Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/323830343a386236633a3a2f33322d3438203d3e20323733373331.roa
File:                     323830343a386236633a3a2f33322d3438203d3e20323733373331.roa (raw, json)
Hash identifier:          FtOudNjBvH5mXqf9fnsblNhXiCh2Q1zEigXiAZi2HmI=
Subject key identifier:   08:87:CB:C0:11:F9:26:E1:04:14:A2:B6:5F:40:E5:A1:B7:46:D0:E9
Certificate issuer:       /CN=F1E9319B37DE0D952E2B895560AD62ADFE31D936
Certificate serial:       273CF07B03F1BC1A820297FF1C1E185F639CC4EA
Authority key identifier: F1:E9:31:9B:37:DE:0D:95:2E:2B:89:55:60:AD:62:AD:FE:31:D9:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9319B37DE0D952E2B895560AD62ADFE31D936.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/323830343a386236633a3a2f33322d3438203d3e20323733373331.roa
Signing time:             Tue 10 Dec 2024 18:21:33 +0000
ROA not before:           Tue 10 Dec 2024 18:16:33 +0000
ROA not after:            Tue 09 Dec 2025 18:21:33 +0000
asID:                     273731
IP address blocks:        2804:8b6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/F1E9319B37DE0D952E2B895560AD62ADFE31D936.crl
                          rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/F1E9319B37DE0D952E2B895560AD62ADFE31D936.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9319B37DE0D952E2B895560AD62ADFE31D936.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:f0:7b:03:f1:bc:1a:82:02:97:ff:1c:1e:18:5f:63:9c:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1E9319B37DE0D952E2B895560AD62ADFE31D936
        Validity
            Not Before: Dec 10 18:16:33 2024 GMT
            Not After : Dec  9 18:21:33 2025 GMT
        Subject: CN=0887CBC011F926E10414A2B65F40E5A1B746D0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:0f:cc:65:ab:49:cd:41:10:28:c3:4a:9f:
                    90:9a:f7:97:cf:09:af:6b:2e:31:61:84:fc:e2:73:
                    83:ea:b6:4e:79:b1:de:f5:07:34:41:3c:4a:ff:fa:
                    d3:99:ea:b7:9b:61:93:d0:6e:a4:80:f6:84:bd:da:
                    fb:3e:30:a5:27:37:a4:95:90:36:e7:69:63:bd:00:
                    b5:5a:80:2a:c6:22:27:e0:51:ab:50:fa:8e:2b:bb:
                    26:73:00:0b:f4:af:24:cd:5b:4d:ac:d6:eb:89:6a:
                    6e:56:59:e5:ab:f4:8a:35:08:ad:a7:84:30:8b:45:
                    b6:37:d6:9c:33:f0:40:79:dc:6a:8d:32:cf:af:cb:
                    25:f2:69:d2:89:69:95:42:b8:35:81:1d:c9:31:06:
                    03:80:24:f6:12:cc:7f:3a:9c:a5:85:69:a8:b6:bf:
                    4f:6b:07:d2:ae:a4:bd:46:a3:ba:1f:38:d8:69:f3:
                    10:da:ee:90:3c:20:0a:4f:20:79:6a:0e:02:66:b0:
                    a5:7f:4e:ba:57:23:ae:30:40:40:da:a0:ee:9e:46:
                    4b:92:da:f5:21:7b:ac:42:cc:61:28:64:a8:82:03:
                    5a:e2:de:24:f3:16:88:46:25:05:fe:91:4d:01:09:
                    d9:96:8d:56:22:2c:6f:a2:9b:bf:21:2b:b9:d4:9f:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:87:CB:C0:11:F9:26:E1:04:14:A2:B6:5F:40:E5:A1:B7:46:D0:E9
            X509v3 Authority Key Identifier:
                keyid:F1:E9:31:9B:37:DE:0D:95:2E:2B:89:55:60:AD:62:AD:FE:31:D9:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/F1E9319B37DE0D952E2B895560AD62ADFE31D936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1E9319B37DE0D952E2B895560AD62ADFE31D936.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5WvN6E9rPihRsqQnD2stgBeiVGv1VvupTr21VDQ1sk/0/323830343a386236633a3a2f33322d3438203d3e20323733373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:48:49:d7:7c:82:0f:ec:66:ed:3b:64:bc:02:a6:d1:58:
         cf:b1:fd:6c:d9:f3:a6:8e:0e:4b:1d:2b:44:76:d6:98:e9:2c:
         c9:79:bb:52:69:11:d4:48:f7:0b:2b:81:0c:ae:cd:32:db:81:
         02:ec:26:4b:8a:4e:b3:3c:82:86:b0:7c:8c:6f:60:46:22:9c:
         75:bf:10:74:4b:57:0b:b9:01:40:a5:7a:53:5b:f1:59:98:4d:
         ac:4b:1a:0e:1f:91:1c:92:19:81:93:6e:17:47:5b:3b:ab:30:
         42:e8:1b:36:6a:01:04:89:52:b0:9d:c1:7d:2b:7d:25:50:a4:
         51:90:5e:23:2e:59:23:af:5d:cc:f8:9e:85:29:16:4c:ee:f9:
         e9:64:5b:06:c6:20:f3:10:a3:a2:02:cf:33:ce:f3:c1:1e:df:
         ef:6d:f9:7e:88:d4:b2:1f:ca:31:92:52:72:5b:55:e4:5d:f9:
         67:81:53:70:6b:e8:37:b0:3d:00:11:59:6b:d4:02:79:de:4e:
         cc:07:43:c0:d4:7a:5b:a4:ed:96:f8:55:7f:95:0b:1f:0e:b4:
         1c:b5:e0:4b:b0:c9:5a:5a:8c:d1:f8:0d:2a:3e:85:15:4f:f8:
         80:61:15:3a:d4:c8:da:a5:f3:32:39:2d:6a:fa:f0:19:75:23:
         4a:12:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:22 2025 by rpki-client