Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/323830343a383061633a3a2f33322d3332203d3e20323731373636.roa
File:                     323830343a383061633a3a2f33322d3332203d3e20323731373636.roa (raw, json)
Hash identifier:          oYm9EmAU7e4JNo/jo4XUavlPZqVPPvY8ULsf4wEO8fA=
Subject key identifier:   24:0B:27:3F:43:5E:8B:C6:0D:1D:BD:29:47:BC:CB:19:75:4C:B1:E2
Certificate issuer:       /CN=3959E4DDE5432F578D571DA91D8B83E05EB7679C
Certificate serial:       44F00F7BF558AFE4E30B324C99CE70338BABA25E
Authority key identifier: 39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/323830343a383061633a3a2f33322d3332203d3e20323731373636.roa
Signing time:             Sat 17 May 2025 03:58:36 +0000
ROA not before:           Sat 17 May 2025 03:53:36 +0000
ROA not after:            Sat 16 May 2026 03:58:36 +0000
asID:                     271766
IP address blocks:        2804:80ac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.crl
                          rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 09:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f0:0f:7b:f5:58:af:e4:e3:0b:32:4c:99:ce:70:33:8b:ab:a2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3959E4DDE5432F578D571DA91D8B83E05EB7679C
        Validity
            Not Before: May 17 03:53:36 2025 GMT
            Not After : May 16 03:58:36 2026 GMT
        Subject: CN=240B273F435E8BC60D1DBD2947BCCB19754CB1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:f5:5c:c5:b2:32:14:79:9f:ae:7a:46:39:
                    37:48:f7:0e:28:dc:24:a6:0c:d0:c2:9f:55:8f:b9:
                    79:7d:ca:a2:a8:e9:91:fa:df:c2:5f:d0:25:5c:4d:
                    2d:90:2b:63:bb:f7:81:0c:0e:7c:75:48:a2:05:d4:
                    6a:6e:00:aa:11:65:5b:af:3a:8a:ed:d5:f1:83:2e:
                    3b:29:e8:95:7b:54:39:b5:ec:09:5e:d5:68:e3:74:
                    57:79:70:76:fc:db:a8:c8:11:f9:85:25:9e:cb:92:
                    3c:f8:e9:ae:78:1b:7d:2b:52:d4:ad:4c:1b:f6:eb:
                    af:e0:d4:b5:04:0e:80:ad:06:9c:a4:96:4a:ca:8f:
                    1e:7e:b3:0e:16:44:44:5c:4c:31:34:9d:3a:15:ed:
                    56:14:8c:eb:64:4d:08:1e:fa:c1:45:4e:d3:7e:ee:
                    7d:b6:ea:2f:56:7b:0c:78:80:54:1b:14:37:c1:3b:
                    72:98:f3:7c:5a:a0:2c:96:99:b9:32:35:46:da:fc:
                    fb:4a:53:65:cb:df:f7:19:e2:96:c4:f4:58:a5:0c:
                    9f:2a:0e:ed:ad:d7:3f:c5:73:3e:25:5d:87:eb:fe:
                    65:0e:8c:d0:f5:1c:cb:d2:3e:bc:1f:34:4e:68:99:
                    3e:aa:06:44:9a:bd:0a:d1:f6:1a:8d:81:af:28:1b:
                    7f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0B:27:3F:43:5E:8B:C6:0D:1D:BD:29:47:BC:CB:19:75:4C:B1:E2
            X509v3 Authority Key Identifier:
                keyid:39:59:E4:DD:E5:43:2F:57:8D:57:1D:A9:1D:8B:83:E0:5E:B7:67:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/3959E4DDE5432F578D571DA91D8B83E05EB7679C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3959E4DDE5432F578D571DA91D8B83E05EB7679C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbZJdrjDZ8n9Nf9w6fcJHWNPFb5Ruf9B7voADFhvCq5E/0/323830343a383061633a3a2f33322d3332203d3e20323731373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:c4:a8:8f:f7:7e:34:4c:c3:ca:89:39:8d:14:31:f6:ba:
         46:67:07:92:b4:2a:88:ae:2b:2b:13:d9:7c:08:f4:c0:03:79:
         dd:59:cc:d1:81:e3:2b:ef:ec:69:21:0a:58:af:aa:08:88:f6:
         87:4f:b0:ec:a4:36:00:49:79:1c:79:d4:0e:0a:c7:b0:fd:fa:
         6b:d4:e7:c2:86:81:c0:16:3a:c4:f7:30:66:a2:2b:e4:b1:dc:
         9c:56:57:1f:1f:b4:2a:f0:1b:dc:6f:9e:15:ba:fb:50:2a:04:
         ef:41:8e:8c:c5:38:e3:ca:a5:b1:b8:03:87:00:b2:16:ed:f9:
         df:95:61:38:ae:f8:34:09:ae:dd:a9:11:24:00:b5:e6:bf:2e:
         6a:fc:0e:35:55:77:d9:25:6a:26:7a:3a:0f:1d:37:65:54:04:
         8d:8c:3a:57:b3:57:17:e7:28:d4:88:1d:c0:6b:37:f3:77:d7:
         5a:49:93:e1:3f:fe:df:17:22:1f:0e:30:93:ba:86:e8:e3:38:
         91:8d:0c:34:ed:33:37:74:87:88:57:a3:39:fe:b8:5a:01:6b:
         08:66:3c:13:ab:86:48:dc:c5:e4:94:4b:c1:a5:c3:0b:44:9f:
         92:ea:74:a4:3f:19:0f:f9:41:4e:57:1b:e1:d3:1a:f2:a6:f9:
         c9:62:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:26:57 2025 by rpki-client