Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d3438203d3e20323638343932.roa
File:                     323830343a353231303a3a2f33322d3438203d3e20323638343932.roa (raw, json)
Hash identifier:          c0xXPpH7tv9ymx9p1AGf0ADIrlEDjM4ZXJHFQ60I+ps=
Subject key identifier:   F0:2D:B0:80:0F:34:90:0D:D9:81:97:90:8B:1D:26:8F:6A:3D:62:0F
Certificate issuer:       /CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
Certificate serial:       3D833B2B72AE503CCE874E7C605594359361E753
Authority key identifier: 86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d3438203d3e20323638343932.roa
Signing time:             Thu 04 Jul 2024 23:32:52 +0000
ROA not before:           Thu 04 Jul 2024 23:27:52 +0000
ROA not after:            Thu 03 Jul 2025 23:32:52 +0000
asID:                     268492
IP address blocks:        2804:5210::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:83:3b:2b:72:ae:50:3c:ce:87:4e:7c:60:55:94:35:93:61:e7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
        Validity
            Not Before: Jul  4 23:27:52 2024 GMT
            Not After : Jul  3 23:32:52 2025 GMT
        Subject: CN=F02DB0800F34900DD98197908B1D268F6A3D620F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:6b:1b:b1:c2:64:a9:b5:e0:4d:ab:13:6e:
                    d5:6a:0d:5b:1f:61:f0:90:8e:0f:a9:e9:1d:e0:6b:
                    0a:73:6c:78:94:2a:c6:04:3e:85:f9:6e:51:20:be:
                    5d:0e:41:6c:c5:8e:a7:5f:d0:39:3b:ac:97:c2:b5:
                    a5:10:3f:cb:de:c1:b9:76:12:31:42:b1:32:93:44:
                    40:35:e7:52:27:10:f4:bb:39:33:76:b8:bf:81:cb:
                    61:04:2b:a0:9d:34:3d:98:ad:5a:9b:a3:95:a8:0f:
                    00:ea:e3:98:65:ea:43:c9:22:35:dd:88:80:a3:5d:
                    f0:62:ed:13:50:2e:56:5c:d7:80:db:2c:68:57:c4:
                    f2:78:69:1d:2f:7b:02:77:ba:26:d2:c9:81:87:02:
                    90:ed:36:f9:9f:58:25:e2:24:7e:a6:89:38:39:a1:
                    f6:6a:8e:b0:3b:3d:9e:62:2b:81:6c:ac:21:72:b1:
                    3e:39:72:9d:4f:65:12:c9:6c:ac:5d:ce:8f:1e:6d:
                    05:8c:4d:15:c8:cf:81:06:98:9a:f5:57:44:e6:0b:
                    8a:d5:ae:16:b1:7f:65:dc:6b:51:0d:1c:ad:e3:b7:
                    6a:cf:45:49:bc:75:02:23:bb:5d:cd:bd:63:a3:74:
                    3b:c2:34:dd:31:d3:a3:18:3e:22:38:73:74:61:93:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:B0:80:0F:34:90:0D:D9:81:97:90:8B:1D:26:8F:6A:3D:62:0F
            X509v3 Authority Key Identifier:
                keyid:86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d3438203d3e20323638343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5210::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:14:1d:fb:88:fd:56:bf:89:34:f5:85:e1:45:de:be:98:
         a5:34:2a:2c:2c:86:55:b0:03:64:ea:61:2e:19:fe:8b:fe:62:
         2c:c7:41:4b:f4:8a:0b:a3:5a:48:63:c3:44:69:ec:28:8c:51:
         6f:67:af:4c:c0:a9:28:ac:8f:c2:4f:63:0e:6f:79:53:6f:fa:
         44:36:6f:e9:c3:03:fd:4e:19:61:2b:16:c1:28:9c:fd:d9:fb:
         c6:0f:f2:9d:2b:92:4b:fe:d0:37:16:56:4c:ac:75:9e:63:10:
         c4:fd:00:f0:3e:a1:ab:74:7d:06:a1:9f:31:94:3b:4c:95:eb:
         58:b1:7a:0c:fe:43:10:48:12:ac:e5:06:f0:24:79:56:fb:01:
         33:08:a3:12:45:fa:e2:3d:6f:cf:40:34:4a:78:5a:c8:2e:a8:
         7d:a0:43:59:ce:63:27:2a:03:e7:17:b8:59:e9:da:63:19:69:
         c6:94:a0:77:b1:d9:81:40:54:43:c3:dc:e2:13:1f:a7:08:09:
         be:db:d1:d9:28:bc:d9:c3:d3:ae:a3:32:72:88:14:70:21:e2:
         19:15:ff:6f:1d:33:1d:89:48:d7:00:de:62:d8:03:b3:02:38:
         65:17:81:bc:bd:f6:1c:ea:c2:01:2b:ea:c7:31:41:3d:65:dc:
         02:c9:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:32 2025 by rpki-client