Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          OYU0j7KW0SQYZ01LKov09DW8mg6opt2/eKg2CRsuo4o=
Subject key identifier:   2F:9C:F5:47:0A:73:03:E8:27:0C:87:AC:76:60:88:B0:3D:B0:5A:5A
Certificate issuer:       /CN=FB17F3727728192B2645B802B0E953921058EE2B
Certificate serial:       37A19ACD8CBB3F37A53FC771018CBEC4FC918354
Authority key identifier: FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Mon 12 May 2025 13:59:52 +0000
ROA not before:           Mon 12 May 2025 13:54:52 +0000
ROA not after:            Mon 11 May 2026 13:59:52 +0000
asID:                     271699
IP address blocks:        2804:7fa0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a1:9a:cd:8c:bb:3f:37:a5:3f:c7:71:01:8c:be:c4:fc:91:83:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB17F3727728192B2645B802B0E953921058EE2B
        Validity
            Not Before: May 12 13:54:52 2025 GMT
            Not After : May 11 13:59:52 2026 GMT
        Subject: CN=2F9CF5470A7303E8270C87AC766088B03DB05A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:93:07:9e:76:19:a6:72:2a:ec:ed:60:39:
                    f8:34:78:d4:cc:b0:6a:49:66:72:bc:4f:b3:6f:be:
                    87:20:fd:f7:7e:10:fe:8d:fa:a4:60:3a:f9:78:6a:
                    d1:a2:c2:d2:14:7a:a2:19:2e:0e:ea:d1:6a:cf:01:
                    c6:2f:e6:08:d9:d9:fb:5f:a1:a2:8b:45:90:b5:1a:
                    9d:10:1b:a3:66:a4:92:83:31:7d:8a:6f:59:61:f8:
                    24:32:2a:60:49:3b:a8:1d:62:f1:db:84:df:54:6d:
                    3a:ec:83:76:b3:32:6a:55:f3:a3:75:90:7f:8b:78:
                    e6:33:dd:2e:23:90:0b:9e:38:f8:91:c4:39:42:cc:
                    fb:fe:40:49:09:4f:bc:a7:92:a3:fe:ee:ad:a3:92:
                    dd:72:24:c4:91:a9:0e:43:f8:d8:d2:f2:47:53:b0:
                    10:ff:3f:68:1d:5c:4e:b3:2c:a2:de:80:6d:d3:fe:
                    88:56:57:ba:b4:5f:07:cb:32:8d:8f:7f:b2:41:a7:
                    c6:5f:b6:e3:30:9e:61:e4:15:69:57:8f:11:07:e3:
                    b4:be:cf:e6:9e:f9:0b:12:d9:37:c0:da:f6:0f:fe:
                    fc:74:d1:9f:0f:63:80:a4:56:e3:42:d2:71:37:ec:
                    b0:51:f7:ed:b0:71:5f:fd:a8:71:5c:20:d0:4c:fa:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:F5:47:0A:73:03:E8:27:0C:87:AC:76:60:88:B0:3D:B0:5A:5A
            X509v3 Authority Key Identifier:
                keyid:FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:91:b1:ca:6d:b0:7d:c5:3e:19:6f:2a:7b:aa:2e:ec:17:
         dd:c0:aa:76:64:ca:e0:7b:e1:1d:5e:d9:1f:5b:92:e3:4c:93:
         cb:52:9f:b3:84:bb:ca:21:a8:dd:4b:4e:bc:3a:70:ef:e8:8c:
         11:22:19:fc:0f:6a:81:93:c9:5b:ca:5b:44:21:7b:c2:a9:ec:
         2f:c3:a7:2d:4c:4d:0a:c4:74:b8:4c:c5:72:76:1e:0f:3f:71:
         04:91:de:59:97:1f:76:b5:c7:42:21:65:98:20:fc:d1:98:45:
         1f:65:f4:a7:a8:f3:5e:64:2e:04:9d:9c:94:0d:f7:45:56:c1:
         2e:b4:14:84:73:d3:c4:bd:e2:aa:2e:46:a1:35:83:d8:72:2e:
         27:fd:d9:8e:e3:5c:df:bf:4a:dc:7f:4b:ad:69:cd:5b:e9:4d:
         ad:1d:d8:49:98:9e:55:2c:68:45:c1:75:c9:80:bb:48:b6:9b:
         29:e5:5e:57:15:3e:4a:a9:be:27:e8:d6:1a:dc:0a:e4:13:fd:
         db:ba:ae:f3:74:ec:78:58:30:cb:35:dc:d0:0e:f8:24:a7:12:
         22:73:fa:63:e7:39:39:9d:64:80:19:de:b2:f7:7f:d3:92:23:
         ff:1e:63:f1:53:ae:44:0b:8f:ab:6a:94:94:f0:be:1c:c4:0c:
         7f:fc:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:06:48 2025 by rpki-client