Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          f19sA2rS0LijyX4kEOq8Ui1IPSfQOmK5BHbRxMygOt8=
Subject key identifier:   F9:DA:50:3E:2E:79:84:4A:78:9B:6C:AC:1D:94:AE:0A:30:6B:FB:8D
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       31477C5B18FB2CBCCEEAF8C058C43BDCAF4EEDFC
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Fri 28 Feb 2025 14:54:51 +0000
ROA not before:           Fri 28 Feb 2025 14:49:51 +0000
ROA not after:            Fri 27 Feb 2026 14:54:51 +0000
asID:                     265919
IP address blocks:        2804:3fd8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 00:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:47:7c:5b:18:fb:2c:bc:ce:ea:f8:c0:58:c4:3b:dc:af:4e:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Feb 28 14:49:51 2025 GMT
            Not After : Feb 27 14:54:51 2026 GMT
        Subject: CN=F9DA503E2E79844A789B6CAC1D94AE0A306BFB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:4e:07:a4:6c:62:0d:78:74:c9:81:58:49:
                    e5:95:c6:d5:03:1e:f9:9b:ef:c6:7d:8c:c8:b5:d3:
                    7f:ec:0d:27:87:94:1a:af:38:4c:2b:9b:7a:bc:fa:
                    df:2c:4f:87:c0:24:15:91:a1:6d:61:88:1d:5e:31:
                    5b:3f:47:c1:1b:b5:89:50:08:e5:95:c8:28:f7:c8:
                    d6:8b:e3:e5:45:5f:ea:84:72:53:12:27:75:78:23:
                    57:a3:55:77:1d:88:69:cc:f6:d9:dc:8f:fc:ef:75:
                    78:c6:53:55:28:c7:87:49:f8:fc:95:93:c5:c4:c8:
                    6a:29:85:ff:e6:1d:0d:1d:93:cf:9e:ff:11:25:56:
                    cd:53:a5:4b:a1:2c:46:3c:b4:ba:0c:e4:b1:30:54:
                    dd:2a:5d:c6:5a:bc:db:5f:8a:7f:d9:fc:42:95:22:
                    11:53:12:03:12:52:c0:1d:d7:2c:f5:99:44:35:bb:
                    10:26:7c:70:73:a3:53:c2:92:d0:b1:61:d7:db:22:
                    d3:0c:27:31:bc:aa:80:fc:4e:77:b2:7e:21:00:67:
                    db:1b:53:53:c9:64:4a:58:87:f3:2f:0c:b6:0f:32:
                    8f:0b:58:7b:4d:d2:1b:04:31:0d:86:98:c0:4f:01:
                    b3:27:7b:86:56:07:83:49:90:cb:8a:09:59:3e:f4:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:50:3E:2E:79:84:4A:78:9B:6C:AC:1D:94:AE:0A:30:6B:FB:8D
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:e1:0f:bf:b6:44:22:c6:6c:da:55:c3:d5:f9:b4:52:0e:
         20:1c:7c:70:7f:e8:75:ed:73:b1:5b:65:54:7e:cb:a0:b9:27:
         06:00:88:25:a9:3d:b5:f5:f4:9f:55:36:ca:70:5d:cf:25:03:
         3b:3e:ae:66:5b:29:08:84:09:86:84:c6:a4:d4:b3:08:1b:b7:
         ca:aa:8e:c5:c2:01:0b:bd:de:eb:54:da:69:ff:76:0b:3e:c9:
         46:93:d1:6c:5c:c7:90:97:af:9f:87:be:0f:ac:9e:71:49:f7:
         b9:8c:7d:ad:a6:4d:5b:16:72:99:64:68:0e:38:0f:f3:08:f3:
         cd:5b:8f:c7:2e:38:3a:38:24:d5:7a:c8:90:25:44:15:1d:c8:
         eb:13:92:ef:8d:0f:40:e7:15:a8:c8:d5:37:8c:99:65:d1:e5:
         dc:f6:c7:db:f5:6b:0e:fa:67:d1:4b:43:0a:db:35:86:49:10:
         09:a5:c7:b5:5f:66:ea:e0:45:f7:54:74:e2:70:bc:f4:ac:ff:
         84:39:91:59:45:9a:ea:a8:0e:dd:a2:a5:13:74:16:68:e3:aa:
         15:f3:60:95:a9:1d:9e:95:e4:51:49:c8:76:5a:65:06:43:10:
         db:05:f9:da:0a:cf:58:df:d7:1e:19:5c:5b:ca:6d:90:11:a3:
         80:6c:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:50:49 2025 by rpki-client