Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33322d3332203d3e20323638313733.roa
File:                     323830343a353932633a3a2f33322d3332203d3e20323638313733.roa (raw, json)
Hash identifier:          t9En2pW7po9AGhZcRWCC553hGebUFbcNYB1YkGYuFWk=
Subject key identifier:   24:08:D7:E6:62:EA:15:9F:5F:1D:68:D3:04:1F:2E:08:0C:D8:B2:FC
Certificate issuer:       /CN=99A78712ED297A370E4987A326F3177259C4BC40
Certificate serial:       6273EBE9F618C5040313FC3E38B99971078624DA
Authority key identifier: 99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33322d3332203d3e20323638313733.roa
Signing time:             Wed 05 Mar 2025 19:00:23 +0000
ROA not before:           Wed 05 Mar 2025 18:55:23 +0000
ROA not after:            Wed 04 Mar 2026 19:00:23 +0000
asID:                     268173
IP address blocks:        2804:592c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:eb:e9:f6:18:c5:04:03:13:fc:3e:38:b9:99:71:07:86:24:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A78712ED297A370E4987A326F3177259C4BC40
        Validity
            Not Before: Mar  5 18:55:23 2025 GMT
            Not After : Mar  4 19:00:23 2026 GMT
        Subject: CN=2408D7E662EA159F5F1D68D3041F2E080CD8B2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:32:e9:94:30:33:d8:18:2f:fa:41:12:09:1f:
                    e2:78:f7:7f:44:5e:87:56:dc:78:7b:27:22:ee:66:
                    7e:bb:25:5b:97:65:41:25:6c:2d:a2:6d:37:17:67:
                    80:e4:60:b7:e3:d4:52:ba:90:72:a0:4a:b1:1f:fd:
                    6d:9c:18:28:60:10:4a:2a:8a:22:71:c4:ca:8a:70:
                    65:20:fa:e4:6a:df:9d:1b:a5:dc:a4:14:d3:f7:77:
                    89:91:2a:79:92:a9:3b:f1:6e:22:71:c4:2b:9a:2f:
                    7e:d7:ef:ee:15:f1:9c:20:b5:35:df:b5:68:36:64:
                    d9:0c:32:37:9f:96:10:81:70:bc:ce:88:6f:3d:af:
                    35:1c:f6:a1:30:9b:78:4b:4e:39:84:ea:b9:5b:e8:
                    5d:81:10:59:05:75:db:3a:87:42:e9:5e:2d:a6:92:
                    f2:06:22:91:bc:ec:c2:77:c4:b3:73:d2:a7:d7:17:
                    3a:d1:47:0a:5c:21:b2:34:74:36:9c:c2:69:56:c1:
                    5d:be:0f:86:db:07:3d:ad:ad:10:81:7e:58:fa:90:
                    d7:73:60:62:8e:e5:e0:1a:61:43:18:ef:cb:4c:ce:
                    31:af:11:51:20:71:98:10:43:4f:af:c0:ea:b0:94:
                    58:96:7a:5e:0d:87:6e:ea:37:d8:96:a5:8a:50:24:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:08:D7:E6:62:EA:15:9F:5F:1D:68:D3:04:1F:2E:08:0C:D8:B2:FC
            X509v3 Authority Key Identifier:
                keyid:99:A7:87:12:ED:29:7A:37:0E:49:87:A3:26:F3:17:72:59:C4:BC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/99A78712ED297A370E4987A326F3177259C4BC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A78712ED297A370E4987A326F3177259C4BC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/1/323830343a353932633a3a2f33322d3332203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:592c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:36:c4:53:6a:ff:d2:ab:66:9f:34:e4:2f:e9:db:cc:e4:30:
         04:bf:9d:6d:f1:ec:5e:40:b2:94:f7:a3:43:c6:06:f7:0e:eb:
         64:ed:df:42:9a:6a:57:a1:0c:db:0d:12:e4:29:c6:ac:08:f1:
         1f:bd:5c:59:18:41:9f:06:5b:11:a7:62:f8:57:63:c0:f5:d7:
         ca:65:76:17:56:14:19:af:61:e2:4d:8f:0d:cb:84:22:a9:69:
         6c:dd:ef:6e:d3:37:24:92:c5:a8:57:ae:a1:c3:ee:36:15:c6:
         a0:89:63:a2:bc:03:e4:e4:46:1c:1e:62:66:47:cb:5e:84:7b:
         92:65:04:f6:82:94:25:82:50:56:e0:2d:ec:f2:c8:d1:55:f4:
         47:e2:57:61:cc:d0:1a:6a:6b:a1:56:af:e3:f4:b4:2e:a8:05:
         7e:ab:e0:5d:27:83:33:5a:f7:62:3e:1b:47:c8:68:ea:da:70:
         cd:c3:2b:09:27:52:c4:d8:45:ce:61:63:fa:de:71:d1:0f:91:
         33:49:71:a7:c8:d7:bc:64:60:31:aa:d1:21:24:45:be:b3:db:
         f2:d7:42:25:7c:4b:4c:ed:f0:74:77:1e:6c:a7:a4:23:34:67:
         d0:b1:95:23:e6:a2:c5:67:9e:a2:cc:61:bc:cf:e5:fc:fc:97:
         b0:59:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:56:58 2025 by rpki-client