Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa
File:                     323830343a343936383a3a2f33322d3332203d3e20323632363235.roa (raw, json)
Hash identifier:          OPqeYKTDzD/LIqN55Du7Om4OPaOMwmG0KZjPumQjteg=
Subject key identifier:   B9:12:42:BF:AB:31:97:EA:FF:FB:2C:D9:48:22:0C:EE:0B:ED:62:2E
Certificate issuer:       /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
Certificate serial:       6376AFAEE787860CCFA294CD1BDAA312DCA307E4
Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa
Signing time:             Mon 20 Jan 2025 17:19:53 +0000
ROA not before:           Mon 20 Jan 2025 17:14:53 +0000
ROA not after:            Mon 19 Jan 2026 17:19:53 +0000
asID:                     262625
IP address blocks:        2804:4968::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl
                          rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:af:ae:e7:87:86:0c:cf:a2:94:cd:1b:da:a3:12:dc:a3:07:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
        Validity
            Not Before: Jan 20 17:14:53 2025 GMT
            Not After : Jan 19 17:19:53 2026 GMT
        Subject: CN=B91242BFAB3197EAFFFB2CD948220CEE0BED622E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:a5:dc:00:a7:d4:ec:dd:1b:2f:b3:5b:ce:
                    a6:21:8b:ff:19:64:b7:63:96:61:5c:00:48:b5:d5:
                    2f:6a:73:21:86:9b:9b:94:b8:8d:96:90:bb:b9:1b:
                    6b:9c:3f:05:28:fc:19:35:dd:df:22:60:72:f8:b4:
                    8c:f4:b2:03:d7:26:e0:58:a5:db:3c:27:56:ff:0a:
                    14:14:ba:df:f9:16:06:02:da:59:f4:1f:2d:62:91:
                    a6:0b:c9:be:54:f9:ad:6c:c6:60:14:2d:a2:f1:1e:
                    e9:5d:69:b9:b7:c3:67:61:fc:2a:a7:08:ab:89:98:
                    58:a4:07:5b:87:95:0a:e8:45:05:52:4d:66:46:fa:
                    cd:5c:84:fd:0f:83:28:3b:0b:63:da:2a:0d:4b:0e:
                    6e:18:7d:3b:d2:c9:fe:47:19:5d:75:be:80:69:5e:
                    04:b0:14:c2:3d:55:df:de:a1:5c:db:e3:80:57:ed:
                    ca:2c:27:0f:c8:d3:f6:44:89:b5:f4:ef:6a:fa:63:
                    d7:83:17:71:07:9c:99:9f:d3:87:c2:42:30:f8:36:
                    a6:17:0c:e6:a6:e0:bb:7d:20:00:eb:37:68:9f:e3:
                    1f:78:a0:5b:70:94:65:d8:b3:e4:a7:02:71:df:ba:
                    f5:31:6e:f4:1c:2a:78:87:f8:35:5a:c7:48:ce:68:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:12:42:BF:AB:31:97:EA:FF:FB:2C:D9:48:22:0C:EE:0B:ED:62:2E
            X509v3 Authority Key Identifier:
                keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33322d3332203d3e20323632363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4968::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:f9:68:f6:a9:74:7f:78:60:d1:35:7e:c4:c0:35:37:b1:
         a8:58:f5:02:60:44:71:9b:ea:d3:d3:c6:9b:44:e6:ce:cc:6d:
         fc:3e:89:78:3d:91:98:dc:1e:e0:a6:32:56:4b:f1:03:d7:4f:
         33:c6:97:ef:03:71:17:bb:37:40:2d:a9:a1:b6:74:5d:ff:3b:
         4a:40:1a:c4:36:fb:ce:b0:7d:a7:ac:e1:d8:b8:dc:95:6d:af:
         74:29:12:4a:34:d6:e9:15:89:65:ee:52:83:56:08:f3:db:fc:
         41:36:3c:89:d3:b0:db:7b:ae:3c:f9:14:2d:42:98:0c:e0:33:
         12:cd:01:98:c0:c1:92:20:af:7e:d0:fb:8f:cd:93:e6:a8:97:
         30:bc:c9:47:11:b7:ee:af:00:b1:9b:b9:76:a7:80:c3:a3:d8:
         f6:04:62:76:a1:17:da:f5:66:6c:28:4e:04:47:5c:de:67:dc:
         29:ea:89:f4:68:69:7b:8b:6d:8e:31:aa:79:3b:a6:26:39:f7:
         13:c1:bc:17:6e:a3:30:25:9b:b9:de:88:4f:3f:96:54:5c:81:
         9e:85:96:66:1d:28:e3:aa:58:1f:64:8f:4e:c8:03:ed:6b:b3:
         b9:7f:b2:90:1c:2f:f8:c5:f0:ce:9f:ab:56:a7:e8:0a:31:d1:
         17:b0:8b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:34 2025 by rpki-client