Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
File:                     323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (raw, json)
Hash identifier:          kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=
Subject key identifier:   A2:8E:54:B0:2F:EE:8E:4C:38:25:89:B7:AC:DB:B8:54:27:FA:D9:82
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       65AC67FED1A92C885D360A5FFBDEAC47B64B6594
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
Signing time:             Thu 19 Dec 2024 21:06:23 +0000
ROA not before:           Thu 19 Dec 2024 21:01:23 +0000
ROA not after:            Thu 18 Dec 2025 21:06:23 +0000
asID:                     272692
IP address blocks:        2804:872c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ac:67:fe:d1:a9:2c:88:5d:36:0a:5f:fb:de:ac:47:b6:4b:65:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Dec 19 21:01:23 2024 GMT
            Not After : Dec 18 21:06:23 2025 GMT
        Subject: CN=A28E54B02FEE8E4C382589B7ACDBB85427FAD982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:fe:d7:bf:93:ea:de:6c:7a:af:22:11:0a:
                    03:f1:5c:84:65:d1:74:34:cf:f7:4d:54:2b:54:b2:
                    53:ba:02:12:36:2d:0e:f1:4a:46:51:a9:7d:f3:be:
                    c3:2b:17:44:7c:18:84:68:d3:ec:2e:d3:b8:9d:b9:
                    d9:0c:3b:ba:db:68:7e:24:ac:81:ad:f1:77:cb:45:
                    8d:f0:c9:1a:f3:55:c3:38:43:df:d9:de:65:50:25:
                    1f:f5:8f:0c:6b:b5:2d:a3:00:38:33:29:e8:d5:23:
                    92:ba:67:2e:fc:f8:fa:5b:78:4d:23:44:f7:08:33:
                    94:f4:67:f2:03:d5:d9:08:32:1d:b2:3a:12:e4:e1:
                    0c:c9:55:2b:9c:58:95:fe:95:6a:51:21:29:d6:cb:
                    ee:43:38:15:2b:fa:03:8b:47:70:9e:05:25:82:be:
                    b4:b9:77:b6:80:6d:ba:67:9d:b4:ab:c4:93:93:ad:
                    cf:5d:bb:94:ee:4c:be:b4:aa:66:ba:ce:50:ea:91:
                    4a:46:13:94:d0:11:8a:70:16:9a:05:90:19:f7:58:
                    21:c1:ff:ab:ca:65:ef:66:43:62:b6:67:6e:48:0d:
                    5f:8e:ef:e8:e1:5c:fc:95:e9:c9:37:2e:2c:4a:ab:
                    83:5b:ff:c8:14:30:c2:9a:c1:31:8b:33:01:00:70:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8E:54:B0:2F:EE:8E:4C:38:25:89:B7:AC:DB:B8:54:27:FA:D9:82
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:872c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:26:51:9b:3b:1f:df:06:38:8a:53:c1:76:3e:75:24:e7:
         35:2d:2b:53:e7:6c:67:73:49:af:17:27:e6:f5:fe:82:d3:00:
         06:97:61:05:7e:a4:17:19:c4:02:1f:0a:42:03:e3:e1:06:ea:
         c4:4c:16:5c:b6:11:1b:2a:d6:f2:d7:ed:0f:8a:c7:29:8f:4d:
         00:3c:d2:f1:a2:60:84:11:d6:c9:9c:06:97:c4:07:38:d6:39:
         41:a2:4d:ed:b7:a8:38:e7:8c:2a:b5:8c:89:14:eb:23:47:74:
         b4:7a:41:37:8b:9e:fb:28:fd:59:92:d9:44:64:ca:35:93:13:
         82:88:6b:94:a5:56:4b:4e:1e:b7:a9:b6:fb:c9:63:fb:56:fe:
         87:33:de:3e:d6:e1:ef:c7:45:59:ce:50:31:d5:1e:22:c2:2f:
         43:70:b4:04:bf:01:47:84:b7:1c:28:08:c4:16:de:89:f7:68:
         13:e3:ba:1f:93:79:9d:eb:fd:69:b7:71:44:70:36:b9:05:ab:
         23:4f:46:a6:3c:ac:8a:99:ec:44:e9:50:fa:14:28:84:b7:9a:
         e4:57:f7:5f:24:a6:23:9b:14:c3:87:6b:49:c5:e9:38:eb:a2:
         97:a5:ea:6f:8d:29:b5:b1:26:93:3c:8b:e1:d2:53:80:5e:09:
         7b:e6:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:34 2025 by rpki-client