Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          VKDf7ggbfiz8rpCjJSQ+yu2T5sqSYuaym0M0bLcYVKI=
Subject key identifier:   A4:F5:7F:BC:AF:86:14:F1:08:D5:25:79:DC:42:08:C8:46:CD:DA:82
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       7CEE61B897429BF1271CF002CEF4A86A55613BB6
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Wed 05 Mar 2025 23:33:05 +0000
ROA not before:           Wed 05 Mar 2025 23:28:05 +0000
ROA not after:            Wed 04 Mar 2026 23:33:05 +0000
asID:                     273814
IP address blocks:        2804:8cac:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ee:61:b8:97:42:9b:f1:27:1c:f0:02:ce:f4:a8:6a:55:61:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Mar  5 23:28:05 2025 GMT
            Not After : Mar  4 23:33:05 2026 GMT
        Subject: CN=A4F57FBCAF8614F108D52579DC4208C846CDDA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:9c:3d:74:9a:8d:a0:52:e0:92:56:5e:d5:
                    01:e5:1c:6e:d7:47:f0:ea:8a:de:bc:f8:52:4a:5c:
                    e2:c4:53:52:01:46:cc:78:ed:97:07:d9:99:33:68:
                    39:a1:48:4a:93:e7:68:8c:f0:e5:1d:40:bd:b6:00:
                    66:01:2c:f9:d5:dd:cb:4b:b2:da:81:78:0e:1e:e5:
                    4b:f2:d7:ca:4e:ad:a9:c7:33:29:4e:2d:f4:e8:b8:
                    f7:65:ed:77:72:4b:d7:ec:64:d5:13:d5:45:df:98:
                    10:2c:a2:a5:5c:3c:b6:fa:ab:9b:97:01:c7:fb:46:
                    f9:03:74:67:71:b6:2e:41:81:c0:ba:c8:58:86:98:
                    91:35:01:e0:60:57:b2:26:21:5f:77:4f:06:9c:b9:
                    34:c9:a0:48:78:99:26:39:ec:ef:ef:e5:9e:0e:c1:
                    5d:0a:14:c8:14:10:48:11:67:5b:09:5e:79:8c:b4:
                    a9:06:d7:64:99:0e:bf:f1:6f:a8:23:2f:fd:b7:24:
                    d0:25:ca:cb:b5:2e:b8:1b:81:37:c8:5e:29:07:c0:
                    13:24:6b:08:74:d4:9d:5c:71:2c:b6:0f:bf:a7:08:
                    ff:ee:27:5a:93:5c:54:e9:68:06:1e:6f:29:fb:db:
                    b5:e5:f9:08:e5:01:79:9b:94:29:35:dd:d4:2d:a1:
                    b4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:7F:BC:AF:86:14:F1:08:D5:25:79:DC:42:08:C8:46:CD:DA:82
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:ec:ba:b8:c9:e1:b5:b0:5b:0f:1c:9c:8d:16:57:5c:e7:
         5b:42:ef:f6:0e:05:6b:1e:9e:d2:f0:6e:b1:be:f1:8c:75:bc:
         4a:0f:27:6a:72:95:9e:f5:9b:e7:4a:7a:12:be:cd:59:56:8e:
         7e:57:3e:35:82:23:16:17:67:fd:0a:b3:f7:49:a1:4a:11:6a:
         32:e4:3d:cb:4a:51:6f:b3:6c:a5:ea:e8:d4:3b:cf:af:b7:4a:
         11:9b:fb:83:24:fc:d8:50:9d:1a:67:c8:89:69:0e:9a:d0:17:
         a9:63:48:38:b2:68:ad:b7:6e:7c:5a:f3:a5:ea:24:33:83:fc:
         c9:8e:5f:19:9d:c7:0a:aa:21:93:2d:b5:9c:49:0d:69:c0:f6:
         7b:d3:28:d4:ce:e3:98:e0:f0:d7:1f:6c:d8:f4:d2:c0:97:3c:
         64:66:3c:92:6e:df:ec:f1:97:a4:3d:69:16:d3:22:4b:a0:49:
         e1:31:cf:49:89:2a:fc:14:7d:5e:6e:6f:48:bc:38:db:26:e0:
         96:86:e5:60:18:ce:75:4d:e7:82:1c:3a:37:66:ff:32:03:e5:
         0a:07:cd:f1:75:8a:9d:88:0f:80:f5:3e:5d:e0:c1:25:ab:ca:
         1e:af:5e:8b:91:ae:e6:52:f4:14:5f:b8:e5:d9:d2:b5:4c:3c:
         76:57:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:31:14 2025 by rpki-client