Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20313938393439.roa
File:                     323830343a346433633a3a2f33322d3336203d3e20313938393439.roa (raw, json)
Hash identifier:          gsQK1PgDks8QiwMMUnMxsD3qw8Ziq6qnXnZiL9NdYf8=
Subject key identifier:   DE:78:2E:5C:6D:79:71:1C:5D:E4:5F:D9:9C:51:2A:DE:DC:DE:93:E2
Certificate issuer:       /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial:       6A283675D68B1E666E36F41A51BDABC7CC8B7267
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20313938393439.roa
Signing time:             Mon 12 May 2025 14:12:53 +0000
ROA not before:           Mon 12 May 2025 14:07:53 +0000
ROA not after:            Mon 11 May 2026 14:12:53 +0000
asID:                     198949
IP address blocks:        2804:4d3c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 05:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:36:75:d6:8b:1e:66:6e:36:f4:1a:51:bd:ab:c7:cc:8b:72:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
        Validity
            Not Before: May 12 14:07:53 2025 GMT
            Not After : May 11 14:12:53 2026 GMT
        Subject: CN=DE782E5C6D79711C5DE45FD99C512ADEDCDE93E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:86:9a:81:92:89:c7:0a:f8:7f:f3:fc:ae:
                    75:24:66:76:85:e2:63:20:79:fd:ef:5e:f6:5b:e6:
                    e2:25:32:8b:c1:79:67:38:72:d1:50:d9:94:10:cc:
                    33:84:59:37:62:98:b8:58:57:3e:91:be:cb:e9:df:
                    d6:b0:d6:d6:9d:44:2e:45:95:49:56:86:d6:34:46:
                    65:65:da:d8:9c:0b:a0:9c:e1:11:5f:10:c9:43:27:
                    13:78:e6:60:e6:40:47:be:76:c3:2f:ef:65:1c:df:
                    e2:16:fb:02:51:fc:ac:4b:46:6d:16:0e:90:fb:6f:
                    07:3a:44:d6:62:f3:ae:f0:3a:c8:82:bf:6e:4a:b0:
                    c4:65:f2:0a:27:12:4a:4e:f1:94:4a:26:b3:ab:08:
                    bf:fc:d6:af:5b:6e:bd:89:cf:53:79:b4:57:eb:c5:
                    7d:20:a2:00:a3:9c:5b:c1:e5:cc:5c:59:71:23:09:
                    18:06:c7:ca:1d:68:95:bf:c6:0c:86:17:73:29:96:
                    a7:29:f1:f8:7c:04:c1:a3:4e:ee:a1:d0:19:95:13:
                    55:e0:cd:f8:ff:92:44:4a:c7:d9:93:a7:af:9f:8d:
                    0d:01:4d:9b:49:02:0f:c1:f4:5d:a8:9d:86:65:af:
                    6f:81:d0:ef:08:57:ff:9a:8a:aa:1b:1e:4a:57:dd:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:2E:5C:6D:79:71:1C:5D:E4:5F:D9:9C:51:2A:DE:DC:DE:93:E2
            X509v3 Authority Key Identifier:
                keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3a2f33322d3336203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:da:16:7f:24:be:0f:64:4b:5d:a9:bb:89:2c:cd:97:68:
         46:2e:75:f2:c5:e9:ab:9c:c8:b4:4b:0a:c2:64:9e:3e:f6:db:
         21:6e:24:28:18:1e:c4:11:30:1b:e1:12:fb:bb:ea:85:8b:af:
         67:4e:47:ba:14:32:ac:b7:9f:e1:82:34:b0:f2:ac:81:88:c0:
         38:fd:b8:62:21:bb:a4:d7:5b:9b:2f:b7:15:f7:9a:76:1a:a5:
         51:1f:6e:c2:c9:b0:91:1f:3e:d5:33:34:a4:75:fa:2a:73:f1:
         7a:f4:3f:8f:c4:ae:37:da:a4:f8:d7:1d:b4:6e:95:44:ef:bf:
         b3:a7:8f:3d:07:8a:a7:76:85:41:d3:38:d5:7d:a1:cb:18:6e:
         52:b9:7a:50:34:fb:58:b4:7b:d7:1d:b1:1e:1d:e6:c2:38:57:
         86:0c:ef:ae:a2:55:46:10:55:fe:6e:e1:bc:4d:0d:01:65:c0:
         76:ca:c7:72:88:39:f4:ee:03:3d:73:31:0a:00:16:e9:e0:e4:
         16:83:13:a2:f3:99:5d:32:92:b0:9b:cd:b1:fd:8a:7b:26:88:
         7e:77:b0:79:ec:ee:1a:43:0a:b3:55:dd:de:c9:da:37:c1:b5:
         ff:ac:a8:c0:5a:ef:ac:65:89:7e:d7:83:75:97:4b:6d:73:16:
         ef:0e:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:22:00 2025 by rpki-client