Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
File:                     323830343a373461343a3a2f33322d3334203d3e20323730393934.roa (raw, json)
Hash identifier:          NpvX1MGWiaduTL/lhPN9yk30TqKaQhbWwh8nuazNpFM=
Subject key identifier:   8B:99:2D:32:5F:8A:32:2D:91:5A:E1:3B:75:55:79:1F:2B:AF:9A:73
Certificate issuer:       /CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
Certificate serial:       68ECC35E56A91CF978A7FFF616DB56DA06F466BB
Authority key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     270994
IP address blocks:        2804:74a4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl
                          rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ec:c3:5e:56:a9:1c:f9:78:a7:ff:f6:16:db:56:da:06:f4:66:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:38:cd:6e:80:0e:18:4a:58:94:3a:38:b1:
                    d3:79:5f:d7:5b:68:73:dd:bd:df:4e:2b:0f:c9:e4:
                    05:b0:f9:c7:87:9c:df:5b:61:50:0e:0f:c4:1b:76:
                    20:f3:a2:d9:e2:6e:a0:53:50:85:63:80:a8:0b:db:
                    c0:ea:da:2a:c4:dc:c3:10:85:a8:b1:97:c9:5b:bf:
                    5e:70:b4:91:b2:54:1b:0c:a8:6e:1b:e2:5d:84:47:
                    8a:97:e5:80:60:50:77:bc:f3:ab:fd:52:4b:9f:f6:
                    e6:cc:9a:cd:ab:99:44:c4:ae:1c:67:c0:1b:90:74:
                    90:38:05:0f:99:1f:d6:0e:99:54:f0:a3:41:e9:58:
                    8b:eb:21:7e:18:62:a3:14:41:6f:16:e8:cc:9b:48:
                    f7:b4:b0:bb:1c:2f:89:96:eb:1c:9e:44:1f:59:68:
                    6b:ce:ea:a5:d7:06:23:78:33:37:33:6c:f7:ff:3a:
                    38:f2:34:b3:bd:f2:ff:07:f0:f0:7b:ee:0d:c2:87:
                    06:d4:55:29:bb:69:27:16:20:36:f1:88:ba:9d:ca:
                    e7:c1:de:cc:0e:04:b4:be:d7:88:e1:ba:c6:83:ca:
                    da:11:4d:52:fd:5e:8a:34:fc:c9:57:5a:b3:67:44:
                    c5:1e:a9:86:73:59:4c:bb:7f:1b:6c:13:0d:f8:0e:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:99:2D:32:5F:8A:32:2D:91:5A:E1:3B:75:55:79:1F:2B:AF:9A:73
            X509v3 Authority Key Identifier:
                keyid:B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/323830343a373461343a3a2f33322d3334203d3e20323730393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:65:76:7d:00:46:8c:65:ee:dd:10:b6:99:c7:12:c7:ef:
         03:65:de:7e:3f:b4:eb:01:d8:45:60:84:34:27:42:30:5a:41:
         2f:e4:b8:d5:83:e0:5a:0a:7d:f9:1f:90:d3:e9:b9:7c:62:fb:
         5f:60:3f:ea:48:84:34:d8:47:2f:70:b4:a3:2d:23:51:3f:25:
         e2:59:42:ff:05:9b:c6:27:47:31:6e:8d:07:1d:7b:d3:1c:13:
         9c:83:25:f7:2f:5b:9c:86:d3:ad:7e:22:72:53:19:5e:b8:84:
         31:00:5c:9d:e9:34:41:29:06:26:75:81:1c:21:c8:5f:83:bb:
         17:10:89:30:94:70:4c:42:6b:9b:cc:89:13:21:ac:3d:92:32:
         76:c4:73:72:a0:08:21:3a:40:2a:54:e7:93:6a:57:0b:0f:c8:
         7b:e5:44:ec:d2:98:51:14:12:86:f0:9a:6e:07:86:07:b9:82:
         8d:71:fc:1b:93:bc:b4:59:a7:b1:e4:4c:5d:2a:36:f1:20:59:
         f8:c1:75:e5:93:37:1c:97:5f:d6:a9:8c:21:30:e2:91:6d:c2:
         95:10:33:b2:bd:88:e5:e9:d0:47:0e:6c:78:51:b6:e0:39:c1:
         32:99:cf:be:1e:3a:dc:7a:e4:f1:f2:15:6e:ce:16:e2:55:ce:
         2b:f1:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:31:56 2025 by rpki-client