Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a3a2f33322d3332203d3e20323636343438.roa
File:                     323830343a333766633a3a2f33322d3332203d3e20323636343438.roa (raw, json)
Hash identifier:          qBfm6szhmQvCpVo7CgJQV0hLx4DkUfBZBZWz1VbJguk=
Subject key identifier:   51:A1:7D:83:97:3F:A0:A4:56:1D:00:A6:FF:61:E9:5B:26:05:1A:B9
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       73322A394F088BCA2D24C9579105B92EEAD763E0
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a3a2f33322d3332203d3e20323636343438.roa
Signing time:             Thu 06 Mar 2025 04:42:07 +0000
ROA not before:           Thu 06 Mar 2025 04:37:07 +0000
ROA not after:            Thu 05 Mar 2026 04:42:07 +0000
asID:                     266448
IP address blocks:        2804:37fc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 09:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:2a:39:4f:08:8b:ca:2d:24:c9:57:91:05:b9:2e:ea:d7:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Mar  6 04:37:07 2025 GMT
            Not After : Mar  5 04:42:07 2026 GMT
        Subject: CN=51A17D83973FA0A4561D00A6FF61E95B26051AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:27:ed:7f:ff:dc:4e:89:57:48:b9:73:76:
                    3b:4a:60:d3:42:27:81:ea:47:b9:71:a1:19:d5:9c:
                    04:44:38:5b:e1:4e:43:44:ee:13:e2:ce:20:04:28:
                    5e:a6:a7:e6:9a:35:37:37:4d:c9:81:f3:7c:10:2d:
                    ef:a8:46:fc:f7:a5:f7:77:ec:4d:f0:4f:df:ef:ff:
                    71:c2:d7:ca:0b:b9:eb:55:54:e3:76:6c:7d:0a:62:
                    26:84:e9:58:e6:c6:e5:0a:56:24:75:98:13:bc:51:
                    87:9b:64:1e:0a:64:0c:52:6f:53:7e:ca:df:69:84:
                    c3:d3:0a:72:ce:35:93:e4:47:5f:df:43:2d:de:b3:
                    83:7f:29:e1:6d:4f:f3:64:7b:79:79:d8:eb:ee:e7:
                    b8:2d:c0:55:bc:71:6f:8d:08:92:1a:c7:1a:f0:63:
                    59:95:20:a8:e5:bb:e8:d9:cc:c3:a8:02:a6:96:e6:
                    1e:55:f7:ba:0e:55:39:cf:55:ab:e9:08:aa:aa:ca:
                    4b:95:77:a8:2f:66:33:c3:20:25:b2:9f:14:f2:c9:
                    dc:40:40:d9:83:b5:1d:51:78:ad:a2:84:8b:89:6c:
                    82:33:ae:17:2b:c5:81:d8:bc:8a:e0:bf:93:cd:5c:
                    5b:3a:ed:8c:60:30:05:f1:4d:bc:ff:54:5f:f3:1a:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:7D:83:97:3F:A0:A4:56:1D:00:A6:FF:61:E9:5B:26:05:1A:B9
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a3a2f33322d3332203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:2d:e4:4b:09:38:05:11:ad:e4:8c:ed:aa:b9:43:89:78:
         08:c7:a0:88:35:22:82:9c:1e:80:43:cb:2b:a2:0e:f8:b4:df:
         fa:4e:98:0f:23:54:f5:4e:a6:35:3c:b0:e8:ca:a7:a3:d5:e9:
         b1:30:73:0c:30:de:08:1a:d3:be:2e:59:e5:f1:b2:e3:61:1c:
         52:43:33:10:89:52:7b:c7:44:70:52:82:91:06:23:e0:b1:64:
         8d:99:08:a4:3f:02:97:33:0d:07:59:86:1d:b6:dc:98:c9:5b:
         9a:df:95:7f:97:5d:8b:28:bb:9c:80:b1:9b:f8:76:a7:97:25:
         6d:bc:1a:95:8d:ef:73:22:5f:49:9f:b6:e7:75:7b:c1:62:42:
         54:19:ac:3d:0d:82:06:a1:64:b5:e1:23:7c:39:d6:e2:17:85:
         1a:06:39:d6:38:0d:60:74:f5:97:c2:7e:2e:c7:3f:18:f4:30:
         51:2b:f2:03:79:04:64:90:57:99:06:09:ca:94:47:95:c9:cf:
         02:ae:69:5c:45:bd:96:c8:2e:54:27:08:ee:15:a6:8c:54:c8:
         c0:ef:51:82:c1:a3:6f:93:bc:40:6e:40:d9:31:0f:86:6e:4c:
         23:cb:27:85:6e:8e:da:cf:44:6d:57:85:eb:ed:13:ab:44:1a:
         ec:0e:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:59:34 2025 by rpki-client