Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a613030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a613030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          8+eJLsXQQR/nH0LXCIbrRxxsKZZ1fODpTbmCgwcmCOw=
Subject key identifier:   F9:DF:F0:1B:FF:A3:37:7C:63:E7:DB:78:A0:7A:8B:35:15:C6:39:51
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       3581920528440E0F3A96CDBDB60EB9CE4D702F7B
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a613030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:22 +0000
ROA not before:           Tue 01 Apr 2025 13:49:22 +0000
ROA not after:            Tue 31 Mar 2026 13:54:22 +0000
asID:                     268659
IP address blocks:        2804:5494:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:92:05:28:44:0e:0f:3a:96:cd:bd:b6:0e:b9:ce:4d:70:2f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:22 2025 GMT
            Not After : Mar 31 13:54:22 2026 GMT
        Subject: CN=F9DFF01BFFA3377C63E7DB78A07A8B3515C63951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:7f:91:28:bd:56:31:5f:cb:d4:f5:4e:ab:
                    b9:63:77:d4:fa:f3:e3:31:76:80:b0:b0:7a:76:09:
                    e5:4d:d6:52:71:ea:69:db:44:e3:07:d8:44:70:33:
                    a1:09:99:85:e8:e4:1f:9d:e6:e7:c2:9e:2c:31:c6:
                    c7:0c:23:30:24:46:9e:38:5c:3c:ed:01:d5:4a:37:
                    fb:0f:2f:c1:a1:3f:bd:6c:65:58:48:88:ae:67:22:
                    97:1f:d4:cc:fe:35:5d:07:f7:8b:7c:48:e2:94:49:
                    55:ed:2c:1f:f8:47:87:c6:98:b2:09:46:c4:fb:be:
                    03:a9:b3:0d:34:01:44:b4:48:f5:cd:02:67:2b:62:
                    20:03:2e:bf:37:0f:b3:11:c2:16:f9:47:5f:26:53:
                    02:ce:f9:61:b0:07:e6:54:19:ff:0d:b4:a5:da:24:
                    fb:f9:ad:ee:0e:c3:de:cf:d3:15:a5:90:0c:1b:b8:
                    57:0a:16:32:d6:2b:65:30:a1:a9:d3:64:18:d1:44:
                    cd:5a:51:13:89:c4:bc:a6:68:71:f4:9c:8a:83:04:
                    3e:f9:49:a4:cc:4b:cf:63:22:41:e8:4c:84:80:91:
                    7d:e9:ca:30:ae:d8:67:22:40:a0:dd:bc:fb:f6:ce:
                    56:99:2d:f7:49:03:da:07:60:ae:90:9a:73:49:4a:
                    08:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DF:F0:1B:FF:A3:37:7C:63:E7:DB:78:A0:7A:8B:35:15:C6:39:51
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a613030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:34:46:b8:16:d6:9d:a6:5e:a2:93:4f:87:2f:7e:38:fa:
         cf:68:d0:2b:f1:e9:f7:85:df:9f:8f:8a:01:99:0f:0c:0a:55:
         25:8b:29:c9:d8:93:81:29:e9:81:4b:02:fc:ce:4e:2e:44:43:
         2b:74:01:3e:00:9c:f2:37:f8:59:92:2b:94:ba:aa:37:5d:f5:
         07:d1:57:42:f5:ea:8a:2c:23:71:de:f5:40:b8:7f:87:2d:cf:
         94:56:29:b4:b9:57:4b:4f:7e:92:62:19:7c:f0:ca:5a:b6:8b:
         5e:ce:db:4b:3c:a0:04:99:6d:2f:eb:43:35:5a:5a:2e:1c:e8:
         ca:05:e1:b9:30:c6:ff:3f:99:39:5b:0f:e5:f2:a6:e8:a2:19:
         3d:60:f7:fc:26:e9:8e:6e:3f:c2:a8:00:e5:89:b9:6b:1f:96:
         a8:53:b2:73:01:e8:3b:d0:d8:26:c4:61:67:6a:23:d4:49:a4:
         48:49:6a:11:38:78:77:78:b9:2c:d9:3c:c5:f3:cd:da:ac:1b:
         d5:e4:1d:93:eb:e0:f8:9a:9a:53:25:dd:40:cc:c7:d1:42:2e:
         ed:bb:8f:2d:69:86:af:7e:92:b7:4f:67:db:f0:d0:04:34:d9:
         89:65:b2:8b:9e:1b:96:45:b1:c3:b2:fa:e5:fb:d7:23:b4:20:
         25:45:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:39:13 2025 by rpki-client