Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
File:                     323830343a363564343a3a2f33382d3338203d3e20323639353137.roa (raw, json)
Hash identifier:          1HeKubiHbPyVUCWsWvQdP3FN1TDXks9R2e/Xi6w1BVw=
Subject key identifier:   20:85:72:11:13:E3:BE:E2:AF:5D:6B:3C:9B:C5:40:0C:E6:51:8E:99
Certificate issuer:       /CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
Certificate serial:       40A7DE93132062F4892CFDF6783432192E57C756
Authority key identifier: F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa
Signing time:             Sun 16 Feb 2025 13:29:20 +0000
ROA not before:           Sun 16 Feb 2025 13:24:20 +0000
ROA not after:            Sun 15 Feb 2026 13:29:20 +0000
asID:                     269517
IP address blocks:        2804:65d4::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl
                          rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a7:de:93:13:20:62:f4:89:2c:fd:f6:78:34:32:19:2e:57:c7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3FB9757ABE985717A1ED2B2112ECDA2A257E007
        Validity
            Not Before: Feb 16 13:24:20 2025 GMT
            Not After : Feb 15 13:29:20 2026 GMT
        Subject: CN=2085721113E3BEE2AF5D6B3C9BC5400CE6518E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:4d:34:68:ea:ee:4c:b6:12:e9:23:1b:8c:
                    a3:51:c7:2c:8d:fd:3b:ba:d7:43:9a:96:bb:ec:21:
                    bc:08:2d:32:fc:03:22:ed:2e:01:b9:45:6a:80:9f:
                    bb:fb:44:da:80:2c:5c:cb:cf:ed:26:31:cd:38:6b:
                    64:93:0a:d5:78:d0:b4:fd:28:de:42:af:df:5a:d9:
                    03:d5:be:e6:b5:cd:7b:6f:d8:61:c0:8c:f3:f8:18:
                    98:35:67:a3:04:77:e3:09:49:86:66:56:87:43:73:
                    b4:78:89:41:d6:8e:89:65:76:68:64:a3:e7:ec:d6:
                    97:27:5b:83:80:9a:b4:e6:1f:4d:39:e7:f5:05:8e:
                    40:9b:06:3f:7c:7d:f4:90:19:93:07:39:38:48:34:
                    48:b1:6c:d2:cb:d1:87:d5:bf:1f:92:bf:7a:fa:c4:
                    a9:e3:08:bb:b9:80:be:00:46:3e:f4:ef:65:c8:9b:
                    d9:48:89:a8:1d:55:b6:07:aa:be:9d:cf:1e:89:5c:
                    74:12:e7:25:b7:b8:35:9a:a2:57:d3:c9:24:10:18:
                    8f:8a:32:5a:84:9e:a7:a4:50:11:76:0e:04:62:2a:
                    ee:4a:3c:0a:ff:ad:9b:08:72:ef:b5:af:2b:93:9b:
                    aa:33:2b:c1:4a:25:4f:46:1e:87:2a:a7:d7:5e:08:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:72:11:13:E3:BE:E2:AF:5D:6B:3C:9B:C5:40:0C:E6:51:8E:99
            X509v3 Authority Key Identifier:
                keyid:F3:FB:97:57:AB:E9:85:71:7A:1E:D2:B2:11:2E:CD:A2:A2:57:E0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3FB9757ABE985717A1ED2B2112ECDA2A257E007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/323830343a363564343a3a2f33382d3338203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65d4::/38

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:63:e7:97:c5:5d:e9:73:95:60:8d:f9:5e:5b:19:3f:1b:
         ef:c4:f8:03:53:5c:d2:cb:9d:35:e5:10:5b:8a:74:ea:a4:40:
         1e:0f:20:0b:e9:7d:2e:93:a3:0e:7c:9a:a9:fb:68:87:75:08:
         4c:a3:e3:36:02:8e:d2:01:f0:d8:8e:f9:81:66:7f:78:11:41:
         d9:bf:6b:81:fd:e6:c6:b8:4d:21:a5:91:15:2c:e8:b6:be:ce:
         a6:25:dd:b0:99:bb:eb:d4:99:0e:21:e2:35:6e:df:fe:fe:ba:
         18:b4:cf:45:cc:7c:cf:86:47:a5:b5:82:8d:8c:98:0d:79:bf:
         2c:1d:dd:7a:56:a9:c2:07:ce:0f:fc:a2:51:af:00:1c:7b:1a:
         bc:11:7e:d2:03:34:97:33:fc:81:3e:12:17:b7:e8:2a:69:41:
         60:4c:33:09:cd:89:96:b6:8a:c7:49:d5:07:53:55:23:d1:aa:
         3c:f5:18:04:48:24:d0:b5:5a:ee:1e:69:4e:df:15:08:f9:f9:
         30:71:2a:7d:68:34:db:13:0d:6f:61:9f:86:74:1e:9b:6c:3e:
         62:57:3d:b8:c4:ca:77:c2:f0:f7:c3:ed:09:35:a2:6d:f2:03:
         48:4a:f3:55:2a:9a:51:16:7a:ed:e9:11:67:19:c2:f9:7a:b0:
         d2:ef:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:40:26 2025 by rpki-client