Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
File:                     323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (raw, json)
Hash identifier:          roe3CRwUBZHOfPicJI5B0uNIJHF0uBEXZDkKOt8LSec=
Subject key identifier:   CD:CB:3E:E3:5A:2E:23:05:BE:9A:EE:5D:80:5C:19:DB:F0:D8:D2:D7
Certificate issuer:       /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial:       22046FAEFA5855AF26213F5936E39FD40C11AFEE
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa
Signing time:             Wed 05 Mar 2025 23:33:05 +0000
ROA not before:           Wed 05 Mar 2025 23:28:05 +0000
ROA not after:            Wed 04 Mar 2026 23:33:05 +0000
asID:                     273814
IP address blocks:        2804:8cac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
                          rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:6f:ae:fa:58:55:af:26:21:3f:59:36:e3:9f:d4:0c:11:af:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
        Validity
            Not Before: Mar  5 23:28:05 2025 GMT
            Not After : Mar  4 23:33:05 2026 GMT
        Subject: CN=CDCB3EE35A2E2305BE9AEE5D805C19DBF0D8D2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:60:23:2e:a3:74:35:97:77:fd:0c:d5:97:
                    a0:d6:c8:57:56:f3:e0:38:c1:14:65:14:6f:d8:91:
                    db:0b:42:37:0f:99:ee:5f:59:ca:2c:58:48:1d:0c:
                    56:92:1c:57:c4:bc:f1:b7:30:bf:4e:0e:7e:81:55:
                    90:a4:50:ae:e6:1c:2e:07:79:9a:e3:25:5f:7c:1c:
                    ee:a8:5d:98:71:67:1c:d8:8d:de:fa:28:57:bc:52:
                    7f:2f:23:de:c9:a5:17:f5:28:c9:6a:34:e9:7d:d9:
                    03:50:e2:cc:2d:b3:bf:27:ba:43:f3:7d:70:6c:94:
                    da:6e:e5:09:65:37:95:ab:ed:68:ce:9e:e3:dc:8d:
                    02:4f:4f:dc:6a:c6:30:1e:cd:38:2f:77:ed:5b:34:
                    30:5c:01:4f:ec:9d:a9:eb:af:03:f4:4e:94:d9:6b:
                    0d:6d:38:57:87:cd:4f:33:ea:18:d6:f2:7b:94:04:
                    f4:02:7b:da:1f:83:e9:ba:5d:66:46:2e:39:ba:6b:
                    a9:7a:06:7f:8d:02:98:4b:ac:d1:d4:da:f9:de:49:
                    51:0c:fb:ee:4a:62:ea:ff:ba:f2:b9:40:e6:f7:9b:
                    73:d0:48:2b:cb:d6:0a:49:ef:83:94:41:4c:5a:06:
                    26:54:23:1b:b4:11:a7:f4:b8:4c:86:2c:60:77:3c:
                    fa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:3E:E3:5A:2E:23:05:BE:9A:EE:5D:80:5C:19:DB:F0:D8:D2:D7
            X509v3 Authority Key Identifier:
                keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a3a2f33322d3332203d3e20323733383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:c0:c8:fc:ac:a7:0f:04:3f:cd:25:76:8c:49:b2:09:b3:
         98:e7:e5:c2:75:97:6d:40:63:67:64:d0:91:91:a9:79:8e:c8:
         cd:76:be:6b:7f:a4:57:fc:61:43:e3:46:a1:f5:2b:01:af:ba:
         47:44:0b:53:4c:01:b3:bc:82:53:6c:de:40:ba:d5:7f:5a:24:
         e5:5d:56:e9:36:df:47:a9:da:86:00:dc:7b:75:d7:72:7a:ee:
         8f:c7:2c:e9:72:1e:2e:49:98:4b:47:bc:1a:8f:d6:ef:08:e5:
         70:49:6f:2d:f3:6a:af:c3:67:3f:36:38:c6:62:c8:82:5a:d1:
         36:ec:6a:a9:df:ff:94:7d:20:65:91:ff:98:7f:02:01:a9:c7:
         6f:94:b2:b2:dc:ff:31:21:65:92:2e:4a:cb:b6:4c:8f:19:fe:
         08:6a:75:09:42:00:ef:c1:c6:29:f1:49:59:84:a2:63:ff:12:
         1d:81:22:f1:77:9e:3e:04:4d:40:55:47:40:ad:8b:47:e0:99:
         8e:f2:9e:5a:92:93:a6:62:f8:83:d7:90:e1:97:a4:0f:4d:af:
         3a:a3:d7:5f:b7:4a:1c:0c:7e:e8:a8:d0:f5:fa:d5:83:9e:b2:
         ce:cb:21:3b:db:c4:4a:92:9b:32:ea:05:e7:df:d5:b0:ab:98:
         36:9e:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:26:21 2025 by rpki-client