Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa
File:                     323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa (raw, json)
Hash identifier:          aaVKBXr03U5KF+WgyWq44gSKWq28iYuEyJiWTzAz4FA=
Subject key identifier:   27:EC:33:0C:5C:70:E7:93:A5:05:1C:C0:2C:58:FA:4B:40:83:ED:B7
Certificate issuer:       /CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
Certificate serial:       3EEC6A87D417968E4AA690BA140A118A6B2335EA
Authority key identifier: 65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa
Signing time:             Tue 10 Dec 2024 12:53:42 +0000
ROA not before:           Tue 10 Dec 2024 12:48:42 +0000
ROA not after:            Tue 09 Dec 2025 12:53:42 +0000
asID:                     268372
IP address blocks:        2804:5028:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:6a:87:d4:17:96:8e:4a:a6:90:ba:14:0a:11:8a:6b:23:35:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6
        Validity
            Not Before: Dec 10 12:48:42 2024 GMT
            Not After : Dec  9 12:53:42 2025 GMT
        Subject: CN=27EC330C5C70E793A5051CC02C58FA4B4083EDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:5b:5f:b5:c7:2b:e3:5a:e1:27:40:df:ef:
                    a5:3a:97:60:c6:94:7d:f3:23:0a:d7:37:2f:11:90:
                    f3:8d:3c:2f:a6:95:1b:96:50:f7:37:cb:24:aa:3b:
                    da:92:89:f2:98:e7:08:7f:b1:a3:3c:b7:92:99:98:
                    bb:ec:94:5e:ca:b5:59:cf:9b:85:c8:19:4a:9b:36:
                    ba:02:56:89:18:de:a3:4b:08:29:9d:b6:73:76:e9:
                    e8:2c:b0:79:ae:31:83:bb:4d:2f:c6:ff:fa:8b:32:
                    32:c3:1d:9c:ad:95:12:41:7b:d1:e3:7d:88:dc:b2:
                    82:e3:e7:14:50:77:99:0a:61:2b:70:56:ae:e5:be:
                    00:91:cd:76:48:85:c3:30:59:7c:db:08:e3:6c:f9:
                    06:01:70:ca:d2:4d:b3:2a:7f:60:9d:7e:3d:17:5b:
                    f2:f7:dc:e7:87:c6:b4:c0:ff:68:d7:27:32:6e:93:
                    96:20:b4:21:0d:c5:85:67:6e:0b:91:65:d2:94:17:
                    74:c7:53:1e:a9:6e:e8:60:57:22:fa:62:e6:37:e9:
                    c1:f2:60:bd:60:99:69:7a:23:5c:d8:fd:15:9a:46:
                    39:c7:12:0b:47:e0:ee:c5:1a:8e:6c:8d:0c:5c:bf:
                    40:4e:11:64:ce:05:8a:e3:4d:44:fc:0a:a4:2a:f8:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:33:0C:5C:70:E7:93:A5:05:1C:C0:2C:58:FA:4B:40:83:ED:B7
            X509v3 Authority Key Identifier:
                keyid:65:FC:8F:A4:0D:3E:39:54:41:DF:BE:E4:E9:E6:75:EA:56:5A:B9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65FC8FA40D3E395441DFBEE4E9E675EA565AB9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a383030303a3a2f33342d3334203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5028:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:01:94:a9:ea:22:88:af:5f:6d:ad:5b:b1:68:e3:bf:ef:29:
         f5:53:bb:b4:4d:5c:00:be:75:8a:ed:13:c0:b6:80:2c:af:f1:
         29:8c:4a:eb:17:42:96:ae:e5:29:24:14:63:6b:1e:82:d9:16:
         a4:67:84:48:1b:d0:6d:6a:37:ea:f3:ad:66:d0:da:ff:03:d7:
         ca:32:18:bf:6a:24:6c:eb:13:2a:ce:cd:f3:03:e5:4a:3e:3e:
         8a:fa:2f:4b:79:ad:08:f4:2a:77:74:37:33:21:8d:06:6b:82:
         b1:6e:5e:b4:49:b1:1a:b5:a8:55:39:a3:b3:b3:42:0f:60:22:
         16:3a:cf:14:91:b1:2d:13:e1:ca:8d:19:a3:18:4e:80:98:20:
         90:1c:78:b4:95:8f:4b:7d:df:83:ee:7b:c3:85:83:b9:06:60:
         e9:c5:59:d4:6f:fb:58:81:05:47:f5:6f:1c:96:f8:96:e8:b3:
         02:51:21:10:f1:ad:46:96:09:68:0c:a4:c3:d9:5f:43:57:cc:
         d0:83:64:cf:48:88:04:1b:c8:1d:15:58:c5:98:b1:ee:59:2e:
         d3:ba:0b:79:64:27:ef:82:0c:9f:4a:c7:78:9e:e5:06:92:a9:
         21:d9:18:5a:2f:7e:ea:fd:60:e5:4c:b6:48:7b:99:a1:c5:9d:
         6f:b1:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:18 2025 by rpki-client