Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a393030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a393030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          OaPNJactPUXDCNyGxG+QMjIgFSQLqo1h2mh05fKsk7w=
Subject key identifier:   2C:1C:F8:03:1D:78:ED:E2:2C:42:FB:9E:81:C9:43:FD:B8:07:7B:64
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       7AE6991914BC64F3EB8E40EB69BEBFC164D6967D
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a393030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:22 +0000
ROA not before:           Tue 01 Apr 2025 13:49:22 +0000
ROA not after:            Tue 31 Mar 2026 13:54:22 +0000
asID:                     268659
IP address blocks:        2804:5494:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:99:19:14:bc:64:f3:eb:8e:40:eb:69:be:bf:c1:64:d6:96:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:22 2025 GMT
            Not After : Mar 31 13:54:22 2026 GMT
        Subject: CN=2C1CF8031D78EDE22C42FB9E81C943FDB8077B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f5:94:9f:d7:d7:26:d9:60:cb:4e:4c:ee:31:
                    c4:d6:ea:01:9c:97:0f:95:0c:aa:a1:c5:17:3b:33:
                    dd:0d:92:71:01:ee:69:ce:4f:de:04:0c:71:af:08:
                    3b:17:19:da:51:ce:a2:8a:f0:4f:88:a9:6c:be:90:
                    74:52:34:39:6a:74:f3:70:25:b4:0e:11:cd:f9:c3:
                    4b:16:d3:88:aa:11:67:9f:82:6f:3f:39:16:73:be:
                    92:dd:1c:67:ac:28:6a:e3:94:1f:a6:53:0f:af:9a:
                    ab:4e:2c:72:fa:9b:11:f3:82:da:f2:12:02:1b:b3:
                    26:bd:f4:b3:65:74:48:49:d4:71:79:66:d5:4b:ba:
                    55:af:b1:7d:8c:d1:9c:db:90:23:e9:6d:48:e4:79:
                    00:aa:db:7c:64:cc:22:35:8f:8d:8d:a5:9f:54:78:
                    72:81:ec:b7:15:29:a5:8b:ad:c7:ab:b8:46:67:04:
                    68:7d:dd:25:36:03:08:f5:4b:41:40:79:2e:f4:8b:
                    b9:bc:56:8b:96:8e:6c:e9:6a:b7:62:fa:ed:c3:01:
                    08:0a:0b:15:96:05:f6:ff:57:58:e1:43:c4:c0:ec:
                    fe:ba:a9:49:ce:eb:c0:a7:bc:56:e1:2b:00:cc:03:
                    95:95:b6:72:c4:40:77:bc:17:b7:d6:74:ee:11:22:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1C:F8:03:1D:78:ED:E2:2C:42:FB:9E:81:C9:43:FD:B8:07:7B:64
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a393030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:ac:08:33:73:ce:b2:f4:85:e2:7f:20:f1:c4:8b:47:5d:
         3c:3c:2f:f7:a8:14:77:0c:37:f4:6f:73:ff:0d:5a:0e:80:85:
         92:be:58:4e:c8:b8:ad:f2:54:db:bf:51:59:77:a8:2c:1f:78:
         fe:e4:06:48:e6:27:d4:0d:78:8e:49:bf:84:9d:e3:87:fb:7d:
         3d:c0:bb:b5:e1:76:25:51:87:99:c0:c9:15:b1:66:a8:c4:0a:
         cb:54:70:51:93:37:bd:6c:68:78:48:07:d2:b0:5d:a9:01:8f:
         ec:f9:f1:b5:d2:1d:0a:34:2f:06:20:a8:4f:b4:8d:65:70:5e:
         6d:e0:8d:a6:94:ed:41:d8:87:18:8f:39:a5:3b:f7:56:21:8d:
         5a:8b:71:09:46:b3:a9:31:24:a5:92:a0:aa:07:1b:60:dd:29:
         f7:fc:01:2c:38:9d:15:b6:3c:42:f5:5c:94:30:19:84:f4:4a:
         ca:57:24:38:1f:f2:1b:3e:c7:97:6d:88:75:cd:aa:8b:4b:8f:
         3b:99:3f:1f:75:e4:3e:85:33:ac:8b:d4:fd:65:56:d2:05:69:
         e6:7c:29:ed:e0:da:6d:f4:75:eb:a5:bb:a5:c9:db:67:80:a9:
         05:ca:fe:60:65:7f:2d:12:65:dd:cf:47:c4:e2:74:a3:a2:87:
         91:73:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:39:09 2025 by rpki-client