Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a383030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a383030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          Dq5c4QsXdea34/vG3/gVLYNC6VJPXTXeIU5aJOVz8v8=
Subject key identifier:   F0:F2:C1:98:F8:14:2A:C3:2F:23:83:EF:04:D1:1D:7D:F0:48:B7:83
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       66B467AF0E59001F5ECB02AA27BF46022F8CA096
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a383030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:21 +0000
ROA not before:           Tue 01 Apr 2025 13:49:21 +0000
ROA not after:            Tue 31 Mar 2026 13:54:21 +0000
asID:                     268659
IP address blocks:        2804:5494:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:67:af:0e:59:00:1f:5e:cb:02:aa:27:bf:46:02:2f:8c:a0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:21 2025 GMT
            Not After : Mar 31 13:54:21 2026 GMT
        Subject: CN=F0F2C198F8142AC32F2383EF04D11D7DF048B783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:6e:fb:a2:cb:ba:39:22:93:e3:9a:cd:3d:
                    0a:14:ab:80:62:c9:03:c0:2a:6e:41:89:66:18:3a:
                    ad:8e:44:b5:1f:7d:97:7c:b2:de:6c:2f:28:39:d9:
                    ba:a3:65:1c:de:39:68:fb:93:91:78:30:75:81:51:
                    38:0d:81:61:f5:6c:b7:c3:2e:67:ca:a9:04:ec:c9:
                    58:35:db:30:8f:1c:d8:0a:8e:ba:cb:f6:97:2b:c0:
                    fe:a8:26:c0:ca:34:ad:cb:5e:32:f9:a4:bd:86:00:
                    7b:46:61:3b:41:65:9c:c9:a3:17:c7:50:f0:6d:2f:
                    15:96:ed:5e:4c:f4:a3:fd:78:84:cf:ad:bf:a2:c4:
                    d3:69:47:62:78:e5:27:67:fd:11:6f:b2:c4:3d:9d:
                    40:ce:9e:d5:a2:89:73:4c:62:e0:38:7c:ac:44:04:
                    67:e2:a1:3a:fa:1b:d5:a0:dc:30:11:12:09:d6:d2:
                    0a:06:b4:af:af:19:5b:57:97:f5:10:20:75:81:0e:
                    ec:63:2f:ef:8e:dd:ca:1a:4b:40:d2:89:68:c0:b1:
                    fe:7c:9c:66:53:09:dc:20:1d:98:b7:cb:6c:e9:fe:
                    69:02:5f:83:7d:e4:8a:d7:72:c3:a2:7c:7c:49:8a:
                    97:2a:ad:80:c5:9b:19:54:f6:d6:9a:14:c4:35:ce:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F2:C1:98:F8:14:2A:C3:2F:23:83:EF:04:D1:1D:7D:F0:48:B7:83
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a383030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ea:8c:42:19:76:b7:b5:5f:c7:e2:de:19:3d:58:63:10:8b:9c:
         4f:aa:39:4a:73:4d:66:50:33:28:be:6c:91:f2:12:9d:09:c2:
         b1:da:b3:e5:07:dd:aa:af:a5:58:bc:88:13:b7:3d:69:b8:e2:
         97:81:73:d6:52:6e:ce:34:0a:2b:56:f4:cd:cf:8d:3c:53:c1:
         6e:43:2d:e6:aa:39:ca:97:f6:38:cd:7b:ff:ae:95:e6:98:93:
         0c:1f:c3:cf:0f:0d:e2:45:c6:c9:29:ba:f5:a4:87:1c:24:ff:
         bb:ff:08:2e:c3:74:8e:94:1a:fa:c4:3d:4d:b0:ac:33:64:73:
         ba:f4:b7:1a:05:d2:85:c6:b1:83:2b:e8:52:f3:bd:c1:a0:ba:
         ce:e4:72:b4:5a:52:5c:a1:8f:ed:0f:50:06:0d:e4:b3:a8:73:
         0b:b3:92:91:9d:a1:ef:7e:dc:9a:77:ff:1d:c1:d3:02:0f:d0:
         e3:e7:f6:8b:43:57:4b:cd:2f:af:75:17:71:ca:50:14:a5:7b:
         21:07:29:e3:0b:8f:e0:ec:6a:52:8a:e9:4f:56:0b:a8:b7:a9:
         2e:3c:13:ff:fd:22:e4:62:6e:ca:ae:86:25:58:f4:1d:35:ba:
         5e:04:68:d8:cd:c4:8f:c3:80:0f:c0:c2:63:08:05:9f:f3:64:
         85:89:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:40:40 2025 by rpki-client