Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          UvHeXJZYfeAVvPXhLIQOaEAlJWIZu5LxIbWGsftJ8Gc=
Subject key identifier:   FF:2B:CD:BF:57:6B:2E:17:BC:04:B8:F5:5E:24:85:7F:08:4A:B3:6B
Certificate issuer:       /CN=FB17F3727728192B2645B802B0E953921058EE2B
Certificate serial:       74BF2741811BB1EE32BE1A08195452A26E6A2717
Authority key identifier: FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Mon 12 May 2025 13:59:56 +0000
ROA not before:           Mon 12 May 2025 13:54:56 +0000
ROA not after:            Mon 11 May 2026 13:59:56 +0000
asID:                     271699
IP address blocks:        2804:7fa0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bf:27:41:81:1b:b1:ee:32:be:1a:08:19:54:52:a2:6e:6a:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB17F3727728192B2645B802B0E953921058EE2B
        Validity
            Not Before: May 12 13:54:56 2025 GMT
            Not After : May 11 13:59:56 2026 GMT
        Subject: CN=FF2BCDBF576B2E17BC04B8F55E24857F084AB36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:21:30:0c:48:01:88:1e:3e:e9:cd:e4:1b:
                    c2:6c:24:79:c9:9a:28:c6:6b:e7:c6:49:ee:a6:40:
                    c7:9f:74:2d:62:bf:88:07:d5:8b:53:6f:1b:d4:7e:
                    d0:d0:d8:c1:6c:57:64:fe:b1:b6:95:2d:3e:98:c8:
                    84:67:e1:0a:33:48:aa:7d:74:ec:05:de:69:48:f2:
                    f5:6b:2f:ce:cf:d3:7f:2e:0e:1c:e3:3d:a9:d3:8f:
                    c5:aa:dc:6b:ef:91:1f:ee:32:4f:5b:3f:67:57:95:
                    08:90:1f:2e:b5:f0:b7:12:a3:3b:be:07:17:fa:ce:
                    4a:37:95:ea:dc:94:34:0b:4b:83:71:6f:50:ed:48:
                    1e:0a:fc:5d:89:4d:51:6b:4a:87:1a:7d:e7:a4:9b:
                    79:56:2f:e3:63:10:15:56:13:29:a6:91:9e:32:ae:
                    5f:77:40:d8:ea:2f:2c:8e:67:ed:6e:89:79:21:f2:
                    39:82:c5:ae:41:39:ca:0f:33:fd:cc:f3:8f:8a:37:
                    f8:3c:c3:bd:05:5c:27:9d:0a:6f:5c:c2:e0:d8:26:
                    05:c3:99:0c:ac:3d:f2:37:ef:48:48:26:0c:ca:48:
                    16:c7:ab:9e:c4:5c:42:9e:96:d0:b0:8d:5d:82:01:
                    9a:f9:c7:ad:04:24:6d:ea:0f:e4:47:56:ae:0e:be:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2B:CD:BF:57:6B:2E:17:BC:04:B8:F5:5E:24:85:7F:08:4A:B3:6B
            X509v3 Authority Key Identifier:
                keyid:FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:95:f0:4f:42:5a:24:dd:04:04:0d:1d:5b:08:c0:39:c0:
         09:3b:fc:b6:9b:5d:c1:8f:c6:d4:91:72:07:fb:ca:75:17:2d:
         45:e0:88:96:c6:e4:2e:a4:0c:c7:d0:7d:34:c2:47:9a:eb:c0:
         8c:c7:bc:d9:3d:81:c1:cd:b3:c5:d6:22:e6:53:38:38:b7:e4:
         c2:a5:fc:e7:d2:7d:98:d1:49:ab:52:2e:0c:a2:0c:68:5c:66:
         25:ca:96:7f:4b:99:5f:3d:d8:bd:42:33:e6:1a:b3:c6:d0:e9:
         51:51:01:cd:30:81:68:ac:53:ca:61:2c:43:60:c1:21:8d:be:
         c7:d9:be:c7:4f:fa:33:14:79:4a:00:93:c2:e3:c2:a1:ae:20:
         0b:0d:8c:af:f1:2d:34:df:13:50:4a:07:86:f6:ff:2f:ea:4b:
         29:02:cc:e5:4c:d1:b5:f0:51:56:6c:cd:a7:0a:c9:30:f7:ee:
         26:17:27:1d:ae:db:7e:17:79:6f:72:fd:34:28:14:6d:e3:49:
         18:80:bc:e6:c9:9e:d9:71:a9:7c:b1:13:6e:03:99:6d:20:55:
         88:bb:45:7c:0b:5b:a9:83:27:f8:07:0b:43:18:bb:29:25:eb:
         0f:6f:65:ae:e8:26:27:71:f9:2e:cc:4f:fb:a8:b9:bf:80:ad:
         94:87:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:42:10 2025 by rpki-client