Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          TXwwnylPcr8PUwdoqlQuEEB6pHEkevLCxaBS9KWKXn0=
Subject key identifier:   F9:70:1C:36:59:7C:C8:04:6D:B4:E2:C3:A0:A8:E3:0B:1B:A4:C1:A6
Certificate issuer:       /CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Certificate serial:       1DB52FF225B605B5F8C169546A414C5D5C4A2975
Authority key identifier: FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 20 Mar 2025 15:06:04 +0000
ROA not before:           Thu 20 Mar 2025 15:01:04 +0000
ROA not after:            Thu 19 Mar 2026 15:06:04 +0000
asID:                     274647
IP address blocks:        2804:9188::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b5:2f:f2:25:b6:05:b5:f8:c1:69:54:6a:41:4c:5d:5c:4a:29:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE39B00057FECCE0AC6B48381399AE27C177533F
        Validity
            Not Before: Mar 20 15:01:04 2025 GMT
            Not After : Mar 19 15:06:04 2026 GMT
        Subject: CN=F9701C36597CC8046DB4E2C3A0A8E30B1BA4C1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:3f:d6:cf:e0:b9:03:1b:d6:d7:12:70:2e:
                    76:64:86:52:30:73:cd:ed:dd:bb:a9:69:ee:0a:af:
                    d6:fb:b7:81:f7:cb:70:98:92:72:51:0b:c9:44:04:
                    80:7b:2e:97:63:9b:e8:36:78:0d:e8:90:87:2b:d3:
                    8c:84:89:54:ef:fe:87:94:b8:ce:b1:1e:64:25:23:
                    09:04:2b:a4:58:47:8c:ac:b5:5c:bd:58:01:a8:67:
                    0b:88:e5:17:92:a3:c0:c6:1a:05:a0:4c:c1:50:d7:
                    2b:c6:d8:41:7f:01:0e:e4:30:b3:82:6d:cf:29:8f:
                    09:b6:ec:e0:1b:21:79:e9:c7:4a:c7:a5:92:68:e4:
                    a7:0d:69:fd:1b:2f:0e:d0:8f:35:bb:f2:2d:da:cb:
                    98:90:17:06:7a:9d:24:9e:32:ae:1a:eb:a1:2e:6f:
                    4d:f9:6d:9d:cf:2d:94:97:3a:71:c9:80:22:cf:48:
                    87:ed:7f:5a:06:30:1c:cc:3e:10:5b:12:19:38:9b:
                    ff:7b:25:5c:e5:27:8f:16:53:3d:39:a7:da:ea:90:
                    98:70:62:50:98:f5:cb:e6:33:0d:b2:87:cb:47:2f:
                    1e:66:83:0e:b6:1e:87:12:06:9e:62:8a:27:01:5f:
                    a2:79:1a:03:d3:bd:cf:61:ed:a3:90:31:a4:c8:cd:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:70:1C:36:59:7C:C8:04:6D:B4:E2:C3:A0:A8:E3:0B:1B:A4:C1:A6
            X509v3 Authority Key Identifier:
                keyid:FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:32:73:83:92:d6:0d:24:0a:88:4a:be:bc:4a:64:78:a9:
         21:70:96:49:92:0c:74:1c:58:c5:68:e8:2a:a8:a9:65:22:3d:
         53:db:fb:91:fd:38:b5:e7:17:30:c3:1d:e2:50:39:f0:ff:37:
         c9:33:41:0d:06:35:76:5a:df:da:97:7e:3c:e3:b4:06:15:b3:
         dc:a0:65:1f:6a:39:23:e1:21:54:8c:bd:c3:3d:85:5e:f1:75:
         3c:91:01:53:40:e6:16:b3:b5:b2:dd:c3:f6:dd:40:80:4b:9d:
         c3:c3:16:15:17:a6:7d:71:07:fc:8c:4f:e7:93:65:c8:05:49:
         1f:c0:46:63:ab:e6:73:9b:e5:4a:79:26:53:8e:c1:22:cd:c2:
         a2:f6:d9:3b:4a:df:81:12:e0:81:25:2a:e2:ad:73:83:64:da:
         f7:9c:89:e8:87:2d:72:88:92:87:fc:d2:d0:4f:57:b5:b0:e8:
         71:85:38:04:84:c2:98:b7:84:4f:5c:32:0c:d3:3a:3a:e9:b6:
         c6:ac:1f:88:c5:a7:22:aa:09:85:76:57:81:04:1e:a0:f8:d2:
         df:d4:74:e8:62:53:a2:74:40:41:8e:c9:84:db:b9:2e:96:b6:
         43:c1:76:bc:21:c1:84:8d:1c:d8:1d:6a:8e:32:f6:0d:37:ac:
         b0:96:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:45:23 2025 by rpki-client