Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa
File:                     323830343a326461383a3a2f33322d3336203d3e20323635323935.roa (raw, json)
Hash identifier:          nU9aqfPjzg+U7t8Hp5ImGCkgyFn1hAil1FuSvKVDr2M=
Subject key identifier:   6A:19:6D:1F:45:0C:B4:AC:C8:E6:7A:5A:C6:F3:78:D7:33:B0:BA:C4
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       3D46423CCDA659EDB34B166669C54AD584668FE9
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa
Signing time:             Sat 12 Apr 2025 15:02:57 +0000
ROA not before:           Sat 12 Apr 2025 14:57:57 +0000
ROA not after:            Sat 11 Apr 2026 15:02:57 +0000
asID:                     265295
IP address blocks:        2804:2da8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 21:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:46:42:3c:cd:a6:59:ed:b3:4b:16:66:69:c5:4a:d5:84:66:8f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Apr 12 14:57:57 2025 GMT
            Not After : Apr 11 15:02:57 2026 GMT
        Subject: CN=6A196D1F450CB4ACC8E67A5AC6F378D733B0BAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:e9:31:6e:ef:ac:56:b4:5d:9e:a5:77:4c:
                    47:7c:98:eb:27:a7:18:06:7c:59:7a:00:bd:78:e4:
                    2f:31:14:40:ae:05:3f:e6:a1:d5:3b:b9:92:cb:6c:
                    76:61:d4:89:7a:68:bd:b1:c9:ef:76:9b:07:4a:b2:
                    74:94:cc:45:c3:b4:6a:72:44:df:09:59:6a:03:72:
                    68:93:01:51:bc:aa:60:f6:fe:08:d8:fc:9c:63:0e:
                    bc:db:74:e0:3e:9e:66:05:0b:73:c4:87:ad:d1:fc:
                    bc:92:71:27:1b:f6:d0:86:ae:b1:61:a3:d3:1f:69:
                    45:f8:cb:67:f3:85:92:db:48:63:01:c9:0b:79:20:
                    c3:d4:60:70:bd:19:88:43:eb:6c:be:ef:c8:ff:6e:
                    d7:56:9b:a1:b0:c4:c5:46:71:b1:f3:74:09:a3:b1:
                    24:c8:76:ed:f6:39:c5:43:fa:eb:1e:b9:e2:9c:24:
                    24:ea:0d:f5:c6:e4:ba:af:b9:5f:1e:30:30:b7:b9:
                    43:a0:8f:2e:24:66:ea:62:39:2c:5a:d8:71:bb:b2:
                    cb:c0:d0:0c:fc:35:23:47:7a:ce:e7:c9:8e:3d:cb:
                    66:db:ff:27:ac:5f:2b:d2:c3:3e:44:a0:df:32:76:
                    fd:da:31:71:54:84:71:71:41:72:5a:1f:36:ca:e7:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:6D:1F:45:0C:B4:AC:C8:E6:7A:5A:C6:F3:78:D7:33:B0:BA:C4
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/323830343a326461383a3a2f33322d3336203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:e2:e6:f0:59:75:6a:78:34:4f:61:9f:62:01:e2:32:22:
         dd:b2:18:2d:45:95:d8:96:d1:0e:a0:48:d6:64:1e:db:b5:fb:
         10:a0:66:57:28:61:bf:d6:15:96:6c:21:4d:5a:03:9e:b9:94:
         97:2c:88:cb:45:63:f4:85:bc:9e:fe:9f:6a:c5:f8:18:b5:7a:
         66:48:82:d2:8e:0b:3f:54:ff:2e:dc:f7:2f:52:b5:f3:b8:4d:
         ed:ca:3f:2e:09:5d:1c:66:ca:b0:f1:0b:5d:4a:07:ec:cc:75:
         5c:df:c8:dc:87:14:34:e4:68:2b:c5:9b:e9:9c:20:2f:e8:9f:
         8b:78:c6:c6:f7:84:94:69:95:5e:b3:ca:c9:a1:d5:b7:e2:9f:
         51:95:60:84:ec:3e:7c:be:d4:95:82:7b:1a:09:9c:62:bc:4d:
         24:d1:bf:bf:33:39:2a:38:7d:ef:fa:b9:51:a8:ba:7e:7f:35:
         08:18:ea:b9:22:56:17:4b:c5:ba:72:60:ab:cd:af:14:5f:44:
         e3:da:4b:91:c5:a2:01:a1:a8:97:28:31:f7:25:93:fe:18:9f:
         5d:de:22:46:b4:72:5f:b0:26:1e:bf:bb:84:0c:5f:2c:d3:f6:
         6b:f2:90:3c:e0:54:1c:91:af:dd:0a:61:7a:0e:03:fb:d8:7e:
         f2:85:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:35:34 2025 by rpki-client