Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa
File:                     323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (raw, json)
Hash identifier:          IlooSbQXnxtp9yE158oMr+kw+VRPcvYSK0oGbAfrITs=
Subject key identifier:   67:21:6D:97:46:34:6D:33:D3:EE:68:5C:38:F3:6E:B6:3F:6D:B7:C7
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       7020A67BA544972DD03A27138F8D9EBD027DA23E
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     263492
IP address blocks:        2804:12b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:a6:7b:a5:44:97:2d:d0:3a:27:13:8f:8d:9e:bd:02:7d:a2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=67216D9746346D33D3EE685C38F36EB63F6DB7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:3c:64:a9:25:b0:05:f9:d7:80:31:31:52:
                    31:f1:f6:08:94:cb:f6:a0:7a:46:19:85:c5:65:d1:
                    c7:43:03:6c:01:ea:93:6b:dc:e8:39:f7:38:c0:7d:
                    cc:9b:1d:b9:7c:b4:93:8d:71:45:fe:11:93:98:c7:
                    4e:fe:e3:c2:0b:39:5e:69:6b:77:0b:dc:18:7c:3f:
                    f5:27:d8:c6:4a:12:09:a4:c2:b6:41:14:a7:d8:1a:
                    06:3e:91:91:0f:37:bb:4b:ec:85:c1:5d:c5:8f:07:
                    7c:6a:a0:64:62:42:cb:1a:6c:07:22:51:48:7d:72:
                    e8:25:e7:3b:9b:30:42:9b:4e:c2:ff:0e:e9:17:61:
                    62:ef:02:c7:88:d4:89:73:77:a4:87:0d:1e:b3:65:
                    31:45:08:69:7f:1c:25:43:cb:cb:90:d7:0e:82:2f:
                    7f:a3:e2:a3:45:fe:72:b8:4f:97:3f:f0:84:b6:09:
                    2d:a1:75:c5:ef:e8:21:69:5a:6d:7e:02:a6:1c:17:
                    7b:5d:0a:2d:fb:dd:5b:4a:5f:e0:05:42:96:1b:bf:
                    72:f0:58:a9:8b:74:66:a1:b0:bd:29:3b:2d:e7:d4:
                    54:24:e1:b7:ba:08:8c:5c:a9:ee:96:7f:85:ca:84:
                    2b:e6:8b:ff:90:21:e7:a9:8a:ef:cd:d4:a1:56:e0:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:6D:97:46:34:6D:33:D3:EE:68:5C:38:F3:6E:B6:3F:6D:B7:C7
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/323830343a313262303a3a2f33322d3332203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:fd:8a:b6:fb:01:a9:53:c0:b4:99:a1:b1:d6:be:12:0b:
         3f:2a:10:b2:4c:47:7a:b7:65:91:23:c5:8f:8e:7e:64:44:76:
         1e:ea:c2:75:84:12:7f:53:1e:c1:28:1f:77:74:ce:99:ae:7f:
         d4:ea:89:68:b2:b8:85:ea:66:15:01:1f:32:66:63:a5:24:ac:
         da:13:70:ed:bc:a2:04:a2:4e:26:f0:62:f5:65:18:dd:a4:5b:
         9f:43:ba:8d:25:d8:c7:27:89:29:9f:08:98:65:0f:3b:28:61:
         a4:6d:2f:dd:e3:15:22:0c:55:ef:e5:23:79:71:a3:63:d2:aa:
         a7:d3:97:59:5d:75:c6:3e:f7:00:e1:5c:2d:a7:c4:95:0f:18:
         d8:33:99:4c:f2:d3:46:76:d5:34:71:97:7a:1e:67:3e:62:f4:
         b3:a2:bc:5c:49:d7:9d:f0:31:f5:10:ce:43:0c:c4:3f:9b:1c:
         c2:93:4c:b3:bb:6e:a3:a7:85:d5:0c:4b:29:37:2f:13:0b:c9:
         1a:b7:0d:ef:ff:d2:75:70:8c:c5:51:6b:7e:8b:71:5f:9b:03:
         45:5a:23:e0:24:5d:0b:b0:1f:a4:41:4c:5f:22:ec:a0:3b:42:
         a2:13:ed:94:37:14:a7:f7:a9:be:8a:62:0a:18:2c:c8:2a:cb:
         5c:06:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:12:47 2025 by rpki-client