Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3335203d3e20323638303835.roa
File:                     323830343a353763343a3a2f33322d3335203d3e20323638303835.roa (raw, json)
Hash identifier:          W1pAsH2MwrGsE7ByzDIW7gg9i6/vO8JCchXAl2Lt+hY=
Subject key identifier:   42:2A:FD:0E:0C:EC:62:32:1B:2F:59:5F:36:CD:9A:62:85:6F:6D:0B
Certificate issuer:       /CN=F82D6F3392B95584EECA832E87C32189709E8DF5
Certificate serial:       4471BFC995DC58521B2F7AE2E10120B348C088C9
Authority key identifier: F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3335203d3e20323638303835.roa
Signing time:             Thu 21 Nov 2024 12:19:19 +0000
ROA not before:           Thu 21 Nov 2024 12:14:19 +0000
ROA not after:            Thu 20 Nov 2025 12:19:19 +0000
asID:                     268085
IP address blocks:        2804:57c4::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.crl
                          rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:bf:c9:95:dc:58:52:1b:2f:7a:e2:e1:01:20:b3:48:c0:88:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F82D6F3392B95584EECA832E87C32189709E8DF5
        Validity
            Not Before: Nov 21 12:14:19 2024 GMT
            Not After : Nov 20 12:19:19 2025 GMT
        Subject: CN=422AFD0E0CEC62321B2F595F36CD9A62856F6D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:ce:74:8f:7b:af:23:14:d6:71:88:93:58:
                    77:8b:76:eb:a6:03:35:8c:ff:a3:6e:5b:77:c5:10:
                    7a:80:29:0e:83:36:a7:54:98:1d:8d:2a:c7:42:05:
                    24:de:9a:1f:84:06:10:e3:eb:2c:93:f7:1c:b7:64:
                    7d:19:e8:2a:16:99:7d:0b:15:34:84:64:75:1a:d5:
                    92:6d:41:e4:38:62:4a:8f:7e:b6:e8:dd:e2:2b:8c:
                    53:cd:30:2f:15:aa:04:a4:7b:b2:e8:39:a5:65:c3:
                    96:08:87:61:5d:57:4e:0d:8b:1f:3b:1e:0f:35:92:
                    34:49:5c:9a:73:4d:7c:14:84:ba:17:dd:6d:af:02:
                    14:6c:6c:98:f6:2b:f6:3f:8b:16:39:50:78:40:f5:
                    54:9e:75:2f:88:55:78:81:ce:70:22:4c:64:22:83:
                    ac:c3:46:af:67:52:d3:1b:16:a5:cb:68:44:87:41:
                    f6:bc:33:2b:b9:f5:ba:20:18:13:16:f7:0a:7f:19:
                    91:26:29:44:7e:e4:1b:57:76:6c:93:86:bf:27:20:
                    10:dd:26:25:81:58:bb:ee:44:93:9d:81:a3:85:df:
                    7b:13:03:c9:31:eb:1e:97:a0:ae:aa:2e:fa:82:84:
                    d2:94:f0:9a:18:f7:19:0a:b1:8b:d3:45:e2:b5:38:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:FD:0E:0C:EC:62:32:1B:2F:59:5F:36:CD:9A:62:85:6F:6D:0B
            X509v3 Authority Key Identifier:
                keyid:F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3335203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:9e:a0:bf:96:7b:2b:60:6d:e3:a2:42:50:0b:dd:98:28:
         0c:76:17:b4:6e:35:9e:8b:62:d8:59:80:f8:57:cc:38:cd:75:
         5c:50:55:f3:2b:5f:5b:c5:14:eb:29:38:48:5f:2f:de:ce:08:
         96:00:6c:ad:6e:3f:2f:ae:41:f9:3b:ed:05:9c:f6:27:16:b4:
         7e:bf:14:cd:07:b8:2b:3c:c7:fb:03:c9:24:cf:3b:3d:fd:82:
         7f:e6:58:82:df:3f:2e:ec:18:51:b2:b1:cb:8a:75:b7:79:6f:
         f4:5d:63:65:36:0d:c7:05:98:77:9c:4f:4f:5c:29:44:5a:90:
         9e:51:bc:93:a9:76:24:34:d9:82:51:0f:a4:e5:40:e1:88:cf:
         1f:b9:d7:43:ea:78:6a:f2:46:23:4f:bc:93:fa:19:09:72:4b:
         46:3f:e3:2c:b7:52:ea:8d:49:a0:9f:94:b0:55:98:93:95:87:
         e7:d2:3c:33:9c:32:56:9b:ba:52:1c:8e:cb:f3:05:ae:d8:94:
         8f:e7:aa:84:db:ae:29:1d:e2:ca:68:cd:5f:aa:50:91:06:2e:
         9d:a7:39:28:cc:89:4f:39:12:39:6d:9e:92:1c:f2:82:e3:b3:
         64:90:46:5d:70:47:dc:4c:d3:7e:e9:a5:c3:09:db:c7:84:03:
         d4:49:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:48 2025 by rpki-client