Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
File:                     323830343a346637383a3a2f33322d3438203d3e20323638333239.roa (raw, json)
Hash identifier:          7NmfJsFCpnlBjzxLUx+99O5icNtSpxsq7WKIvSZEQX0=
Subject key identifier:   34:FF:63:B7:00:CC:16:99:C8:33:5D:7F:5C:98:21:22:6B:AF:5F:A4
Certificate issuer:       /CN=F19C1FB4A25EC216E014334C6D48E70F45F630D6
Certificate serial:       069D5CBDA68FBCFDA987349F5DB6BC8B54542FD3
Authority key identifier: F1:9C:1F:B4:A2:5E:C2:16:E0:14:33:4C:6D:48:E7:0F:45:F6:30:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa
Signing time:             Mon 24 Feb 2025 14:33:28 +0000
ROA not before:           Mon 24 Feb 2025 14:28:28 +0000
ROA not after:            Mon 23 Feb 2026 14:33:28 +0000
asID:                     268329
IP address blocks:        2804:4f78::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.crl
                          rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9d:5c:bd:a6:8f:bc:fd:a9:87:34:9f:5d:b6:bc:8b:54:54:2f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19C1FB4A25EC216E014334C6D48E70F45F630D6
        Validity
            Not Before: Feb 24 14:28:28 2025 GMT
            Not After : Feb 23 14:33:28 2026 GMT
        Subject: CN=34FF63B700CC1699C8335D7F5C9821226BAF5FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:cc:be:99:04:40:fd:3f:f4:9e:c5:28:7a:
                    e5:73:a5:bb:13:9b:c6:12:2e:81:f2:8c:5f:95:ef:
                    07:25:8c:48:8b:9f:03:72:80:39:aa:3d:76:de:04:
                    fa:0e:2b:e5:b0:68:6f:34:a7:43:2d:38:8b:94:67:
                    a5:ce:5c:b9:26:46:b5:7c:c1:d9:33:eb:e9:5f:f7:
                    1e:ae:f0:f8:5a:ae:b2:8e:cd:04:b2:0b:19:70:0b:
                    fc:a5:34:fe:09:d3:8f:d7:51:9e:88:7c:8e:9e:0d:
                    17:19:97:92:ab:22:ba:b7:d8:0e:b9:ef:01:fe:b3:
                    b5:33:cc:84:e0:eb:d3:fe:e3:72:ab:d1:c3:b9:40:
                    30:49:70:75:5f:5e:20:fc:cb:8f:92:97:bf:0a:6c:
                    54:04:80:1f:41:0f:bb:c7:c8:6a:6f:f0:ea:31:0b:
                    e4:a3:7b:7c:55:79:f6:44:84:07:a6:5f:b7:f8:9e:
                    0b:f0:a5:e3:ef:87:94:03:13:57:66:16:d8:59:2d:
                    71:8d:b3:99:3e:72:2a:c5:06:db:80:4c:1b:d0:2b:
                    90:e0:0a:dc:3a:e5:cd:0e:44:8e:a1:1b:90:72:bf:
                    a1:94:7f:96:8f:e6:95:f7:2b:bb:f1:af:ef:1a:86:
                    4f:68:7c:7d:24:bd:dd:d1:ae:84:1d:d0:0f:7c:1e:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:63:B7:00:CC:16:99:C8:33:5D:7F:5C:98:21:22:6B:AF:5F:A4
            X509v3 Authority Key Identifier:
                keyid:F1:9C:1F:B4:A2:5E:C2:16:E0:14:33:4C:6D:48:E7:0F:45:F6:30:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/F19C1FB4A25EC216E014334C6D48E70F45F630D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19C1FB4A25EC216E014334C6D48E70F45F630D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/323830343a346637383a3a2f33322d3438203d3e20323638333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:55:76:04:68:d7:8d:fd:df:fd:17:47:2c:7e:5b:50:19:4f:
         27:be:f1:ae:4b:20:ee:79:b1:d1:f2:49:d6:1e:3b:ed:26:c4:
         a2:7b:75:3d:b4:d5:b3:3c:ef:06:8d:3b:72:11:34:47:67:14:
         0e:2d:64:32:17:04:2b:6e:7a:8e:8f:0a:27:e7:3c:fc:3b:da:
         9f:62:3b:ea:2c:7f:83:a2:1d:1f:8c:4d:af:fe:22:91:e3:c3:
         b0:ce:8a:ae:e8:16:e3:a5:06:49:7c:8b:90:f4:85:c8:af:66:
         57:9c:ec:6e:88:5b:62:83:f1:27:4a:7e:c7:81:34:43:f9:06:
         dd:a8:ac:39:ae:60:4b:02:81:6b:46:b0:81:2a:92:a9:a2:bf:
         8e:95:91:23:ed:18:be:ce:ed:b2:4f:2b:e8:ad:c9:10:60:e2:
         77:06:e5:43:0f:a3:ab:d3:27:fe:8d:01:a6:2c:1f:42:c3:12:
         46:a8:68:2c:31:28:f0:15:3a:02:1e:69:4a:cb:63:66:1f:cb:
         68:1c:83:3e:2e:cc:b0:b3:83:d8:14:8a:88:56:34:23:d3:2a:
         08:6b:46:dc:c4:46:28:d0:2b:c9:3b:cd:ba:7c:2f:e0:8d:b9:
         7c:88:45:41:d4:62:ef:a2:46:fe:71:0f:65:2d:a7:26:7c:4a:
         ec:b8:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:28 2025 by rpki-client