f:a2:bd:72:dc:63:85:ec:ab:94:80:57:ca:
         0c:28:31:04:1f:d2:61:ca:c0:cd:ee:9b:1a:ab:8d:10:17:10:
         5f:0e:f3:0c:07:f5:1a:48:3e:63:89:5e:5d:ec:11:5e:77:9d:
         ef:a6:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:17 2025 by rpki-client