Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a663030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a663030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          jkmNjo3wNgIA4I9gTNOXhKq9WtK+QeLul0vPC/yOy3o=
Subject key identifier:   E6:F3:23:14:F8:77:71:C9:E1:D6:B8:15:15:86:76:CE:25:81:A9:C2
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       6F5A228BA7F85408320AD1DC3C187A54ED0BA75E
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a663030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:22 +0000
ROA not before:           Tue 01 Apr 2025 13:49:22 +0000
ROA not after:            Tue 31 Mar 2026 13:54:22 +0000
asID:                     268659
IP address blocks:        2804:5494:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5a:22:8b:a7:f8:54:08:32:0a:d1:dc:3c:18:7a:54:ed:0b:a7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:22 2025 GMT
            Not After : Mar 31 13:54:22 2026 GMT
        Subject: CN=E6F32314F87771C9E1D6B815158676CE2581A9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:7c:c0:53:e1:98:a5:e9:f9:28:ca:5f:80:
                    f5:f9:97:79:21:55:ff:03:81:a0:78:6f:1d:6c:9c:
                    33:d3:06:00:56:3e:a9:f1:ca:6b:c0:18:5f:39:ac:
                    8e:84:33:15:d0:fa:b4:1d:3a:aa:be:d6:2b:9b:27:
                    c2:0d:d4:88:d7:fd:d4:71:fc:91:00:39:98:b5:27:
                    28:16:e0:cf:89:be:de:fa:0c:90:73:d5:1b:ce:fe:
                    bd:7a:c2:9c:d9:26:eb:53:06:be:2b:36:e9:20:c3:
                    e4:bf:9e:c7:dc:40:19:d8:ca:94:e5:4a:dd:34:9e:
                    55:e8:eb:d4:00:55:dd:02:58:6f:a9:f6:b2:d9:27:
                    5f:a8:5a:a9:0e:ab:35:af:98:08:79:46:ce:1e:8a:
                    41:6c:ad:b7:d3:b0:6a:83:38:d9:a4:36:e0:e9:f8:
                    46:5b:46:5b:47:82:1c:bd:4a:b2:8b:99:94:dc:23:
                    19:8e:11:49:b1:ad:4d:41:8f:36:32:ec:2b:62:a6:
                    6f:b2:40:66:76:36:a5:3b:4d:de:89:2d:bb:ed:02:
                    d7:63:6e:49:d2:25:f6:50:73:05:ba:79:d3:ca:6b:
                    d3:98:2e:6e:81:12:e1:9f:ce:8f:48:4f:a4:f0:c7:
                    b8:f4:e6:ba:ee:5f:c9:31:72:c5:5f:44:74:f3:0c:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F3:23:14:F8:77:71:C9:E1:D6:B8:15:15:86:76:CE:25:81:A9:C2
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a663030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:44:cb:45:fa:e9:97:38:3a:0e:ce:0f:af:3c:cd:ec:ac:
         94:04:c3:d8:78:d4:68:b0:01:3a:4e:09:f4:59:f0:a5:50:f0:
         97:4b:e5:da:fd:d1:c4:0b:99:87:73:bf:8f:5e:17:30:4c:7f:
         e8:26:92:b0:02:89:94:af:36:c1:57:0b:96:88:f0:2f:ee:21:
         fe:1d:0c:dc:1f:e8:10:ee:b4:20:5a:81:c1:6c:60:fb:fd:21:
         ad:c7:78:db:d9:7d:e9:31:c4:65:69:66:eb:39:f3:37:7e:dd:
         fc:7f:1c:34:0a:f1:3b:43:a4:44:2c:6e:06:b5:ea:d5:3f:f2:
         06:87:6b:62:70:cf:7f:8f:44:c4:50:8e:78:c4:c8:54:03:5f:
         62:3e:89:1c:fa:ab:30:34:93:21:c1:b1:62:d2:1e:25:0e:bf:
         75:02:76:eb:29:21:58:ea:ff:d7:86:67:01:18:ef:b4:c4:4f:
         b4:90:a0:62:8f:45:96:0b:d2:ed:48:39:c6:e9:0c:cd:41:e9:
         f1:6b:8b:73:68:f8:41:b7:fa:ce:27:20:4f:d3:3b:6a:39:97:
         fe:7a:17:70:6d:b8:a2:32:58:97:85:57:34:9e:d8:b7:7f:f7:
         98:92:d7:cf:56:ad:2c:ba:bc:8e:49:0b:12:a6:fa:c3:15:35:
         a2:e7:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:36:22 2025 by rpki-client