Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa
File:                     323830343a333835383a3a2f33322d3438203d3e20323636343731.roa (raw, json)
Hash identifier:          Ezwry/Ttt8RQOm+g3+t9LBUafCCJPJMLDgzeB5Rwwrs=
Subject key identifier:   50:90:FA:BF:AC:7D:F9:D2:C9:83:51:50:E8:A9:2F:AC:6B:24:E0:4D
Certificate issuer:       /CN=093EBDACB5D919E6065F30F8B08271982354B7E0
Certificate serial:       6212926E22A6F5DEEE2E05D2FDFA05DA1CA40B2E
Authority key identifier: 09:3E:BD:AC:B5:D9:19:E6:06:5F:30:F8:B0:82:71:98:23:54:B7:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa
Signing time:             Fri 09 May 2025 18:58:21 +0000
ROA not before:           Fri 09 May 2025 18:53:21 +0000
ROA not after:            Fri 08 May 2026 18:58:21 +0000
asID:                     266471
IP address blocks:        2804:3858::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 04:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:92:6e:22:a6:f5:de:ee:2e:05:d2:fd:fa:05:da:1c:a4:0b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093EBDACB5D919E6065F30F8B08271982354B7E0
        Validity
            Not Before: May  9 18:53:21 2025 GMT
            Not After : May  8 18:58:21 2026 GMT
        Subject: CN=5090FABFAC7DF9D2C9835150E8A92FAC6B24E04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:51:55:16:2e:54:e7:62:22:9e:04:33:70:
                    ef:cb:e6:aa:59:33:13:50:88:8f:ad:25:ad:66:e8:
                    02:df:d1:45:9b:1d:e4:4b:0c:87:d1:f9:d9:b3:a0:
                    fa:30:31:e2:50:bb:b7:6f:8d:12:c1:f8:4e:4c:a7:
                    5f:08:d0:09:fc:79:8b:ee:7c:c5:a9:c1:a8:c0:91:
                    69:46:40:a3:e9:99:ed:46:df:7a:63:64:3a:00:c9:
                    09:b5:27:83:26:8a:46:ed:03:56:17:76:86:06:53:
                    10:14:a8:11:c3:5a:22:5e:47:23:07:b0:26:09:21:
                    eb:cf:0f:5f:87:bc:19:56:b5:89:26:13:8b:2b:2d:
                    19:83:89:c2:74:f1:7c:51:11:af:bb:15:87:6c:8f:
                    e9:0d:ed:0f:01:f1:08:89:0c:b0:e3:39:0b:4b:28:
                    6e:6d:25:90:da:f6:a4:15:c5:a3:cf:ef:91:5f:81:
                    75:0a:0a:93:9d:b3:6a:d4:c8:c3:88:b9:54:b4:9c:
                    31:78:76:55:63:e3:02:d1:c4:c9:9f:a9:ca:48:f9:
                    fc:22:44:22:27:15:c6:21:b9:17:14:32:52:64:e9:
                    68:06:87:67:04:0e:e5:1a:d4:c4:7a:ca:4e:d8:7a:
                    0d:34:0a:3a:aa:fb:33:65:cd:c6:2e:0b:ae:1f:37:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:FA:BF:AC:7D:F9:D2:C9:83:51:50:E8:A9:2F:AC:6B:24:E0:4D
            X509v3 Authority Key Identifier:
                keyid:09:3E:BD:AC:B5:D9:19:E6:06:5F:30:F8:B0:82:71:98:23:54:B7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a3a2f33322d3438203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:71:b3:55:56:35:38:c3:0d:aa:67:e4:24:fa:ad:89:b7:
         c5:48:56:c8:94:22:87:e3:df:d1:b3:fe:69:35:3b:14:fd:47:
         1b:54:65:52:42:81:33:ef:a8:f0:02:1c:4a:31:c1:7d:c4:d2:
         31:6d:07:71:7a:e1:71:d3:6b:fa:81:b1:ef:1d:7f:26:1f:58:
         68:02:e4:f6:44:8f:c7:39:d1:21:ac:f2:d3:05:7a:9c:f8:fc:
         13:5b:b4:9e:9d:a7:25:13:3b:78:2c:86:10:bb:78:2c:4d:d6:
         8d:c2:69:89:d7:83:45:f3:a6:4f:49:77:84:d6:de:46:e6:22:
         19:e7:93:c6:30:5d:e1:b1:d9:50:b8:79:e8:3e:5b:1c:a8:72:
         d0:de:62:62:8a:06:47:cc:de:37:4e:0a:a5:ee:6c:46:27:cc:
         ff:4c:08:63:f3:1c:00:cb:88:c3:94:9a:2c:53:20:c3:8c:33:
         6e:8d:fb:6b:b3:37:9f:fc:c6:1f:76:6d:b2:27:93:5a:b7:ef:
         7f:35:e4:52:94:f8:cd:cf:ca:bb:af:ce:64:1a:9a:cf:ef:a5:
         3b:d3:ad:b9:9e:e5:b2:b1:bc:eb:51:45:23:9e:4c:67:3e:63:
         cc:fc:1d:6a:85:5b:36:9e:8b:0c:c3:f1:a7:b8:74:ea:da:f6:
         d9:bd:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:58:33 2025 by rpki-client