Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa
File:                     323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa (raw, json)
Hash identifier:          VOT95Az+vwZ3aHynOszEMU6TnuJNg36KwJqlCVGESws=
Subject key identifier:   E6:BB:43:C0:60:5B:2D:D7:BD:EF:C5:E0:EC:B8:FA:7B:C4:39:42:B0
Certificate issuer:       /CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
Certificate serial:       6C26E26D80246F6B38A055D70D32F32A951D6507
Authority key identifier: FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa
Signing time:             Fri 11 Apr 2025 12:03:10 +0000
ROA not before:           Fri 11 Apr 2025 11:58:10 +0000
ROA not after:            Fri 10 Apr 2026 12:03:10 +0000
asID:                     271137
IP address blocks:        2804:76d4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 20:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:e2:6d:80:24:6f:6b:38:a0:55:d7:0d:32:f3:2a:95:1d:65:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
        Validity
            Not Before: Apr 11 11:58:10 2025 GMT
            Not After : Apr 10 12:03:10 2026 GMT
        Subject: CN=E6BB43C0605B2DD7BDEFC5E0ECB8FA7BC43942B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:72:d0:35:4e:f1:d1:f2:57:31:24:be:fb:
                    38:97:0d:bb:71:e9:b0:ac:3c:3b:04:b7:67:29:e7:
                    99:dc:00:cb:00:25:9d:35:68:0d:4b:27:88:d1:af:
                    a7:5b:20:50:b8:a1:fa:62:1f:96:70:da:ae:64:3c:
                    a8:c5:f2:c4:3e:06:83:9e:99:95:02:13:f7:91:d0:
                    44:53:c4:70:fa:28:11:90:fd:14:7e:bf:42:20:66:
                    89:d1:3b:b7:1b:6f:80:eb:5e:4f:00:7e:b4:c2:b2:
                    09:dd:93:e2:ff:88:a0:e8:e6:81:26:99:b3:68:4c:
                    7b:1c:cb:85:31:83:c2:87:53:cb:91:4a:e7:bc:66:
                    5b:7c:6b:de:bc:d9:81:aa:79:97:a5:cd:96:a3:5b:
                    20:a7:91:db:e9:96:b4:f1:4c:54:00:24:c7:4c:64:
                    c9:ed:ba:08:39:5a:8d:a2:94:0c:38:fd:84:d7:e7:
                    7e:90:43:67:fc:70:06:8a:75:c6:d0:9a:f9:6f:5e:
                    c2:41:6a:36:01:11:6e:88:26:ae:eb:21:eb:d2:19:
                    0a:60:d8:3b:4b:45:71:7c:b5:15:65:a8:88:a9:f7:
                    d5:bb:ce:b2:0f:0f:a1:7a:0e:33:91:48:9c:77:d3:
                    7e:aa:f4:88:1c:01:93:78:43:a5:58:df:56:34:45:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:43:C0:60:5B:2D:D7:BD:EF:C5:E0:EC:B8:FA:7B:C4:39:42:B0
            X509v3 Authority Key Identifier:
                keyid:FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         54:81:0a:d8:a5:b9:7c:e0:49:ec:8c:f4:3b:8f:03:bb:b4:38:
         60:85:e0:a0:64:65:a0:a1:53:ef:95:63:47:32:79:5e:25:88:
         f0:70:38:57:9a:5a:aa:f7:9b:de:2b:8b:61:0f:8a:19:fb:85:
         ed:6e:0e:cd:c5:fa:13:a6:13:0c:80:96:fa:6c:16:75:54:b7:
         86:0d:31:47:9b:bc:a7:b6:81:39:f9:74:4a:37:24:bd:82:38:
         10:b2:c4:b5:7b:11:1b:5c:4b:c3:e2:8a:b6:82:4f:77:27:c9:
         e5:5e:69:91:42:c1:77:da:50:6a:e0:18:b0:8b:4b:c3:e2:37:
         d1:23:b9:71:12:b9:a2:38:b8:91:fd:16:b7:be:1c:27:87:d1:
         63:b5:d0:f4:51:20:70:85:e5:55:50:6e:1f:65:d9:86:09:32:
         4d:cb:59:3c:8b:18:dd:dd:2f:39:b5:c2:6a:b7:57:b5:3d:28:
         bc:cf:dc:63:3c:7a:c5:5b:c7:da:e1:ed:b5:84:d4:f4:d5:8b:
         fb:02:ac:60:ef:ee:46:03:90:ea:25:31:b3:64:d0:bd:e2:42:
         bd:32:ce:dc:d4:2f:3c:87:fc:b0:b4:6d:11:e4:e2:a6:60:bd:
         80:ba:c1:16:02:d0:ce:95:e5:2e:86:2d:fe:75:22:58:c7:a1:
         85:66:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:38:44 2025 by rpki-client