Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
File:                     323830343a323838633a3a2f33322d3438203d3e20323633393638.roa (raw, json)
Hash identifier:          bEp9k85EV3uyyo6uIOKy3gZD+oPv/2bmRr1dGwXLsG8=
Subject key identifier:   15:14:32:DC:56:99:4C:78:AD:2E:F7:E6:ED:D2:77:26:B2:2C:48:23
Certificate issuer:       /CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
Certificate serial:       7ADF450DEFC033F4A31CC41BE9ACFA7025EDCEB0
Authority key identifier: FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa
Signing time:             Thu 13 Mar 2025 12:15:22 +0000
ROA not before:           Thu 13 Mar 2025 12:10:22 +0000
ROA not after:            Thu 12 Mar 2026 12:15:22 +0000
asID:                     263968
IP address blocks:        2804:288c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl
                          rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:df:45:0d:ef:c0:33:f4:a3:1c:c4:1b:e9:ac:fa:70:25:ed:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
        Validity
            Not Before: Mar 13 12:10:22 2025 GMT
            Not After : Mar 12 12:15:22 2026 GMT
        Subject: CN=151432DC56994C78AD2EF7E6EDD27726B22C4823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:6a:e7:18:f2:e6:e5:47:f1:f7:7a:84:f1:
                    99:d3:fc:60:c6:21:ea:7c:69:fe:66:ab:de:ad:3a:
                    32:13:9a:26:33:4e:05:9d:aa:a2:1b:f9:45:d9:8f:
                    ad:8b:1b:94:1b:8c:71:bf:b9:3f:bc:0a:b8:65:27:
                    66:a3:e8:14:0f:5e:3f:72:77:4c:d6:5f:fd:8e:c7:
                    3c:c9:8a:8f:c2:5d:4b:86:59:e0:18:7e:fa:e0:6d:
                    bf:86:75:12:1d:8a:c4:b2:fb:a8:dc:99:94:76:8d:
                    f8:df:08:79:7a:df:b6:3d:17:f8:8b:f9:f1:cd:e6:
                    d3:76:5e:95:c0:aa:29:d7:13:f1:01:6f:40:c6:72:
                    55:8b:bd:46:72:80:6c:9b:01:e8:25:53:16:5c:72:
                    65:c8:14:e0:fe:4a:d4:2a:dd:24:82:ec:ab:9c:0e:
                    0a:e5:cb:d9:62:ad:90:49:8d:10:7b:8f:01:14:74:
                    72:be:64:98:92:9f:7e:de:94:4e:59:2f:53:7d:36:
                    fd:7c:7a:58:fa:2e:db:1b:44:7f:c4:82:56:73:a7:
                    eb:bd:6f:fc:af:2d:1e:c0:4b:28:15:82:34:88:2e:
                    3d:1c:7c:fa:9e:2c:b6:91:60:03:d8:f0:99:8f:2a:
                    aa:2d:4e:2d:90:29:c9:de:80:91:4f:55:fb:ad:d7:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:32:DC:56:99:4C:78:AD:2E:F7:E6:ED:D2:77:26:B2:2C:48:23
            X509v3 Authority Key Identifier:
                keyid:FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/323830343a323838633a3a2f33322d3438203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:288c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:50:a3:44:f5:ba:5d:c0:bf:35:f7:16:b5:9c:99:cf:77:d6:
         63:2a:d7:f7:c1:01:4f:5a:be:a7:73:10:8c:0e:08:a9:75:07:
         03:e3:67:30:49:13:88:38:45:21:85:dc:3c:58:bc:b5:32:10:
         c8:3c:3e:eb:f3:fc:0b:2f:c4:63:2c:c5:4c:69:7e:d5:b9:43:
         1e:78:2b:ec:83:d8:b1:66:6d:73:10:4a:c0:da:bf:36:1a:c8:
         dc:e6:b8:70:56:4e:08:92:b8:be:e5:ad:7f:03:a4:40:25:ea:
         b3:a3:a3:19:f6:41:97:c0:e9:a3:8a:77:3c:9a:d4:9b:02:d6:
         17:cf:c5:35:52:43:52:9a:cd:0a:9c:cb:a1:21:65:66:66:e1:
         94:15:56:a7:d0:77:af:6d:62:71:63:d7:f4:22:a3:f8:53:e9:
         ce:1f:5d:d6:b3:b1:67:e4:8b:3a:0a:d8:ef:fc:ef:53:6a:5d:
         f5:12:33:4f:53:d1:41:fa:e7:fd:72:bd:a3:f8:db:e6:d4:69:
         9e:d4:d1:eb:68:d4:10:0f:d7:b3:d2:5a:13:0d:30:1d:35:aa:
         56:e5:97:09:23:76:40:45:86:54:d6:8b:e9:62:6e:3e:97:25:
         30:27:1a:f1:22:e5:11:f2:43:94:af:94:e0:fc:07:af:d5:bd:
         7b:a5:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:48:24 2025 by rpki-client