Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
File:                     323830343a323031303a3a2f33322d3438203d3e20323634343632.roa (raw, json)
Hash identifier:          3KrJZQfBUwpgFdiEIqUNFomxGKMZBEkKZAyvgM9CtZY=
Subject key identifier:   7F:F6:91:E4:7D:C7:5F:9B:B5:7C:42:B0:65:03:5F:CA:18:E0:92:AB
Certificate issuer:       /CN=B5568D235613C8FBA63E48026996810FAB5904D3
Certificate serial:       31E34D6D8EB5D3EA6C9E7A18F322E8DAF85219AF
Authority key identifier: B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
Signing time:             Wed 12 Mar 2025 20:35:37 +0000
ROA not before:           Wed 12 Mar 2025 20:30:37 +0000
ROA not after:            Wed 11 Mar 2026 20:35:37 +0000
asID:                     264462
IP address blocks:        2804:2010::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl
                          rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e3:4d:6d:8e:b5:d3:ea:6c:9e:7a:18:f3:22:e8:da:f8:52:19:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5568D235613C8FBA63E48026996810FAB5904D3
        Validity
            Not Before: Mar 12 20:30:37 2025 GMT
            Not After : Mar 11 20:35:37 2026 GMT
        Subject: CN=7FF691E47DC75F9BB57C42B065035FCA18E092AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:a2:41:cc:a9:37:cb:3d:21:07:9e:21:35:
                    4c:8b:64:80:33:b1:0c:19:17:1b:8d:aa:4b:f2:4f:
                    e6:3c:66:aa:6f:4e:99:67:75:30:84:68:aa:8f:45:
                    38:49:ad:f0:7d:db:19:2d:ce:f7:4c:10:1f:ee:67:
                    76:90:5f:90:36:5c:09:36:e7:b0:41:3a:6c:c1:f1:
                    d9:02:35:eb:78:23:a8:c7:a4:ed:3d:b4:7d:41:80:
                    cf:e2:da:1a:90:60:59:bf:5f:6f:8d:5b:06:c3:b6:
                    3a:c7:f9:95:10:7f:01:5b:23:15:15:50:99:7b:24:
                    32:3c:83:a6:84:45:b2:c4:d1:74:1e:ad:3a:d8:f7:
                    70:e5:c3:7a:73:33:bd:d7:89:b6:3c:0c:bc:3f:b1:
                    6e:1a:21:92:84:7c:2f:6a:1f:42:a0:d4:61:bd:54:
                    f2:70:4b:35:79:4f:51:1e:56:ef:20:3e:67:21:6d:
                    98:1a:c4:81:a8:0e:09:db:29:05:98:de:e7:67:ae:
                    79:af:98:85:6e:6c:ea:7e:54:53:b9:1b:e9:9e:ec:
                    2a:a1:d9:93:43:96:ca:72:6a:38:ab:de:d5:ee:66:
                    73:2a:3b:99:cc:e2:3c:52:cd:1f:dd:49:2c:6a:87:
                    b7:1f:a2:b8:87:1d:8c:c9:96:3e:28:14:a6:90:43:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F6:91:E4:7D:C7:5F:9B:B5:7C:42:B0:65:03:5F:CA:18:E0:92:AB
            X509v3 Authority Key Identifier:
                keyid:B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2010::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:be:64:2b:70:d2:b1:31:71:84:4a:2e:ad:4a:cb:6f:d9:
         59:71:a5:bd:42:68:a1:db:31:b5:ab:31:ef:5b:09:18:2a:cf:
         9f:bc:ea:cc:04:d6:ac:20:6b:a1:c7:64:d5:16:10:ac:15:ef:
         45:ff:d3:98:13:55:6d:5c:7c:22:d7:3b:cc:3d:ce:99:77:d9:
         f1:b8:aa:85:37:cf:95:39:26:c2:1f:09:8d:5b:84:6c:6f:d7:
         29:54:ab:96:33:60:0d:38:58:57:8b:80:40:7d:a9:8c:e0:4b:
         97:82:cc:84:1e:01:7a:d5:ba:49:a4:c8:89:c9:f5:e9:65:df:
         6a:b7:aa:c3:40:ec:ea:58:32:3b:97:f7:7b:cd:9f:84:d4:00:
         f9:c5:4c:34:9b:d3:c3:db:73:20:b4:b6:a0:c5:17:b8:d0:33:
         ef:55:fd:9a:4e:17:28:f4:7a:1a:24:a8:6d:79:1a:91:e9:24:
         d3:86:da:ff:75:9d:c0:2f:8d:1d:70:ef:08:fe:63:16:6d:ea:
         8a:76:09:a6:4c:10:2d:e5:a5:50:63:26:6d:05:80:5e:1b:da:
         4e:08:c8:04:3d:20:76:76:ab:53:3d:f0:3e:14:70:24:e5:7b:
         6d:ef:6f:df:1f:61:9b:01:bc:89:0d:26:81:2f:a0:d0:72:03:
         57:18:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:11:09 2025 by rpki-client