Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa
File:                     323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (raw, json)
Hash identifier:          B7E00C1Vxzm7LGbcrVzCf9CW2okcJ2rZZJ8BHdI0fJY=
Subject key identifier:   AA:BF:56:D4:6D:AD:5D:B9:5E:95:B1:5C:C5:6A:66:09:75:36:A2:95
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       75AE0AC7C53631F14F3CA9885AB0845FD4BA323D
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa
Signing time:             Thu 30 Jan 2025 16:04:38 +0000
ROA not before:           Thu 30 Jan 2025 15:59:38 +0000
ROA not after:            Thu 29 Jan 2026 16:04:38 +0000
asID:                     267657
IP address blocks:        2804:44d8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 00:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ae:0a:c7:c5:36:31:f1:4f:3c:a9:88:5a:b0:84:5f:d4:ba:32:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Jan 30 15:59:38 2025 GMT
            Not After : Jan 29 16:04:38 2026 GMT
        Subject: CN=AABF56D46DAD5DB95E95B15CC56A66097536A295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:ff:21:01:c5:ab:07:67:12:ff:fc:99:e8:
                    25:d1:54:cb:0e:b0:cb:bc:39:02:26:1d:ad:d2:31:
                    c2:2b:a7:f9:3a:07:9a:3c:b3:9f:04:de:89:95:2f:
                    54:ee:62:01:d9:f9:2d:19:90:ab:6a:f6:1c:37:e5:
                    cd:cb:a1:9a:45:ea:92:4e:f2:50:68:eb:5f:7f:55:
                    77:f7:3f:2e:8d:8c:f0:86:3b:89:63:87:30:27:fc:
                    07:95:86:d1:21:60:c5:e8:55:c7:e9:90:af:ce:7b:
                    6f:e8:3f:2f:75:86:cd:ac:87:3e:00:77:1f:69:0d:
                    c5:b6:49:00:74:1b:40:19:99:ec:fa:57:d7:da:a7:
                    e3:3c:fa:a5:18:c8:27:ab:d0:a5:5b:d4:67:84:c6:
                    ad:c4:0a:da:80:cd:6e:c7:c5:72:cd:1f:a1:46:ff:
                    88:cc:4f:a3:4e:ea:55:8a:0d:f5:54:86:9e:c9:6a:
                    e4:b7:ca:1a:8f:ce:1b:07:b7:fe:d7:5b:0f:32:d8:
                    f5:88:a0:9b:b4:f0:82:57:57:50:f3:b2:c5:e1:33:
                    58:05:57:57:bf:01:9b:1f:b7:6a:9f:75:ec:7b:10:
                    b8:7e:ab:c2:04:3f:9d:4a:bd:c4:cc:bb:b9:0b:7f:
                    30:4f:93:10:d3:76:b1:9e:bb:6c:6d:27:27:25:ca:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:56:D4:6D:AD:5D:B9:5E:95:B1:5C:C5:6A:66:09:75:36:A2:95
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:29:b9:03:5a:20:24:f4:cc:7f:24:0f:81:17:32:74:4c:51:
         be:4b:1b:9b:fe:15:23:91:8a:af:bb:d7:3a:49:ea:8e:80:d6:
         55:cd:31:83:6a:dc:46:0f:65:fe:2c:91:00:40:67:b3:cb:a6:
         fe:87:cb:de:5b:ac:4f:a6:a5:6e:f9:8e:aa:7a:12:59:71:e7:
         5a:99:3f:b0:d0:b5:76:b1:a0:f3:ed:18:4c:f2:3e:6d:d1:8a:
         93:aa:a3:d6:a8:26:df:89:4c:33:bf:ed:67:0d:50:b4:88:84:
         6d:57:b6:f7:7c:d7:cd:a0:85:c1:2c:b5:e3:2b:5a:6e:98:a9:
         bc:43:db:09:11:6e:5c:c6:8c:bc:bb:37:4e:b5:ae:9f:f2:4c:
         2d:b4:ba:15:24:d7:b4:25:49:62:1b:d4:29:95:1b:4e:ab:70:
         5a:f9:53:f8:9d:45:54:c8:05:5b:51:bc:d1:ad:ab:b6:23:06:
         67:5c:92:92:57:e6:e1:e1:ba:8d:be:b6:d8:44:ec:6c:d5:97:
         69:11:a7:77:22:a1:e8:03:2b:17:76:ac:06:68:26:3c:3e:07:
         c7:b9:bb:93:6c:58:d3:a9:4d:3d:f3:b0:46:a6:ee:6e:11:66:
         c1:7b:98:78:cb:44:26:1c:b1:32:ff:17:88:0f:12:d9:c5:eb:
         03:06:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:48:33 2025 by rpki-client