Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
File:                     323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (raw, json)
Hash identifier:          mMCAPGBeDhUcxnyOEkd0lg3w0aHt6z/TjY4K14KK1u0=
Subject key identifier:   7D:3E:BE:1E:DC:5D:60:40:53:30:A9:5E:AE:24:E1:28:73:04:AE:24
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       30BA82E1E71AB0C1A0352DBBE07599DAA39C78C1
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
Signing time:             Thu 06 Mar 2025 09:16:42 +0000
ROA not before:           Thu 06 Mar 2025 09:11:42 +0000
ROA not after:            Thu 05 Mar 2026 09:16:42 +0000
asID:                     268452
IP address blocks:        2804:5170::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:82:e1:e7:1a:b0:c1:a0:35:2d:bb:e0:75:99:da:a3:9c:78:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Mar  6 09:11:42 2025 GMT
            Not After : Mar  5 09:16:42 2026 GMT
        Subject: CN=7D3EBE1EDC5D60405330A95EAE24E1287304AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:f8:f1:5d:7b:f7:62:1a:73:83:03:06:9f:
                    24:db:91:e9:d8:e5:c9:f5:1a:9e:16:66:73:7a:8d:
                    21:ca:69:70:93:5e:d1:34:5f:f6:6b:c4:1f:9b:46:
                    22:da:d4:be:5a:e6:9b:d6:67:be:a3:53:33:02:70:
                    09:87:21:57:a3:72:9d:e6:dc:ec:9f:53:d8:3c:6b:
                    c0:da:0d:0c:40:77:73:2e:f2:f3:65:ff:5a:c9:d4:
                    66:52:e7:cd:fb:c0:a9:9c:b3:63:ba:f8:2d:d6:4a:
                    c5:26:2b:5a:4f:d0:46:c1:b1:e5:de:72:ac:ec:66:
                    62:e1:b0:00:d9:15:ae:ed:9f:0b:dc:8b:07:69:88:
                    88:60:1c:6c:0f:5c:69:e0:c1:bf:89:60:39:2d:5a:
                    32:06:41:8d:23:60:b6:95:2e:ef:c8:ed:a1:3e:f2:
                    40:8d:54:e8:7f:99:2e:90:8d:57:d6:32:3f:32:73:
                    74:b5:fb:45:4c:37:33:81:98:f2:a9:e0:3e:b0:ca:
                    7d:04:1c:3e:94:5d:51:ef:84:9d:a6:d6:b2:72:0e:
                    03:bf:6c:30:e3:bd:9a:37:18:6a:4f:2b:a5:3c:77:
                    2f:8d:74:3d:be:92:ae:f9:b4:96:d0:71:f0:c2:64:
                    ca:75:03:44:ab:37:01:59:c5:88:19:06:f7:a8:fc:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:BE:1E:DC:5D:60:40:53:30:A9:5E:AE:24:E1:28:73:04:AE:24
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5170::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:d3:14:24:24:58:90:12:6d:cd:b7:9d:0e:2e:b4:d4:53:59:
         ec:2e:e4:ea:c1:0a:3e:0d:e2:d5:4b:90:3f:43:60:a8:c8:5d:
         69:3e:5b:77:d9:a2:db:9b:02:5e:1d:af:2f:ff:27:b1:10:d3:
         01:7f:98:31:59:9f:d1:8b:03:f9:cc:cf:83:8e:e4:82:4c:3a:
         06:a9:77:46:e4:58:fa:08:76:6c:90:20:5f:66:39:f3:ca:1b:
         12:72:24:c0:12:81:0b:6e:bb:1b:47:66:d4:0d:0d:30:e8:6a:
         a0:da:0e:17:70:e5:08:5e:51:e6:ca:f2:d9:2b:21:b9:6f:cd:
         c7:b0:40:a3:d4:6f:c1:23:03:b2:db:02:01:ce:4a:23:e2:6b:
         e6:49:a0:ae:c7:8d:1a:a2:a4:c7:01:15:f9:50:2c:ae:00:e6:
         44:57:0a:8e:ea:b5:38:3b:a9:7d:37:1f:1d:37:6c:da:92:b1:
         00:ba:56:ac:ad:11:b7:db:8b:85:12:1d:f0:10:81:b1:f2:40:
         52:ab:dc:fc:cf:a0:26:b0:38:3b:90:49:e3:2d:bd:c4:03:84:
         ad:c3:17:cb:b1:89:8c:03:10:27:cd:05:f3:38:5a:a9:3e:8d:
         f7:5c:1d:75:06:83:b9:21:ec:16:33:bc:49:8e:87:2b:c9:62:
         93:20:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:15:17 2025 by rpki-client