Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa
File:                     323830343a373636633a3a2f33332d3333203d3e20323731313131.roa (raw, json)
Hash identifier:          9p3/gPa/DC4/05HtCq9qCjzGCNkpc8q5W0aL6zVrMvM=
Subject key identifier:   37:85:A8:E6:66:EC:20:79:09:E8:0E:D7:B8:B6:37:6E:41:8D:C4:19
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       73D4778F5FFBF9D0C1CE284A7D6F88471940072E
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:58 +0000
ROA not before:           Thu 06 Mar 2025 18:49:58 +0000
ROA not after:            Thu 05 Mar 2026 18:54:58 +0000
asID:                     271111
IP address blocks:        2804:766c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d4:77:8f:5f:fb:f9:d0:c1:ce:28:4a:7d:6f:88:47:19:40:07:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:58 2025 GMT
            Not After : Mar  5 18:54:58 2026 GMT
        Subject: CN=3785A8E666EC207909E80ED7B8B6376E418DC419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:1d:bd:8f:e5:f1:23:8f:18:f3:bf:01:fb:
                    3c:30:02:fa:39:1e:d4:f5:ea:41:94:16:6d:30:be:
                    c0:7d:32:d8:1f:f1:ff:95:69:57:c1:c9:d2:8a:bc:
                    e7:3a:f6:88:af:43:8b:43:dc:f6:89:98:b3:89:77:
                    42:8d:7e:f0:cd:c7:f6:75:56:66:0c:d6:5b:31:e2:
                    59:8d:2c:16:97:3a:66:24:2a:31:39:88:af:63:9c:
                    f3:c6:a8:61:f7:74:3d:67:b4:78:f8:23:b9:25:34:
                    79:a6:71:9a:7e:3d:bd:01:cf:c3:05:1c:19:f9:46:
                    04:eb:fb:56:8c:2d:8f:46:5f:3c:a2:4f:31:7d:d5:
                    a6:4f:1b:da:e6:2d:57:9b:ae:32:53:7a:bc:4a:64:
                    9c:29:33:49:98:3b:64:38:12:c6:7f:44:10:5e:c2:
                    87:06:91:13:2f:ce:b4:e9:e2:7f:34:ec:16:73:a5:
                    6b:4d:b7:43:4c:ca:be:e3:65:81:e5:46:ea:fe:1a:
                    37:20:03:be:10:85:4e:1a:b6:b8:16:c9:8a:ec:fa:
                    fb:7e:86:54:06:02:ac:b3:13:b8:aa:32:e4:64:38:
                    06:10:1b:4d:8c:75:32:9b:e0:32:46:f6:53:01:41:
                    c4:cc:81:16:2c:aa:ac:04:9f:c6:93:34:f8:36:60:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:A8:E6:66:EC:20:79:09:E8:0E:D7:B8:B6:37:6E:41:8D:C4:19
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33332d3333203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:8b:cd:fd:e5:50:27:b9:f4:d9:e4:1d:9f:75:42:eb:bd:
         1a:22:86:e9:6e:85:55:57:de:5e:a8:f7:59:ff:c1:89:61:9f:
         ab:e0:c7:53:31:9d:96:24:36:e0:0e:45:93:e1:a6:35:35:11:
         69:80:58:e3:64:eb:f2:bd:58:8a:23:06:3f:c5:af:b2:a6:84:
         ad:4c:8b:61:c0:1c:51:03:35:a5:23:a4:ae:b8:e7:5b:64:6e:
         84:6b:5b:55:43:32:18:94:f4:a6:38:e0:25:d6:fa:55:b6:7f:
         47:45:46:4f:c4:30:1b:14:c4:4e:af:c1:97:32:e1:fc:7f:ee:
         f5:de:c6:38:4b:ad:85:ad:c6:c4:7e:e4:ab:cd:0d:16:64:d8:
         72:4e:0a:b8:65:ff:f8:b6:fd:6e:10:69:db:2c:05:06:1d:51:
         8a:ba:4c:b9:4f:e2:27:e2:f0:d9:5a:ad:c2:92:18:88:e1:5d:
         c7:17:29:08:03:22:92:bb:e2:2c:27:7a:a0:95:c4:ae:65:2a:
         37:71:55:97:9f:7d:c7:b7:79:18:96:be:db:3c:7a:37:96:98:
         68:f6:d1:9e:17:4e:3c:3a:97:e9:e7:07:5b:c3:a4:1d:8f:e0:
         c9:9e:dc:ba:7d:2b:ad:56:b1:62:95:f4:c6:df:4f:af:27:a6:
         72:f6:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:04 2025 by rpki-client