Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
File:                     323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier:          zPMPELz3viliGV7Mm3jtecbR+RVZtd0ijcahbgq24mA=
Subject key identifier:   39:EA:0B:45:D0:62:1F:90:7C:D7:17:DB:88:CE:B0:71:17:55:F8:AD
Certificate issuer:       /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial:       628ECE187AE4F6601B1D3D19893F3E96C3473C0F
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
Signing time:             Wed 30 Apr 2025 17:17:50 +0000
ROA not before:           Wed 30 Apr 2025 17:12:50 +0000
ROA not after:            Wed 29 Apr 2026 17:17:50 +0000
asID:                     265080
IP address blocks:        2804:3278:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 14:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:ce:18:7a:e4:f6:60:1b:1d:3d:19:89:3f:3e:96:c3:47:3c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
        Validity
            Not Before: Apr 30 17:12:50 2025 GMT
            Not After : Apr 29 17:17:50 2026 GMT
        Subject: CN=39EA0B45D0621F907CD717DB88CEB0711755F8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:2d:0d:92:d1:9c:69:c9:36:58:51:55:24:
                    a2:44:58:33:60:f2:3a:9c:a5:3e:40:16:c4:1e:fa:
                    72:6c:fd:d5:d5:f2:4b:68:66:71:49:02:b8:9e:cb:
                    86:33:f6:d3:8e:45:f4:13:70:0f:3f:ab:5b:f5:26:
                    c0:96:a3:ba:10:57:b7:65:37:ef:79:aa:77:f4:cf:
                    4b:4f:ee:f9:fd:28:77:0e:3d:a6:cc:01:7c:0c:43:
                    a5:d9:d2:22:a4:25:67:a3:58:df:bd:de:1e:42:92:
                    53:9a:6a:98:fa:56:4f:1c:93:7c:a2:50:f1:7e:c0:
                    30:1d:c4:44:5f:15:be:db:df:60:93:d3:38:ae:7a:
                    6c:0f:1c:d0:0a:bf:d5:61:b7:61:a5:7e:6e:1f:8c:
                    84:1f:b0:0a:c8:2a:c0:28:95:92:46:99:5f:80:1f:
                    9c:a8:f9:2b:2a:89:60:df:10:f8:f4:6f:b4:5f:40:
                    50:a7:88:4d:69:c6:ad:02:e7:4d:77:7d:35:bf:0e:
                    e9:4d:83:27:11:e5:b0:fc:ca:c8:c0:57:68:78:d7:
                    cd:d3:49:fa:fc:13:a4:12:71:7e:f0:74:d4:39:43:
                    0a:93:12:5c:d5:52:9c:f1:ce:49:e6:dd:aa:79:6f:
                    36:d4:e9:89:d2:4e:ce:8e:89:c9:0b:85:9c:c5:0c:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EA:0B:45:D0:62:1F:90:7C:D7:17:DB:88:CE:B0:71:17:55:F8:AD
            X509v3 Authority Key Identifier:
                keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:42:d4:f4:90:e6:32:50:f3:df:ee:38:11:11:76:b8:de:
         9d:84:01:2b:32:6f:6c:26:cf:eb:9e:03:d9:a2:8f:bf:39:dd:
         c0:02:81:ba:71:33:93:9d:86:e5:e2:cc:33:49:54:b9:d1:63:
         82:50:11:43:be:67:13:8a:37:9f:53:22:27:59:65:f2:af:24:
         1f:74:b1:03:6b:1f:ff:96:a6:ed:8c:9a:53:a3:12:98:59:22:
         db:b9:e1:ce:33:d7:af:c1:15:ec:99:4d:a9:c4:6b:93:b1:54:
         11:69:c7:9d:b4:fc:c7:27:2e:ab:24:93:7e:4a:ec:a3:3f:ac:
         06:72:7f:5b:d3:4e:96:30:93:28:41:6e:c0:2d:7d:20:2d:27:
         5a:14:44:59:0e:88:ed:7a:32:bc:76:8b:a1:0a:b1:99:0a:dc:
         b5:c5:11:c7:27:db:9f:d7:c8:76:52:21:e7:e9:16:d1:cb:dc:
         27:ed:df:ee:87:5d:c8:a2:f3:ed:bf:bf:8b:90:d0:b8:59:14:
         22:f0:07:6d:bb:c1:92:bd:3d:79:b2:ed:1e:6c:35:86:7e:de:
         b8:3e:06:3a:8b:58:57:a1:50:c2:7e:39:84:5b:11:8d:af:e4:
         19:e4:e6:1f:2c:3b:d9:a5:cf:70:84:bf:a3:3c:92:06:31:e9:
         93:f4:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:23:18 2025 by rpki-client