Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          AuOh0NLKHGZXu9exSDIz/8VZToj6MQxuCVzK2VHKDoU=
Subject key identifier:   7F:38:9B:71:D2:A1:C7:A3:09:E7:F1:E1:67:EB:C1:4A:64:C5:97:08
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       66FAB823EE370E000FDBA5FDB9FA3008888D61A6
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:39 +0000
ROA not before:           Wed 30 Apr 2025 18:48:39 +0000
ROA not after:            Wed 29 Apr 2026 18:53:39 +0000
asID:                     266375
IP address blocks:        2804:36d4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:b8:23:ee:37:0e:00:0f:db:a5:fd:b9:fa:30:08:88:8d:61:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:39 2025 GMT
            Not After : Apr 29 18:53:39 2026 GMT
        Subject: CN=7F389B71D2A1C7A309E7F1E167EBC14A64C59708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:99:56:bb:c7:66:9b:0e:01:fe:e5:da:5b:
                    1b:56:4b:9d:f9:c6:f6:2b:f6:b3:a9:d8:46:e1:ea:
                    13:fb:8c:08:ed:a2:67:e6:21:5a:63:9b:70:c5:59:
                    cf:57:bc:22:e1:55:c7:46:62:ff:61:d5:7d:20:70:
                    80:8c:c6:29:77:f5:92:42:65:77:d5:30:31:8c:63:
                    b2:ba:6e:03:e3:7c:74:c9:16:37:82:27:49:97:2a:
                    23:ec:cb:2f:3c:57:87:46:5c:55:61:7e:3a:2d:c5:
                    4d:5f:08:54:fa:92:7c:33:7c:06:86:86:d4:e5:43:
                    71:5d:02:5b:e7:1d:40:44:a3:5f:d5:50:69:f5:a3:
                    b7:9c:0b:67:f8:8e:77:4d:99:c0:50:ea:b8:e4:01:
                    49:e2:cf:8c:f5:c4:7b:c4:74:02:ad:e6:54:f1:b2:
                    78:96:57:9d:8d:4e:c0:e4:57:be:a9:48:c5:39:80:
                    e6:e3:69:56:da:a5:31:21:4f:e7:25:64:a7:ca:ba:
                    ef:c4:f3:c2:be:74:b7:62:a1:d6:eb:19:59:5f:36:
                    d6:46:b7:0d:10:a1:83:d1:37:ee:c2:42:b5:3f:2f:
                    9d:f7:8e:80:50:d6:9e:46:57:04:96:94:03:71:a5:
                    94:c8:48:1a:dd:2e:77:fb:2a:c8:a7:d8:c2:d3:cf:
                    50:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:9B:71:D2:A1:C7:A3:09:E7:F1:E1:67:EB:C1:4A:64:C5:97:08
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:23:42:0c:8b:e2:6b:76:4b:cf:b3:e0:40:1f:d3:51:84:
         47:75:d8:09:fd:bd:2f:c5:50:76:b8:6f:7c:60:7c:08:d5:d6:
         55:b4:ec:24:53:b8:b7:4d:95:16:53:2b:f3:3d:61:54:c8:e8:
         ac:d8:b1:59:46:ee:ad:d0:b2:3a:df:4a:f1:b0:49:7c:bd:4f:
         7d:15:e7:2e:73:26:53:23:ae:ab:dd:c6:dd:39:bf:66:59:ac:
         3c:fd:c4:af:ca:1a:8c:83:15:f4:1b:b0:c5:4f:74:ec:23:0d:
         8a:e9:4c:4a:58:ee:02:8c:ef:80:5a:02:73:ca:db:8e:02:86:
         ad:2f:4d:43:b4:43:f5:7c:76:19:60:c6:1c:99:00:2f:7c:38:
         2c:ef:ef:34:32:34:4f:a7:db:b3:ad:74:33:51:02:4d:02:78:
         b2:13:15:67:f3:9f:45:d1:39:48:ec:e1:11:49:4f:fa:0b:83:
         e4:7f:da:48:09:46:25:53:4b:52:63:08:d7:66:38:b8:32:e5:
         69:0d:d7:aa:40:5d:70:ab:42:4f:d9:77:75:b3:2b:9b:74:bc:
         a6:78:b4:5f:77:45:9e:86:e7:8c:18:91:9f:cd:ba:06:35:f1:
         c8:57:0a:f1:87:2a:0c:32:fc:0e:ee:5c:e9:27:24:64:de:84:
         51:70:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:37:22 2025 by rpki-client