Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a313030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a313030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          1PyTERyaeQMEXPlOdk/30xZHE6jIP/zf5QdIhes31KQ=
Subject key identifier:   85:2D:CF:DE:EB:09:15:CB:83:16:5D:8E:5D:10:E2:4A:59:9F:A3:B7
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       05B5D2E851EBE03B24B275970B074003B0CD174B
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a313030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:22 +0000
ROA not before:           Tue 01 Apr 2025 13:49:22 +0000
ROA not after:            Tue 31 Mar 2026 13:54:22 +0000
asID:                     268659
IP address blocks:        2804:5494:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b5:d2:e8:51:eb:e0:3b:24:b2:75:97:0b:07:40:03:b0:cd:17:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:22 2025 GMT
            Not After : Mar 31 13:54:22 2026 GMT
        Subject: CN=852DCFDEEB0915CB83165D8E5D10E24A599FA3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ce:f9:f3:20:f1:6e:5b:85:f5:52:24:32:1e:
                    99:18:7e:7b:d4:03:6b:57:35:7e:ef:fc:43:15:61:
                    91:be:5c:27:9f:16:b8:34:56:cc:f9:53:ba:1e:cb:
                    b4:d2:07:a8:f8:83:c7:ae:15:b6:3c:7f:a5:d2:95:
                    e0:53:29:d5:6a:76:8a:72:bf:aa:b4:a9:dd:36:d5:
                    6f:21:7a:34:c4:30:9b:92:75:25:af:44:0e:3a:d4:
                    86:32:12:94:5e:0d:f6:30:54:c9:c0:8e:dd:7f:ca:
                    53:67:99:c6:6a:3b:d2:56:02:ed:b3:be:38:e5:5f:
                    7c:07:41:10:6b:d8:a3:61:0a:90:cb:bf:76:e2:84:
                    4a:df:13:68:32:a4:df:11:a5:ed:2d:72:aa:cb:91:
                    8d:c3:31:47:45:a3:5c:72:d9:18:17:f3:86:cc:4b:
                    5c:09:ef:11:56:63:6e:8d:2c:5f:f9:89:1a:80:7d:
                    1c:dd:de:a2:87:7a:9b:b5:97:21:ee:76:47:60:d0:
                    3d:4b:b2:99:e0:94:95:f3:db:8d:eb:b9:b0:8c:46:
                    c4:2d:cc:6e:6e:fe:2f:33:6a:4d:d4:16:bd:41:ed:
                    7d:e9:38:b4:e4:47:84:f5:f8:cc:72:cf:1e:89:79:
                    95:64:f0:12:78:a5:79:cb:c3:63:f2:ac:0f:bf:7c:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2D:CF:DE:EB:09:15:CB:83:16:5D:8E:5D:10:E2:4A:59:9F:A3:B7
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a313030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:05:2d:fd:83:ab:94:18:09:ef:38:59:8e:e6:83:06:86:
         b0:1d:7b:a0:df:a0:cc:92:5a:94:bb:1a:92:8d:de:d3:0e:b1:
         95:be:3e:9b:6f:48:6a:e8:6b:45:33:ac:0d:96:f7:c3:99:47:
         fb:8b:dc:da:09:c8:8e:e5:6d:e2:7f:83:d2:10:83:50:ba:c9:
         73:9c:6d:14:96:db:d6:02:bb:d1:a9:1b:40:76:e8:c0:f9:96:
         26:01:e4:73:d5:a5:0e:04:7a:28:b7:c1:e3:c9:ff:76:53:ad:
         0d:ef:9a:bd:7b:45:1b:21:fb:1d:1e:ce:4f:ab:d2:8a:cf:e7:
         8b:ed:aa:ae:a3:bf:3c:50:52:04:f6:13:7d:11:71:01:f1:e3:
         ed:43:02:7c:eb:be:8c:7c:be:db:8d:b3:e5:30:a3:92:80:d8:
         d0:e8:d1:f2:ed:59:93:e1:94:2d:07:c5:05:cb:b1:c2:3f:49:
         1d:2d:7d:da:d0:e8:72:f5:5a:ac:8b:e7:2a:32:ea:6a:11:2c:
         c8:d6:2b:f9:a7:01:f6:5f:43:86:69:2b:23:b3:b7:c0:ee:41:
         32:91:64:b5:65:be:0f:88:7e:aa:29:fc:15:e8:5c:bc:0e:03:
         f8:b9:8c:f5:ff:b8:84:db:e5:ae:38:43:a2:7a:db:11:86:21:
         0d:38:88:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:29:45 2025 by rpki-client