Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (raw, json)
Hash identifier:          8+nSpPJH1mWadb3YC8Aq/Gb56/HEcP+cD/KgG5mVhXc=
Subject key identifier:   07:64:A6:3A:06:B8:AA:26:A7:48:5C:F2:BE:4A:76:70:DE:F6:EA:4A
Certificate issuer:       /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial:       675E852B84D7E8F87FBC705144BDC85F04701BBA
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
Signing time:             Wed 30 Apr 2025 17:17:50 +0000
ROA not before:           Wed 30 Apr 2025 17:12:50 +0000
ROA not after:            Wed 29 Apr 2026 17:17:50 +0000
asID:                     265080
IP address blocks:        2804:3278::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 16:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:85:2b:84:d7:e8:f8:7f:bc:70:51:44:bd:c8:5f:04:70:1b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
        Validity
            Not Before: Apr 30 17:12:50 2025 GMT
            Not After : Apr 29 17:17:50 2026 GMT
        Subject: CN=0764A63A06B8AA26A7485CF2BE4A7670DEF6EA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:bf:40:8c:cf:aa:dd:d6:a6:87:13:e9:22:
                    b9:0f:c9:bd:a6:3b:1b:39:8b:0b:ad:be:d6:2e:14:
                    c6:ea:28:72:33:66:c4:0c:d6:ad:84:31:cd:dd:93:
                    e6:ce:1e:2a:c5:c0:00:12:b1:6b:c3:b1:fd:a5:f1:
                    0d:c6:c5:fb:10:d2:6b:98:9d:f0:32:0e:f3:86:28:
                    45:5b:10:90:14:51:10:04:fb:5c:4b:5f:61:7e:e3:
                    24:d7:01:4a:1b:69:32:fc:da:32:2d:cc:0a:1f:bc:
                    dc:e5:4b:e8:86:ac:87:12:e3:bd:b2:22:0e:71:3c:
                    7f:5c:67:34:22:c2:36:d3:57:80:e6:28:3d:a4:0f:
                    94:1c:2f:3c:c8:08:36:e1:32:2b:a2:26:82:5d:7b:
                    b5:48:7e:b9:0a:a2:09:ea:56:ed:80:a3:7e:05:c3:
                    80:92:8f:7e:f1:e6:f2:d4:82:b1:c8:21:3e:e2:b3:
                    5b:50:2a:ea:6e:2e:22:aa:73:98:04:bc:32:20:1a:
                    cb:dd:a5:b4:27:4c:60:3e:f1:19:21:f7:65:3e:cf:
                    21:9b:6c:7f:59:2e:81:aa:30:2f:d3:e4:29:ac:7b:
                    cd:ed:94:b6:94:13:56:ae:b9:18:ec:b5:c9:c7:8f:
                    9d:a3:16:7b:67:8f:02:bc:f0:f2:96:dd:ba:36:1a:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:A6:3A:06:B8:AA:26:A7:48:5C:F2:BE:4A:76:70:DE:F6:EA:4A
            X509v3 Authority Key Identifier:
                keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/33

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:ab:10:22:ae:4a:df:b4:b3:0f:af:8d:17:07:e5:a3:0f:
         3c:e6:28:88:3e:cd:0f:30:57:9f:48:56:74:91:a4:64:de:dc:
         e9:fe:60:6e:51:4f:61:9d:61:33:36:28:4a:ca:4c:32:d6:f8:
         55:08:12:2c:cc:d9:34:20:01:fd:83:c8:7c:7c:6b:4b:b7:a4:
         84:01:5b:97:d3:55:d7:3f:79:97:cf:7a:89:80:76:5c:d9:64:
         fb:ed:8d:84:44:f2:00:f0:fe:04:4a:45:33:8a:3c:e4:e0:71:
         01:94:98:aa:c6:d4:9d:8c:17:17:57:8e:a1:18:6c:6a:ba:81:
         39:60:3c:5e:82:41:df:85:45:74:64:ac:bd:81:42:f5:fd:70:
         9f:19:11:ad:86:81:ff:69:6a:66:0b:c9:59:e3:0f:15:f7:74:
         9c:7b:73:42:8d:6c:ec:fd:15:3f:ac:58:af:47:c9:5d:1b:73:
         ad:12:d7:90:97:ba:6b:a0:b1:03:d5:f1:55:6d:f1:b3:4a:a0:
         2f:4d:f6:2a:c1:7c:78:01:c0:ec:55:f8:5b:84:fd:47:db:4e:
         9b:9e:4f:2e:2d:28:30:e8:dd:e6:1c:f4:40:78:46:1a:a4:3e:
         56:45:65:63:a2:45:83:7d:71:cf:a5:55:3f:93:ea:5a:45:7d:
         41:e2:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:00:32 2025 by rpki-client