Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          wWar2zLFazdvxtcXttabAzwTbUhLghXXyWV35gTV4AU=
Subject key identifier:   79:FF:E8:A4:EE:05:E2:4A:97:C2:23:67:D0:AE:18:D1:F9:07:5F:AD
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       17B23A163DFC709AFAC3A3754C60F7351DCBE89E
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     270765
IP address blocks:        2804:7114:165::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:3a:16:3d:fc:70:9a:fa:c3:a3:75:4c:60:f7:35:1d:cb:e8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:d4:cd:1b:d1:f1:76:4d:d6:aa:48:f3:e6:
                    a0:a7:cb:4a:3f:fd:7e:76:94:9a:37:f0:08:32:a5:
                    e6:96:15:9e:f7:05:d7:2e:9a:6e:9f:eb:48:cd:c6:
                    90:2a:d4:75:8e:9a:92:0a:38:05:2b:32:88:c1:4f:
                    8a:e0:44:69:df:9a:96:4e:3f:fe:64:d7:e7:f9:aa:
                    9a:91:05:d6:ae:e5:00:0a:0d:a8:61:ec:b6:df:97:
                    d2:47:db:9b:ca:79:33:44:92:bd:d4:e8:d8:33:ef:
                    6c:e1:9b:09:b0:d7:44:2c:cd:df:b8:b0:be:f1:af:
                    25:b6:4d:66:b0:ec:3e:98:0e:47:83:54:de:12:d7:
                    79:ca:2b:a0:f1:e6:be:1c:ed:c8:2c:60:4b:ad:2e:
                    ba:f2:a7:00:0c:e2:7a:a9:b9:ee:fa:53:e4:93:cb:
                    08:e7:97:85:a2:ad:6f:73:a6:7a:ea:93:88:a5:a4:
                    0a:59:0a:fd:de:f5:9a:88:6e:9f:69:da:a5:f7:0d:
                    78:5b:e0:0a:49:21:9e:a5:04:03:bb:c7:62:11:fd:
                    9d:74:ae:e3:0d:bb:82:d0:1c:94:b8:ea:59:ab:9e:
                    eb:38:28:61:6c:16:3c:a6:32:5b:e4:49:c2:da:4e:
                    27:a9:5b:63:9f:77:47:c7:03:d4:62:f0:59:73:70:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FF:E8:A4:EE:05:E2:4A:97:C2:23:67:D0:AE:18:D1:F9:07:5F:AD
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:165::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:7e:bc:c9:11:d8:9e:e6:0f:7c:ca:af:45:aa:39:df:c5:
         ba:e3:a8:3d:b0:e2:fe:00:b3:17:65:89:da:a0:60:15:df:18:
         ed:00:f4:0b:14:85:fc:3b:fb:3f:59:3f:82:a3:e7:8d:7c:f6:
         4b:f0:d2:e5:89:88:7a:c7:d8:95:15:a0:6c:e3:96:d2:6f:b0:
         c7:30:55:6f:6a:92:6e:ea:fb:5d:15:71:db:7e:9d:f3:2b:21:
         65:45:bd:6c:ea:b6:33:36:b3:73:d4:9b:c6:80:1b:dd:82:7e:
         7f:8d:56:79:9c:a2:e5:2f:ed:2a:10:12:37:b0:7c:a8:21:89:
         60:75:aa:d8:eb:f1:e7:87:24:b1:56:5b:b8:bc:74:06:94:c2:
         a3:c9:33:bf:f7:1e:39:b2:6a:9d:ce:cf:e4:88:dc:ec:a6:78:
         63:0a:89:22:03:b8:d0:33:24:9c:fd:16:7f:c5:3d:38:04:22:
         0d:b3:cd:cb:28:0b:0c:df:60:cb:f2:74:11:6c:69:a6:4a:0a:
         16:b1:3d:74:c9:41:ef:0f:d4:3a:c5:e1:38:a2:34:53:78:f4:
         79:e8:26:64:aa:4c:0a:83:56:23:71:ae:30:62:46:3e:d6:f2:
         11:2a:df:df:e0:f7:c1:5a:6b:d2:bc:f7:db:ed:40:1d:74:85:
         15:b4:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:47:33 2025 by rpki-client