Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33322d3332203d3e20323638343633.roa (raw, json)
Hash identifier:          kQoB1/xhhnkgL++mVTYqDeOX506hJ1ycBAtcZRObRuI=
Subject key identifier:   25:35:37:04:D3:32:D3:08:01:87:3D:AB:2A:1F:C0:04:36:ED:2F:6A
Certificate issuer:       /CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
Certificate serial:       79A77F64AA62569C9E783C5112BCF95C7C967BDD
Authority key identifier: 4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
Signing time:             Fri 02 May 2025 18:22:13 +0000
ROA not before:           Fri 02 May 2025 18:17:13 +0000
ROA not after:            Fri 01 May 2026 18:22:13 +0000
asID:                     268463
IP address blocks:        2804:5194::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 20:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a7:7f:64:aa:62:56:9c:9e:78:3c:51:12:bc:f9:5c:7c:96:7b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
        Validity
            Not Before: May  2 18:17:13 2025 GMT
            Not After : May  1 18:22:13 2026 GMT
        Subject: CN=25353704D332D30801873DAB2A1FC00436ED2F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:75:45:b2:67:97:81:4d:4d:b9:2b:66:fa:
                    9f:fb:a7:0e:b7:4f:f7:00:cc:6d:94:43:c7:c5:6e:
                    24:78:e8:83:47:70:c4:17:5d:f4:3d:9e:7a:8c:47:
                    e7:9c:94:ee:9c:a6:da:17:dc:06:c7:3e:0c:77:a5:
                    6f:82:11:ea:0c:b8:20:6e:f7:2b:d4:14:bf:32:af:
                    04:b3:bf:0c:70:1d:56:3e:ff:27:f7:2c:56:ce:91:
                    5c:f2:a4:29:8b:55:a7:c7:8b:0f:27:bf:7f:1f:57:
                    ca:03:5d:12:03:01:49:5d:bd:bf:a0:72:e9:19:09:
                    2e:87:ae:09:69:ba:57:ae:b6:8f:22:e3:90:d6:bd:
                    ea:d5:be:ca:4a:9c:cb:86:95:64:d1:95:3a:ec:11:
                    7f:f0:c2:1f:a9:8a:27:ad:a6:e7:79:e8:f8:f4:2c:
                    f8:00:f4:65:fd:a9:97:5f:43:e3:cf:d4:a8:03:bc:
                    ac:d4:5d:1c:37:12:40:2b:74:8c:2b:f0:d5:c7:86:
                    62:7d:8e:5f:97:a7:97:4f:95:24:70:f4:46:08:a2:
                    22:02:c8:62:80:f7:3a:16:a6:1d:08:28:60:58:19:
                    a9:19:0a:aa:60:0f:c9:17:9b:7d:bc:6f:f1:54:1b:
                    db:9d:da:1e:7c:54:44:9a:db:79:45:fe:a0:7d:26:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:37:04:D3:32:D3:08:01:87:3D:AB:2A:1F:C0:04:36:ED:2F:6A
            X509v3 Authority Key Identifier:
                keyid:4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:64:37:ab:26:2a:ca:98:f9:03:4c:65:79:95:80:0d:2f:92:
         17:8b:b3:ed:92:5d:2a:55:dc:b5:47:fa:71:d1:6a:9d:0f:fa:
         e6:d0:0b:bf:c6:59:e3:6c:7f:05:55:ea:bc:bc:c9:de:38:8e:
         af:28:01:5e:73:af:69:74:5c:f8:00:92:68:8b:f9:07:63:d5:
         d2:09:fc:72:c6:a4:60:f1:bc:7d:98:66:ab:3a:07:79:3f:6d:
         eb:e0:7c:16:b1:2a:8a:b9:4a:dd:66:05:14:b1:c1:b6:f8:eb:
         5e:27:89:aa:95:4d:59:27:b6:2e:c1:b5:5c:cb:50:35:74:12:
         94:d1:4a:8a:de:3a:b5:88:89:5d:6b:7a:fa:ed:a0:f0:e9:99:
         c0:0f:73:20:43:25:de:64:b9:19:24:ac:a5:68:49:e7:0a:14:
         6a:64:de:f7:b3:05:52:6d:b5:16:62:c3:ce:84:d6:b7:87:a9:
         38:ef:f0:3f:7a:34:95:c3:3e:6a:48:db:bb:b6:a8:cf:f1:a9:
         4a:89:49:13:22:fe:cc:aa:4a:68:a9:d8:22:98:61:08:fe:07:
         98:9e:64:e0:ba:5e:13:32:96:cb:40:19:d3:30:fc:2a:39:4b:
         a1:cb:4c:b3:10:9b:99:c6:c7:7c:2e:5b:85:a6:ce:16:e6:a6:
         4c:f1:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:29:43 2025 by rpki-client