Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
File:                     323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier:          F3fG9mFxvglpd2enKC9y9YG4bfXdBUOav0qW+NySFMc=
Subject key identifier:   53:D2:64:AB:BF:39:F4:D4:B5:D6:BB:42:05:54:8C:D1:31:79:7F:B5
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       5853F61F80BDF938A8FB411B5A6D9E099B6E4CFF
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
Signing time:             Wed 05 Mar 2025 23:33:05 +0000
ROA not before:           Wed 05 Mar 2025 23:28:05 +0000
ROA not after:            Wed 04 Mar 2026 23:33:05 +0000
asID:                     273814
IP address blocks:        2804:8cac:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:f6:1f:80:bd:f9:38:a8:fb:41:1b:5a:6d:9e:09:9b:6e:4c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Mar  5 23:28:05 2025 GMT
            Not After : Mar  4 23:33:05 2026 GMT
        Subject: CN=53D264ABBF39F4D4B5D6BB4205548CD131797FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:71:84:49:74:e1:be:b0:b0:e1:ce:56:94:
                    ab:f7:d8:6e:72:8c:66:c2:fd:bf:9a:69:d3:fa:e8:
                    81:af:82:38:13:b2:37:97:4c:14:5b:75:a1:16:53:
                    4b:51:8a:dd:b2:b4:4f:a5:e2:de:a6:0e:c4:e4:d7:
                    4f:7f:a3:78:39:af:07:3d:d1:42:b1:33:00:45:57:
                    60:8f:66:f6:a1:91:a2:4e:a9:2e:c3:47:95:20:92:
                    6b:53:16:0b:1b:98:50:6f:78:33:69:7a:e7:88:0a:
                    76:df:d2:32:8a:ad:10:ad:99:93:39:f5:8f:ef:1b:
                    5d:e6:7f:9c:61:cd:c3:63:8c:25:d3:73:34:fe:15:
                    2c:6b:5d:b2:69:1c:d2:6c:d2:e3:18:91:9a:d6:6d:
                    04:45:8e:67:fe:aa:2e:0d:98:a2:4c:6f:d0:7f:ca:
                    7b:80:0e:04:47:85:59:2d:f4:df:c4:df:26:2c:a2:
                    cc:7d:29:4f:d0:b7:fc:8a:eb:b3:9b:71:5d:30:54:
                    40:39:8a:b4:47:c1:e2:ac:a1:d2:58:19:02:04:21:
                    25:b4:5b:62:9c:77:d8:a7:d5:27:82:4d:94:51:f1:
                    c3:dd:af:0c:46:e2:63:3d:92:20:f7:d7:b6:7f:e8:
                    8b:03:8e:78:9e:65:b5:79:d9:ff:b2:cd:4d:ec:75:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:64:AB:BF:39:F4:D4:B5:D6:BB:42:05:54:8C:D1:31:79:7F:B5
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:0c:55:3d:c1:64:7a:44:d1:04:57:8d:a9:46:4d:73:fd:79:
         a0:16:d6:b0:f3:70:d1:d5:9e:c2:e5:f4:1f:3e:d6:29:a2:25:
         e1:ac:ef:e4:7b:ca:75:13:d3:48:7e:48:e2:a8:78:77:ed:2a:
         04:b0:0e:80:dc:c1:2f:7a:09:60:66:66:8f:70:43:fe:37:ca:
         93:4f:dc:ff:1a:69:d5:3e:7f:14:28:43:db:d3:67:d0:95:4d:
         17:84:97:cd:d9:c2:6b:98:ee:a1:bc:06:7f:4f:96:17:2e:64:
         56:c0:90:39:9a:b8:51:d9:3c:34:aa:54:e5:6f:c9:1f:57:29:
         f6:8c:52:bf:4a:16:16:40:21:a6:8f:81:e5:ef:7c:3d:07:66:
         54:49:92:16:bb:04:4a:d8:3f:c3:f1:cb:2c:aa:b2:06:30:78:
         bd:16:92:25:e7:23:05:62:0d:dc:39:86:85:3e:6c:0c:fa:04:
         87:67:6b:f2:04:5f:50:4c:e2:9e:56:42:a3:90:55:79:15:19:
         86:a0:e2:80:cb:db:40:ec:08:49:3f:32:b2:d0:1c:30:d7:32:
         b2:08:b0:1f:9d:d2:c2:79:a5:f3:a1:3b:26:db:9e:63:a6:69:
         71:22:f8:07:1b:b6:46:0e:c9:44:39:50:f1:19:e1:48:a5:c8:
         94:3d:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:28:42 2025 by rpki-client