Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33342d3334203d3e203631373337.roa
File:                     323830343a316239633a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier:          991HFHrilRQqpPMGukZeHLOP7Iyozqj72Yv+LVpyA5c=
Subject key identifier:   70:E0:20:98:0D:B6:C2:E5:25:77:9F:09:19:65:D1:64:BB:8E:13:50
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       66939C7311E122942EA0AC57CFD5AFEB61810C9A
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33342d3334203d3e203631373337.roa
Signing time:             Fri 14 Feb 2025 00:08:56 +0000
ROA not before:           Fri 14 Feb 2025 00:03:56 +0000
ROA not after:            Fri 13 Feb 2026 00:08:56 +0000
asID:                     61737
IP address blocks:        2804:1b9c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 21:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:9c:73:11:e1:22:94:2e:a0:ac:57:cf:d5:af:eb:61:81:0c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Feb 14 00:03:56 2025 GMT
            Not After : Feb 13 00:08:56 2026 GMT
        Subject: CN=70E020980DB6C2E525779F091965D164BB8E1350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:79:1f:cc:d2:78:7b:95:da:62:5c:c2:03:
                    cf:8c:17:82:cb:60:67:50:cb:f4:03:8c:f8:2d:bb:
                    7e:d3:ec:27:22:3f:e9:2d:10:83:87:f6:10:70:f4:
                    b5:40:80:0c:7b:46:dc:55:f1:92:9a:65:de:9f:5c:
                    31:fb:b4:68:e1:be:e7:8a:7f:44:ca:10:02:83:90:
                    f3:96:5a:d7:f0:e5:8e:4c:2c:e4:c0:c2:6c:f2:39:
                    f4:9b:00:71:ec:13:a8:80:b5:db:ea:b2:6f:01:03:
                    bc:af:ed:59:4d:a5:c9:66:53:d4:8a:a9:ef:c1:a8:
                    b8:cc:2a:c3:cf:2b:44:66:db:df:8a:7f:80:2a:56:
                    24:09:11:20:60:56:6e:49:4b:de:34:47:4c:3a:d6:
                    dd:ea:5e:46:6a:22:fb:27:e7:9c:d1:7f:de:b3:ac:
                    48:91:9e:2c:03:02:cf:79:7c:00:c7:5f:15:23:5f:
                    d1:0d:b8:27:b7:0b:ed:81:bc:88:eb:d3:c5:af:3e:
                    b5:f8:11:1a:8a:82:9c:94:db:a1:0c:de:35:5c:dc:
                    b7:e0:b3:04:8c:1c:e3:bf:c7:5f:2e:6b:b4:81:f5:
                    48:92:c3:d0:7a:20:97:92:87:d7:4c:5e:2b:f8:c8:
                    15:d4:3a:da:82:16:b7:56:1c:ee:0b:b5:34:6e:d2:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:20:98:0D:B6:C2:E5:25:77:9F:09:19:65:D1:64:BB:8E:13:50
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a3a2f33342d3334203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:4c:cb:d6:9c:4d:14:59:77:cc:72:72:b1:76:de:a5:5e:
         32:3d:cd:51:e6:1c:6c:63:30:f7:ff:76:1d:22:a8:78:4b:d5:
         48:92:52:44:d7:06:a0:86:cf:90:e4:3c:fb:4c:de:6c:98:18:
         c4:07:f0:64:f4:45:18:67:d2:1e:b9:8d:6d:f4:73:1c:84:c9:
         6a:eb:56:b3:3c:5b:5f:8b:ea:30:d8:24:43:41:2a:2b:6a:8e:
         00:47:b6:0c:3d:52:31:20:f8:4c:64:5b:84:cf:5f:1c:90:91:
         a0:05:04:9f:7c:eb:46:e5:c1:1c:95:ec:c0:8c:0f:5a:18:bf:
         e7:29:73:2b:59:c9:de:19:b9:36:2a:56:ea:70:f7:11:97:fc:
         7f:65:71:c5:16:dc:c6:5c:13:58:9a:0a:54:4e:59:3a:25:95:
         2d:5b:f5:72:6b:0a:f1:23:18:c7:7a:22:fc:2b:c8:d3:e0:a9:
         1c:d9:ad:e7:aa:ad:e5:70:93:6e:7f:50:28:6f:6b:f2:d9:cb:
         22:5c:2e:f6:11:9d:d8:0b:e6:49:ab:06:85:3f:bb:77:92:cb:
         23:b5:c9:47:09:f2:17:c9:17:41:78:a8:3e:b3:e7:9c:8d:0f:
         d4:02:89:f7:dd:1b:34:0d:c9:76:25:54:14:d3:52:ea:0e:14:
         b4:46:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:24:07 2025 by rpki-client