Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/323830343a383138303a3a2f33322d3332203d3e20323732343538.roa
File:                     323830343a383138303a3a2f33322d3332203d3e20323732343538.roa (raw, json)
Hash identifier:          XzOwXcfCxY+GWrCgtESHOD+NQvIMtmmYArqDfAp22bw=
Subject key identifier:   B4:B9:10:2A:DC:81:DE:74:16:75:EC:20:2B:E2:AF:72:00:F2:F8:A3
Certificate issuer:       /CN=6725D2C2B4DD752B4223424FD1BAD8B1620866BD
Certificate serial:       315D19752A901E4B2A47AD65A7372D67B54086D0
Authority key identifier: 67:25:D2:C2:B4:DD:75:2B:42:23:42:4F:D1:BA:D8:B1:62:08:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/323830343a383138303a3a2f33322d3332203d3e20323732343538.roa
Signing time:             Thu 06 Mar 2025 17:33:25 +0000
ROA not before:           Thu 06 Mar 2025 17:28:25 +0000
ROA not after:            Thu 05 Mar 2026 17:33:25 +0000
asID:                     272458
IP address blocks:        2804:8180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.crl
                          rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:19:75:2a:90:1e:4b:2a:47:ad:65:a7:37:2d:67:b5:40:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6725D2C2B4DD752B4223424FD1BAD8B1620866BD
        Validity
            Not Before: Mar  6 17:28:25 2025 GMT
            Not After : Mar  5 17:33:25 2026 GMT
        Subject: CN=B4B9102ADC81DE741675EC202BE2AF7200F2F8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:e5:7c:5d:24:60:6b:c1:6c:02:43:68:e2:
                    f1:03:23:9d:e4:59:f9:2b:89:37:5a:f1:4d:bf:15:
                    98:c1:bc:a4:a2:63:f9:6c:01:73:9e:b8:d5:9d:ee:
                    49:cd:02:8b:00:d9:c0:cf:a0:8b:09:2d:24:20:e6:
                    51:3d:cf:c8:f1:ae:f0:d2:eb:45:4c:2c:06:42:9b:
                    ff:aa:8f:32:21:2a:69:75:22:e3:e1:c7:30:a6:a4:
                    e5:a8:3c:1d:01:87:f4:31:e0:c6:0a:46:d6:94:ad:
                    6f:53:5f:93:74:c5:59:fd:09:c0:ef:e6:28:fc:18:
                    c4:37:d1:93:3f:d6:fd:01:fc:a2:25:53:1d:1c:09:
                    3c:e6:61:79:ce:26:e9:e8:61:7b:57:3f:21:8c:ca:
                    2c:af:12:86:5d:16:a8:2b:b7:fc:55:ad:60:95:45:
                    de:98:89:0a:9d:1c:fb:74:a8:de:17:f4:b7:4b:fd:
                    49:64:20:a4:89:ce:c0:7e:b1:41:e7:b1:9f:67:0c:
                    10:d9:0d:e6:65:ec:37:3a:2e:85:fb:36:7a:44:7c:
                    b5:85:d5:23:e8:05:30:1f:99:70:dd:e7:ec:d3:08:
                    aa:98:e8:af:6b:ec:71:ed:88:88:8c:7f:aa:6e:e5:
                    06:8e:0a:80:97:7b:b5:9a:1a:b8:f3:f8:50:1a:40:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:10:2A:DC:81:DE:74:16:75:EC:20:2B:E2:AF:72:00:F2:F8:A3
            X509v3 Authority Key Identifier:
                keyid:67:25:D2:C2:B4:DD:75:2B:42:23:42:4F:D1:BA:D8:B1:62:08:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6725D2C2B4DD752B4223424FD1BAD8B1620866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPBmYpdUUF1xka1f7KaHPfBwyjBjrBMhLh6rD9mN3Qv2/1/323830343a383138303a3a2f33322d3332203d3e20323732343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8180::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:38:f6:d4:84:5d:32:73:57:8a:26:c7:a2:47:5a:b8:bb:
         a2:13:15:1f:1b:da:e9:7f:25:77:fa:f4:ca:74:9a:52:c0:f4:
         20:79:fa:e0:48:9e:d9:78:21:9b:03:e2:65:0a:5a:41:ca:85:
         6f:15:6a:5f:d5:aa:06:95:8c:a2:60:32:d4:67:3a:27:2e:d3:
         0c:e0:d6:f1:a5:33:38:4c:70:46:1a:3e:79:3d:04:2a:9a:ed:
         67:68:79:ae:eb:8f:95:5d:97:e9:c6:4a:86:60:4d:48:34:d2:
         e1:7e:ee:fb:53:f4:95:56:9a:a7:6a:18:1d:08:54:f5:d0:86:
         93:ff:f0:a2:76:05:8f:c6:6c:78:da:dd:02:e0:db:97:59:af:
         be:a6:4c:46:84:bc:66:ea:46:73:6b:7b:a8:a2:8f:71:11:04:
         aa:be:3e:fe:75:93:7a:6e:e5:03:1e:5c:80:77:0e:68:f2:a2:
         32:22:19:de:47:8d:21:37:44:ba:cb:df:2d:bf:6f:47:5f:5f:
         47:25:82:60:56:b1:58:e1:02:b8:50:f1:d1:39:4b:fc:4d:8d:
         f0:f0:f7:c0:a6:60:11:ba:e4:b5:e7:18:70:71:be:9b:78:88:
         ce:78:54:65:48:9a:9b:4e:54:46:88:ea:b3:ca:c1:ee:86:e5:
         45:da:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:35:45 2025 by rpki-client