Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
File:                     323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (raw, json)
Hash identifier:          e5+lboSeP7wRX2S+7kV/NMg3fIZ77X3rsllnhtzm6x0=
Subject key identifier:   17:C1:78:9B:A2:0E:7B:13:BE:BC:3F:71:C1:F5:1D:85:F9:9D:18:86
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       097D6AB7079C084F4F8695FD86A1AB22DE99920F
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     270765
IP address blocks:        2804:7114::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7d:6a:b7:07:9c:08:4f:4f:86:95:fd:86:a1:ab:22:de:99:92:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:a2:35:40:fb:15:46:f4:80:63:2f:f9:74:
                    79:06:65:29:5e:f3:e3:e7:cc:c6:41:70:eb:4f:5e:
                    cc:63:b3:c3:04:d9:82:3b:08:53:2a:f2:56:c2:f0:
                    ec:83:0d:55:56:66:ed:f9:2a:33:a4:cc:2d:6d:74:
                    05:a4:97:95:68:72:0d:9d:0e:4b:10:92:0c:15:fb:
                    c7:b1:4a:24:27:14:06:30:bd:6a:59:25:9c:fc:fc:
                    25:4b:ab:f8:25:f7:47:c4:d9:0b:76:7f:69:60:42:
                    d3:63:37:f9:ca:5c:8d:c0:76:d2:56:42:51:52:b6:
                    a5:aa:33:76:c0:86:b4:b8:5e:43:1d:66:99:20:e2:
                    25:02:fd:48:98:a2:2c:a7:df:37:bf:1e:eb:d9:43:
                    a8:2b:8f:e6:62:75:90:7f:7f:3c:b5:18:62:33:12:
                    14:c8:e4:c5:99:ba:fc:ce:a6:e8:80:1e:c0:ae:b5:
                    45:d6:e7:96:a1:d1:68:1a:c8:dc:28:c0:22:6e:74:
                    aa:ba:76:46:8a:b1:b7:70:5b:de:0b:8e:e9:8e:33:
                    b5:a1:80:fc:a6:ed:34:cc:c6:f7:93:79:50:05:fb:
                    1c:e8:f0:de:1d:c7:74:aa:11:ce:ca:50:92:c1:c6:
                    d2:de:91:a6:5a:85:64:ca:cb:3b:73:33:79:ef:89:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:78:9B:A2:0E:7B:13:BE:BC:3F:71:C1:F5:1D:85:F9:9D:18:86
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3a2f33322d3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:46:b0:d7:23:53:35:88:d9:0d:ca:4c:cf:73:de:3f:50:
         77:c8:36:ba:de:0a:14:b9:5c:38:97:06:0f:a2:3d:3f:15:7e:
         0e:a0:a0:d5:49:dd:ba:3d:c5:56:0c:2a:93:c4:f4:e4:d1:cf:
         19:e9:d6:35:2f:34:d6:66:5d:35:12:cd:30:a4:d0:51:ca:bd:
         a7:7d:ac:ad:63:ef:23:7b:1c:88:1f:92:98:56:de:51:8f:00:
         bd:09:68:1f:7d:de:4c:70:e7:20:d9:c8:6b:8a:d2:60:1a:79:
         7f:fc:02:3a:57:2f:83:4f:73:3b:fc:6c:46:03:3f:ef:84:6b:
         75:16:53:00:23:31:bc:f3:15:b2:38:22:63:f6:de:13:6d:d5:
         7d:ba:48:06:01:92:15:76:30:9d:72:ed:7c:77:73:4c:be:85:
         01:cf:59:1a:dc:dd:43:bd:49:31:6a:0a:14:56:0c:c2:34:9a:
         0a:19:1f:71:ad:c4:26:10:cb:e0:38:1e:27:58:de:ab:f1:84:
         5e:57:74:74:83:ff:84:d4:65:46:5f:51:df:6a:a3:1b:a5:3b:
         f7:4f:28:e6:ca:b1:81:e8:b0:96:e0:2c:9e:51:12:0c:aa:4c:
         e6:81:c9:8b:02:3f:1f:de:61:96:8a:40:d8:03:cc:43:1b:8d:
         49:b6:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:47 2025 by rpki-client