Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa
File:                     323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (raw, json)
Hash identifier:          RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=
Subject key identifier:   FD:49:52:7D:F3:3B:FA:E1:11:8A:62:75:CF:37:72:F2:A9:69:F1:98
Certificate issuer:       /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
Certificate serial:       4E7479FB8BCF7F41BED036321603C914EFCA808A
Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa
Signing time:             Thu 06 Mar 2025 15:31:19 +0000
ROA not before:           Thu 06 Mar 2025 15:26:19 +0000
ROA not after:            Thu 05 Mar 2026 15:31:19 +0000
asID:                     262841
IP address blocks:        2804:fb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl
                          rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:79:fb:8b:cf:7f:41:be:d0:36:32:16:03:c9:14:ef:ca:80:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
        Validity
            Not Before: Mar  6 15:26:19 2025 GMT
            Not After : Mar  5 15:31:19 2026 GMT
        Subject: CN=FD49527DF33BFAE1118A6275CF3772F2A969F198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:f4:75:66:95:78:2c:2c:2a:59:d0:84:e5:
                    b8:2c:9a:5f:81:3c:39:63:0c:1d:5f:c5:46:ad:fc:
                    8c:59:d8:e5:f5:0e:9a:b2:5a:9e:83:b9:42:af:16:
                    a3:9e:dd:c6:c7:84:23:1a:37:6e:4f:3a:c7:ce:f6:
                    06:fa:68:06:78:60:ac:6f:0e:94:b0:1b:ce:56:e2:
                    40:c3:e6:71:8d:85:02:f8:7b:55:71:61:3d:97:31:
                    0f:a2:92:de:b7:6d:e3:c7:9c:7d:2a:4d:b2:d5:9b:
                    62:c0:b6:15:ff:da:1a:45:03:6b:ac:5d:9c:92:58:
                    68:30:16:59:59:3f:7b:e2:b0:f8:3f:c6:ea:8f:67:
                    db:07:69:5d:9a:85:ee:b2:93:92:d5:b4:e9:76:06:
                    42:62:46:b3:63:4b:84:31:50:3d:01:5a:e5:f3:2b:
                    2f:f6:c8:c3:b4:a6:dd:2b:aa:78:ea:6b:f1:4b:af:
                    dc:b4:6c:47:a4:77:6b:03:a6:d0:a4:47:4f:1b:cf:
                    60:5d:a3:3d:33:6b:90:f4:c1:a9:30:dd:80:4f:e4:
                    ff:1e:6f:8d:17:90:aa:61:d6:7a:b3:e4:4d:b3:da:
                    f2:ac:42:39:05:ce:98:e7:1b:d7:13:1c:96:a8:b7:
                    42:f3:38:14:07:4e:cc:23:11:82:1d:d6:8e:7a:29:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:52:7D:F3:3B:FA:E1:11:8A:62:75:CF:37:72:F2:A9:69:F1:98
            X509v3 Authority Key Identifier:
                keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/323830343a6662303a3a2f33322d3332203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:4d:7c:cc:ad:09:80:13:2d:15:04:4a:98:eb:9e:48:5a:
         8c:d7:31:8b:78:52:50:2a:33:9a:6e:9b:c1:6e:a0:95:0c:56:
         80:8c:a7:28:79:ef:2a:4d:69:a0:b0:57:ac:ab:ba:2c:a1:43:
         00:19:c5:0b:00:7f:8f:dc:ce:3f:4b:43:38:a2:2a:fc:c9:26:
         67:b2:d5:25:09:eb:d0:27:07:68:a3:c3:c4:21:af:f4:61:f5:
         e1:58:b0:e3:04:2b:84:fe:bf:35:50:24:f1:34:ac:ae:eb:2c:
         7a:7f:e0:52:2e:8a:e8:80:7c:99:b1:da:f0:38:62:a3:7b:8a:
         a0:ea:d7:a1:53:c6:24:3d:df:6b:9f:af:93:d5:09:3d:ff:12:
         7b:a5:37:7a:58:5a:83:34:d8:2c:f5:3e:34:2b:a1:45:7b:5b:
         53:87:15:ac:dd:c1:f6:84:18:f0:d8:b6:ed:85:5e:5d:2f:b5:
         54:61:98:f7:bd:8b:ef:79:20:4c:78:9f:67:b1:d1:96:9c:20:
         8c:4d:19:be:47:0e:ea:d3:ca:46:17:a0:de:2c:21:06:d3:35:
         0d:d7:13:e0:aa:08:ac:df:48:01:1d:a3:f2:10:1b:ab:22:c2:
         7c:b0:e9:14:03:62:19:05:42:0e:09:44:81:da:01:78:8d:62:
         d1:79:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:51:44 2025 by rpki-client