Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a633030303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a633030303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          n48mdpfj+d5Y0gH0cd1yeMKkxl5MndChYi9RbAEwtXI=
Subject key identifier:   BD:D0:32:36:7F:93:C2:FC:A7:FC:07:88:81:A8:1D:62:DA:CA:CE:53
Certificate issuer:       /CN=FB17F3727728192B2645B802B0E953921058EE2B
Certificate serial:       1F0EEED7AF8753CC5872D9CD52C49B13F774AC8A
Authority key identifier: FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a633030303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Mon 12 May 2025 13:59:58 +0000
ROA not before:           Mon 12 May 2025 13:54:58 +0000
ROA not after:            Mon 11 May 2026 13:59:58 +0000
asID:                     271699
IP address blocks:        2804:7fa0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:ee:d7:af:87:53:cc:58:72:d9:cd:52:c4:9b:13:f7:74:ac:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB17F3727728192B2645B802B0E953921058EE2B
        Validity
            Not Before: May 12 13:54:58 2025 GMT
            Not After : May 11 13:59:58 2026 GMT
        Subject: CN=BDD032367F93C2FCA7FC078881A81D62DACACE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:33:40:0f:06:26:cc:a8:39:18:15:fc:47:
                    27:73:68:23:3f:de:7e:53:d4:2f:ca:84:c7:86:ed:
                    95:1c:4f:ff:fe:2e:45:6a:97:d2:a9:0e:23:a7:f0:
                    0c:92:c2:b5:cf:04:c6:71:f8:5a:0f:5c:a5:4f:0a:
                    85:02:df:c5:4e:43:b0:92:d5:c1:44:8c:56:15:a5:
                    61:c6:5f:8d:56:2b:bd:4b:ce:dc:2b:1b:2a:70:5d:
                    df:21:f2:5e:b2:af:44:de:d4:68:7b:e0:cb:3d:a7:
                    92:84:ce:5d:cc:e2:14:ed:4b:08:03:61:13:a2:db:
                    5e:ff:99:12:77:c8:32:60:39:85:bd:eb:c3:15:0c:
                    47:97:8f:48:d4:ed:c6:14:48:e0:2f:ab:f5:74:78:
                    97:eb:96:e2:ce:2b:cb:37:6d:83:cb:e6:6d:5e:8f:
                    43:62:0b:83:ff:bd:48:f7:1c:d0:20:82:21:e2:f1:
                    91:60:46:4c:90:5a:05:35:82:3d:cc:f5:29:83:01:
                    6c:ea:2c:ed:7a:ca:43:f0:ec:1b:0b:00:3c:f8:a9:
                    84:5c:97:c6:65:c1:7d:4b:c4:f2:4f:d8:fd:dc:88:
                    1e:14:df:a8:09:37:ab:ab:8d:72:3a:3f:d5:2f:90:
                    da:15:dc:3d:8f:e4:c3:09:87:49:aa:58:f3:8f:aa:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:32:36:7F:93:C2:FC:A7:FC:07:88:81:A8:1D:62:DA:CA:CE:53
            X509v3 Authority Key Identifier:
                keyid:FB:17:F3:72:77:28:19:2B:26:45:B8:02:B0:E9:53:92:10:58:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/FB17F3727728192B2645B802B0E953921058EE2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB17F3727728192B2645B802B0E953921058EE2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a633030303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:b1:a2:da:21:58:c9:86:3a:65:48:73:c5:24:70:9e:d0:
         af:61:f4:c8:a3:45:c9:23:e7:dd:62:da:21:f8:bb:a8:6e:3e:
         ab:a5:20:0c:ad:f9:f7:ae:81:69:64:c0:f4:ac:98:74:ce:27:
         5d:0b:d3:56:63:55:72:ae:e1:66:9b:f4:6b:84:a3:07:6c:6c:
         bb:af:20:47:bf:c8:f1:51:d9:c7:86:12:79:e4:c8:7c:e7:85:
         2d:61:90:e9:d5:f0:60:10:a7:0c:0f:1c:8c:26:6f:b4:0e:4a:
         63:00:e5:3f:b1:65:29:61:72:5f:e4:40:db:12:79:d9:10:11:
         79:d8:0b:b6:5e:86:35:62:d3:e6:cb:8d:cd:7e:da:9a:20:4d:
         3c:29:2e:53:70:f8:b4:21:4b:59:79:ec:0b:b8:1e:18:3c:4e:
         93:06:56:7c:86:36:58:4d:b1:f7:ce:25:0f:cb:9c:91:68:d8:
         4e:ee:af:c2:86:21:c9:95:85:77:6d:ca:d4:e5:b3:94:49:db:
         b6:91:66:b5:84:9e:f8:0e:b5:af:cf:99:aa:29:e3:96:c2:f4:
         52:bd:f8:c3:23:4b:97:21:01:9c:be:9e:0d:78:94:93:8e:b2:
         7f:d9:40:1b:c9:ab:ee:2f:13:33:8a:12:f3:ad:2f:2c:63:0a:
         fd:bd:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:26:34 2025 by rpki-client