Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
File:                     323830343a323837303a3a2f33322d3438203d3e203532383633.roa (raw, json)
Hash identifier:          X4ZLWHf09PTbC8oO8Xd9aSpcWZevi1kIaTZWjs+z/68=
Subject key identifier:   0B:8C:66:4D:1E:B9:F8:95:AA:75:7D:AF:3B:AF:5C:46:F4:6A:6C:E3
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       6C398BD2A72AE0F5055964DE0BC69849D751BFDD
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Thu 05 Mar 2026 19:00:01 +0000
asID:                     52863
IP address blocks:        2804:2870::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl
                          rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:39:8b:d2:a7:2a:e0:f5:05:59:64:de:0b:c6:98:49:d7:51:bf:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  5 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:25:6f:53:70:21:eb:7c:c1:ba:75:47:ac:
                    06:0a:71:3d:99:93:a3:60:25:ab:a4:4f:53:c6:fc:
                    4b:7a:ce:05:59:5a:02:51:0a:3d:ad:80:7e:86:b5:
                    9b:5f:b5:5a:59:d9:80:55:f8:82:f7:1c:71:bf:e8:
                    0e:e0:80:89:cd:21:5d:5e:d1:42:f1:aa:c0:fa:3d:
                    80:88:c1:15:50:bc:b6:65:6c:08:9f:8e:23:70:12:
                    66:a4:4e:95:fa:2f:f1:ef:1a:e6:78:71:81:51:2a:
                    6d:dd:26:c0:6d:89:64:5d:60:af:c4:bd:ca:c4:93:
                    87:15:81:8c:fa:24:09:3c:0e:07:49:83:33:46:2d:
                    a8:0e:a2:9a:eb:c3:3d:de:6b:4c:cf:21:99:f2:92:
                    a7:2c:c2:40:d2:22:46:20:82:ff:2d:05:2a:4e:12:
                    bf:29:d4:6b:30:4c:af:44:eb:85:bc:e4:61:7e:bd:
                    6f:8f:71:f8:df:f0:78:3d:99:88:78:d0:02:2c:df:
                    65:45:92:15:6d:57:8e:0c:25:f1:9f:59:41:49:63:
                    db:6e:b8:22:6f:c2:46:c9:8e:72:0d:ce:21:0c:0e:
                    39:81:f9:5b:2e:c4:d7:0c:ff:ee:22:75:98:3c:1c:
                    f6:f3:22:00:c4:83:f4:d0:88:b2:05:13:9f:31:2f:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:66:4D:1E:B9:F8:95:AA:75:7D:AF:3B:AF:5C:46:F4:6A:6C:E3
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/323830343a323837303a3a2f33322d3438203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2870::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:18:92:18:9b:62:64:6f:66:c3:93:82:2e:42:8d:99:ac:4c:
         f7:08:da:2a:91:6c:f2:a0:2b:5b:24:b3:94:08:51:cc:92:29:
         86:11:2f:c5:a8:e5:b1:bb:97:5c:8e:49:c5:ca:cc:f9:e5:12:
         0b:3b:40:89:26:46:d3:29:ab:c6:eb:31:9d:a3:88:ad:04:e4:
         8f:07:42:98:cd:d4:71:e5:da:c7:86:1a:e0:2a:8f:47:ca:39:
         85:24:cf:47:f2:b8:4a:da:64:28:c4:f7:9c:10:90:53:3d:55:
         34:67:6b:1c:63:9f:0e:33:56:07:b3:38:de:2c:40:8b:e9:88:
         1f:f2:af:4c:fa:5b:7c:ad:6d:31:7a:77:f4:25:f4:56:d8:ef:
         31:c0:a2:c8:22:af:aa:35:e9:91:07:8e:64:a1:3a:cc:e4:25:
         ac:eb:02:d9:0c:f8:e7:72:ae:cc:db:f0:05:e3:d4:15:a0:c8:
         f4:09:a8:0f:09:74:17:7e:3a:dd:58:88:c8:13:86:eb:fd:39:
         99:09:35:e2:6f:4a:18:53:04:20:b3:04:40:00:87:07:19:7d:
         31:ae:e7:29:54:c1:cb:5d:8f:69:fd:b8:a2:99:89:6e:38:14:
         4d:2e:35:94:cc:e7:3f:ec:a1:2b:dc:2d:a6:fa:fc:be:ca:73:
         b5:76:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:12 2025 by rpki-client