Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a373030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a373030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          YvO2R/YLqQGLfH/RuW9F5AU5HMUlxr6kfhU1eqFDBlQ=
Subject key identifier:   F3:4A:A2:AB:35:6F:5A:23:2B:B7:EB:CF:C4:D6:29:60:E1:9F:BA:52
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       2FDFB3F6476927E3BB04F105DDA8609655B4180A
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a373030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:23 +0000
ROA not before:           Tue 01 Apr 2025 13:49:23 +0000
ROA not after:            Tue 31 Mar 2026 13:54:23 +0000
asID:                     268659
IP address blocks:        2804:5494:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 04:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:b3:f6:47:69:27:e3:bb:04:f1:05:dd:a8:60:96:55:b4:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:23 2025 GMT
            Not After : Mar 31 13:54:23 2026 GMT
        Subject: CN=F34AA2AB356F5A232BB7EBCFC4D62960E19FBA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:9e:e6:36:d4:c5:6a:70:14:e6:c5:7a:74:
                    50:8f:19:09:c3:d1:04:3e:10:54:a8:82:b1:26:48:
                    b5:6e:9b:31:d7:79:1f:f7:0a:c8:89:23:ab:e3:5b:
                    d7:91:51:fe:53:d8:79:e1:9b:5b:bb:42:fe:1a:30:
                    4f:79:d8:17:c5:74:3a:c8:68:99:4e:b0:f9:b2:7f:
                    0e:61:d3:9e:3e:57:67:3e:25:f7:9e:81:dc:84:c4:
                    fe:43:3b:03:b8:7a:d8:f4:59:65:5c:d5:67:3c:79:
                    e4:d8:95:e7:a9:c2:86:32:12:32:6e:c0:98:ad:9b:
                    31:54:a9:16:27:dd:3c:2c:84:f5:a6:c2:df:cf:a6:
                    3d:b4:cf:79:67:af:79:53:1c:bf:4c:98:82:69:9c:
                    f3:48:7b:6a:0f:86:fa:88:13:b8:c9:22:4f:e0:d8:
                    82:2b:ae:12:88:63:e8:2e:af:a6:28:61:2e:d9:b4:
                    4b:6f:9f:e2:1e:72:fd:9f:35:17:e6:04:02:1c:bc:
                    61:45:98:cf:09:33:04:7e:b2:fa:85:bf:c8:5f:a4:
                    89:c3:58:54:09:15:8d:2a:07:b3:be:2a:74:ec:35:
                    e1:33:ba:6f:bf:fa:94:98:cd:3f:24:5a:95:0c:a3:
                    91:21:3f:0a:a7:ae:26:37:7b:bf:a3:4a:15:65:dc:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4A:A2:AB:35:6F:5A:23:2B:B7:EB:CF:C4:D6:29:60:E1:9F:BA:52
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a373030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:9a:05:6c:c0:d4:47:e6:69:2f:c7:7c:e5:01:34:06:7a:
         cb:06:1a:fc:35:b2:ac:41:15:e7:47:8a:4a:cf:4d:79:bd:30:
         73:6b:5c:65:e0:4f:67:71:82:be:c5:d1:e8:e5:2d:e4:55:a7:
         de:1d:b2:51:63:35:4d:e2:3b:df:ab:e5:b9:cf:94:a6:50:95:
         d0:45:04:f2:17:e4:75:f1:34:4d:5e:84:71:73:53:87:79:ae:
         c9:80:af:0e:b8:2a:cd:1e:fc:13:46:98:45:db:aa:b8:52:83:
         36:2b:0d:5a:ed:10:59:58:aa:e6:e6:c9:e6:61:2e:3e:73:87:
         96:0a:fa:14:73:fe:bb:2d:53:f5:41:e9:13:40:c7:08:67:be:
         c5:4e:d1:d2:cb:f2:e1:e3:89:8a:53:97:e9:da:1a:73:76:e5:
         30:93:a1:85:57:08:43:e8:c5:a7:60:11:c1:e5:b0:b4:0c:2b:
         ad:58:5e:28:be:3b:cf:2e:13:1a:8c:db:ef:09:30:9b:6f:04:
         f1:52:48:3a:4a:f0:89:7e:a3:a8:eb:42:bc:0a:80:fa:22:58:
         d8:c8:17:cf:13:f8:cb:6b:56:7f:42:e2:51:e4:e4:aa:f0:6a:
         f2:2e:30:aa:3c:71:37:74:5e:ab:d8:59:a0:d6:e3:5e:f3:d2:
         49:e8:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:29:36 2025 by rpki-client