Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/323830343a373831383a3a2f33322d3634203d3e20323731323230.roa
File:                     323830343a373831383a3a2f33322d3634203d3e20323731323230.roa (raw, json)
Hash identifier:          PYni8Edi88Geu3An90KYo/GQ5CTkum86X7BqX8rEH44=
Subject key identifier:   E5:22:34:B2:7E:03:E3:5E:69:A5:FE:6A:38:7D:E3:9A:06:1A:8D:63
Certificate issuer:       /CN=56270EA333BF00580A15474FAE7DE9C32E6CF849
Certificate serial:       3D147EEC906CE73D63611A767B08622C5F25DFE9
Authority key identifier: 56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/323830343a373831383a3a2f33322d3634203d3e20323731323230.roa
Signing time:             Thu 06 Mar 2025 02:00:19 +0000
ROA not before:           Thu 06 Mar 2025 01:55:19 +0000
ROA not after:            Thu 05 Mar 2026 02:00:19 +0000
asID:                     271220
IP address blocks:        2804:7818::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.crl
                          rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:14:7e:ec:90:6c:e7:3d:63:61:1a:76:7b:08:62:2c:5f:25:df:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56270EA333BF00580A15474FAE7DE9C32E6CF849
        Validity
            Not Before: Mar  6 01:55:19 2025 GMT
            Not After : Mar  5 02:00:19 2026 GMT
        Subject: CN=E52234B27E03E35E69A5FE6A387DE39A061A8D63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:5e:e1:0c:c2:83:a7:79:3e:61:ea:1e:d9:
                    e1:85:71:d6:ea:db:67:35:d0:ea:5b:b3:20:fd:21:
                    51:ad:da:e2:a6:4e:72:9e:ed:ad:55:8f:04:30:c5:
                    c0:95:c4:d5:ba:03:6f:94:80:86:0d:b2:56:c8:78:
                    a2:53:c5:45:b7:2b:a8:89:a1:49:9f:32:87:27:70:
                    b6:cd:02:16:9f:4a:04:9f:f8:7f:a7:0f:8b:b0:05:
                    c2:ec:16:fc:c0:0d:8e:0a:11:ba:98:d3:fc:64:ab:
                    10:f0:b6:13:a9:16:1e:71:e4:63:35:25:19:fc:97:
                    65:cd:8c:ee:c2:81:f6:e4:7c:9b:53:bf:d8:42:94:
                    44:f6:d1:29:f1:48:d1:91:0e:a4:19:43:8f:6b:b5:
                    bb:7f:1b:b0:d1:e1:2a:5c:7a:f6:c1:2c:78:43:c9:
                    db:f7:ea:e1:0e:bc:81:0b:4f:17:e3:1e:30:2b:fa:
                    22:ba:ba:40:36:6c:7a:f8:34:af:5d:ae:cf:0f:ab:
                    c3:de:46:8f:c9:8b:9f:49:c7:72:b6:41:1f:f5:9a:
                    3e:b9:fb:5c:3b:71:08:06:b2:b8:b7:c1:ef:7a:dc:
                    7b:b4:4f:7e:4b:85:6e:ea:9b:f5:43:48:3f:9c:23:
                    07:2f:c2:62:66:f1:af:c0:73:2a:b1:16:d1:9a:bc:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:34:B2:7E:03:E3:5E:69:A5:FE:6A:38:7D:E3:9A:06:1A:8D:63
            X509v3 Authority Key Identifier:
                keyid:56:27:0E:A3:33:BF:00:58:0A:15:47:4F:AE:7D:E9:C3:2E:6C:F8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56270EA333BF00580A15474FAE7DE9C32E6CF849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/1/323830343a373831383a3a2f33322d3634203d3e20323731323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7818::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:30:ef:11:4a:cf:a6:36:cb:70:a6:b5:f0:ca:da:1b:d7:
         8c:91:6a:bc:65:72:11:7a:ee:5a:0c:6d:77:83:de:ea:cb:ba:
         f7:48:69:b1:f2:af:82:0b:51:cd:69:13:7f:41:fd:6d:3f:48:
         b7:e6:35:3d:9e:e8:6f:15:62:b3:c0:4a:13:c1:55:31:95:88:
         b0:d4:03:1c:a2:2b:3f:77:79:d9:6f:6e:bd:4c:80:45:67:e3:
         8d:04:a0:72:01:42:81:5e:c6:43:26:ad:ab:ba:7b:b0:32:fc:
         ed:1b:aa:31:17:09:1d:ab:a8:6d:16:04:53:3b:81:0f:05:5d:
         3d:5d:e2:d0:6f:93:92:a7:ae:da:98:30:ac:4d:e4:ee:65:5d:
         d1:9f:23:88:bd:3c:3c:ae:49:79:c5:97:6e:f6:2e:55:e1:8b:
         7c:40:41:a1:bc:00:ee:4d:bd:ad:0f:43:d7:cc:0f:55:0c:80:
         b7:ba:0b:53:f5:c3:58:84:b8:48:a2:0c:77:bb:e4:dd:69:6d:
         03:10:90:5c:98:0e:ad:ff:26:bd:e6:fa:84:4d:25:f0:54:5c:
         03:45:b3:66:3d:e0:65:71:7e:e9:e4:19:c9:36:2f:1e:fc:33:
         e9:35:d2:b0:7c:74:3f:94:eb:85:31:5f:54:6d:26:59:3c:9c:
         6f:8f:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:34 2025 by rpki-client