Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier:          2fdKKn80lnG4FYFd1z+5TNJ+8tM/N6wXIBDJsecFuGI=
Subject key identifier:   15:1F:10:E3:31:08:C1:22:DC:DB:06:1E:60:74:BB:F8:3E:0F:8F:F4
Certificate issuer:       /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial:       2CC5F7DD3B065535B624D328EBF37CF35110793E
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
Signing time:             Wed 30 Apr 2025 17:17:51 +0000
ROA not before:           Wed 30 Apr 2025 17:12:51 +0000
ROA not after:            Wed 29 Apr 2026 17:17:51 +0000
asID:                     265080
IP address blocks:        2804:3278::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 22:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:f7:dd:3b:06:55:35:b6:24:d3:28:eb:f3:7c:f3:51:10:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
        Validity
            Not Before: Apr 30 17:12:51 2025 GMT
            Not After : Apr 29 17:17:51 2026 GMT
        Subject: CN=151F10E33108C122DCDB061E6074BBF83E0F8FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:e7:09:fb:ea:33:70:e9:67:cd:02:65:11:
                    41:73:3f:0a:69:7d:e9:29:62:e4:9c:41:ce:59:e4:
                    0d:42:bb:21:77:e3:64:46:1e:8c:70:e4:65:36:23:
                    2f:36:30:fe:3f:51:23:06:be:a4:a7:79:08:23:69:
                    87:6a:ff:1c:2a:d0:a6:63:2c:29:fa:97:6c:81:79:
                    73:f4:77:32:59:af:d7:b3:85:5e:c8:b5:1c:f1:2e:
                    61:58:e8:b1:34:02:aa:51:fe:d3:4b:35:42:5c:b6:
                    ad:e5:d7:9f:ca:eb:13:46:aa:b1:4f:b8:17:5c:b4:
                    6b:41:fa:e7:1f:ca:aa:ff:4a:30:ca:67:2d:cc:62:
                    e9:17:27:1a:43:d3:a8:b7:c7:16:25:11:58:ea:8e:
                    0b:13:c4:58:78:9f:b2:1c:56:fe:23:2a:72:ff:4a:
                    df:f3:d1:9a:7e:0f:fe:41:7b:2a:b8:c8:0e:b9:02:
                    11:8d:aa:c1:82:d9:22:2d:89:d3:6f:c8:e8:72:c4:
                    68:c2:69:f6:3c:af:b4:97:9c:91:97:0c:48:6a:7c:
                    4b:5c:98:85:18:79:20:88:b3:2d:15:f7:fd:b1:dd:
                    7d:99:6a:7f:19:95:e8:4a:c3:23:29:a5:02:39:09:
                    7e:d3:a9:86:05:fa:fd:4f:be:c5:ed:bc:0e:d6:31:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:10:E3:31:08:C1:22:DC:DB:06:1E:60:74:BB:F8:3E:0F:8F:F4
            X509v3 Authority Key Identifier:
                keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:27:b2:a1:f0:e8:ca:be:00:ab:38:b0:e9:fa:50:39:08:53:
         7a:1d:25:d7:b9:7a:73:38:b2:71:47:7f:3f:3b:33:33:ac:10:
         98:dc:6e:ac:a6:9e:a4:5e:e5:dd:4c:40:36:d6:f0:c6:97:eb:
         da:20:8a:e0:c8:db:51:a9:28:ee:ae:63:2d:c4:c0:62:b3:ed:
         e4:c0:8b:cc:13:3b:58:2c:f5:23:7c:69:49:30:5d:a1:39:89:
         c8:71:31:52:92:30:2f:18:a9:12:44:45:e5:f6:86:e4:4f:73:
         dc:5e:5b:65:0c:1b:57:85:3e:44:62:e6:07:75:59:88:0b:e9:
         0f:36:a3:8f:53:9f:1d:91:e4:8a:e9:8f:70:2e:b0:bf:97:d3:
         0c:08:66:e6:30:27:21:1b:aa:7a:f8:a5:cd:23:27:00:3f:31:
         9c:89:92:41:e1:c1:f7:8f:99:e5:15:b5:cb:5c:04:bb:dd:d4:
         82:2f:9d:3b:9a:a7:2c:ac:5b:16:91:6a:02:fa:7e:c4:c7:f0:
         67:4c:4a:3d:3e:44:cf:c7:c8:0d:b5:98:05:ba:7f:f4:2e:11:
         c5:33:15:e6:43:79:25:22:d9:5b:97:46:e0:f3:b7:77:d2:ed:
         99:32:db:20:fc:4d:a7:90:89:ff:6c:c1:95:49:cc:cc:2d:15:
         11:11:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:23:47 2025 by rpki-client