Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa
File:                     323830343a313435633a3a2f33322d3438203d3e20323633333237.roa (raw, json)
Hash identifier:          gajIre2hwXAqeZ5WLI6BLvwymqwOBTKEVz+ZVlcAjz0=
Subject key identifier:   94:1F:C7:AF:9A:EF:7C:B5:8B:26:89:6C:1E:09:C4:35:37:80:68:C2
Certificate issuer:       /CN=F19C1FB4A25EC216E014334C6D48E70F45F630D6
Certificate serial:       303AD36BF5A4DD1590058EA995E83BDECB35BA73
Authority key identifier: F1:9C:1F:B4:A2:5E:C2:16:E0:14:33:4C:6D:48:E7:0F:45:F6:30:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa
Signing time:             Mon 24 Feb 2025 14:32:58 +0000
ROA not before:           Mon 24 Feb 2025 14:27:58 +0000
ROA not after:            Mon 23 Feb 2026 14:32:58 +0000
asID:                     263327
IP address blocks:        2804:145c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.crl
                          rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:d3:6b:f5:a4:dd:15:90:05:8e:a9:95:e8:3b:de:cb:35:ba:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19C1FB4A25EC216E014334C6D48E70F45F630D6
        Validity
            Not Before: Feb 24 14:27:58 2025 GMT
            Not After : Feb 23 14:32:58 2026 GMT
        Subject: CN=941FC7AF9AEF7CB58B26896C1E09C435378068C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:27:e4:6b:88:69:e7:31:e4:1e:b3:38:c3:
                    64:d5:5b:a5:a5:97:81:50:6d:54:4b:f6:91:0b:9a:
                    c8:bc:8e:76:4c:45:f7:16:81:c5:c6:06:89:35:bd:
                    6e:31:46:28:f1:ca:b2:f6:1d:43:32:2f:e9:08:6e:
                    06:f7:54:76:2c:63:e3:f8:0b:b5:f9:fd:23:42:12:
                    c9:2d:dc:6e:73:49:b1:44:e0:98:18:61:04:28:6c:
                    03:40:9c:70:a9:35:83:ae:91:05:14:68:ac:41:48:
                    50:13:5d:76:38:ee:7b:c6:8d:be:bb:cd:a0:71:73:
                    45:8f:bd:9e:22:ac:15:3c:cb:6f:e7:5f:b8:13:74:
                    95:c2:d3:0e:3e:b7:d0:a1:07:b9:f5:1f:f4:65:af:
                    88:6c:32:9c:be:00:13:91:61:68:1a:31:16:27:dd:
                    b5:7f:9c:2f:a6:cf:71:73:8b:46:35:1a:5a:d0:92:
                    ad:26:3c:43:1e:5f:de:aa:49:69:61:60:47:79:e2:
                    19:69:09:e9:b0:ad:f0:a5:97:ee:f5:45:11:94:73:
                    a3:b0:e8:63:c0:3c:08:a5:dd:24:5c:a8:49:8a:cd:
                    19:06:98:9a:b7:3b:29:7d:61:07:97:2a:8d:82:74:
                    b2:81:74:e9:3d:d3:a2:36:aa:47:c2:e0:89:77:b1:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:C7:AF:9A:EF:7C:B5:8B:26:89:6C:1E:09:C4:35:37:80:68:C2
            X509v3 Authority Key Identifier:
                keyid:F1:9C:1F:B4:A2:5E:C2:16:E0:14:33:4C:6D:48:E7:0F:45:F6:30:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a313435633a3a2f33322d3438203d3e20323633333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:145c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:8f:42:e3:92:5e:90:98:9a:be:f3:01:58:d3:a7:26:ac:
         a1:06:08:f3:fc:55:ca:a8:9c:a7:f1:a7:dd:86:03:a6:a1:7a:
         34:0e:45:a4:28:c3:17:0f:94:cf:5c:e2:7f:df:3c:bf:81:ce:
         24:70:62:fa:a7:20:25:fa:d0:2f:dc:7a:8e:9d:a5:1e:4b:71:
         30:60:5a:2a:68:3c:bd:97:b1:03:3a:38:93:7c:85:3b:a7:18:
         70:e9:5f:e7:13:4b:f5:3a:a9:47:73:e6:b3:1d:93:2e:df:6c:
         65:11:1b:88:8e:31:5d:af:74:fa:7a:a4:44:01:b0:a9:95:74:
         a3:9e:ac:b9:1e:32:e0:f7:4e:31:a5:a6:95:bf:35:7f:df:a8:
         88:9a:b6:bf:e3:75:8a:34:68:d1:ac:27:21:0a:a6:54:4d:d1:
         f5:1d:e3:5e:4a:b8:35:7a:28:67:c3:10:fa:91:2f:8e:31:44:
         b6:4f:83:ae:35:09:27:15:49:d7:54:d8:43:d8:e1:e3:3d:10:
         f9:24:66:bf:11:5a:01:a4:60:1e:44:fc:30:a9:14:14:a6:39:
         c2:62:73:02:d9:03:05:45:c7:56:62:3c:9d:d6:db:ab:49:ea:
         e5:54:73:74:cd:f7:4c:55:12:5c:e2:34:4a:16:43:80:1f:1b:
         5b:2c:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:51:23 2025 by rpki-client