Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          BuY3JAd+I4GQ4Isw/fBgvSFhIYsLCQ++juQp2KHBFd8=
Subject key identifier:   FF:FC:F6:87:39:02:0C:63:FA:1D:03:5A:69:BB:20:8A:58:B1:4D:06
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       6CADB00A0F5CBF72008689B958063E36E4962F43
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Thu 06 Mar 2025 08:50:15 +0000
ROA not before:           Thu 06 Mar 2025 08:45:15 +0000
ROA not after:            Thu 05 Mar 2026 08:50:15 +0000
asID:                     264589
IP address blocks:        2804:2210::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ad:b0:0a:0f:5c:bf:72:00:86:89:b9:58:06:3e:36:e4:96:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Mar  6 08:45:15 2025 GMT
            Not After : Mar  5 08:50:15 2026 GMT
        Subject: CN=FFFCF68739020C63FA1D035A69BB208A58B14D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:36:a0:ee:74:9a:a4:46:1f:c7:67:56:64:80:
                    2c:86:1d:c7:84:61:4b:07:42:3d:68:4c:5f:82:0a:
                    5c:8e:1f:c0:63:42:b6:ca:e3:7b:70:8c:7d:7e:98:
                    d4:db:c3:83:66:0c:f2:69:35:21:58:0d:af:60:86:
                    f8:9c:77:14:ff:71:57:1f:9d:53:0e:43:3d:6c:63:
                    22:d5:c0:cb:a0:46:90:3e:64:44:70:b2:0d:4d:b1:
                    82:d9:29:c1:09:db:05:fe:d4:28:76:ad:c3:b0:22:
                    dd:2d:ce:ad:46:0d:8c:2e:73:70:88:72:fe:d4:44:
                    2b:13:16:97:34:c8:0e:9a:db:79:8a:23:8a:15:60:
                    28:78:63:d3:c0:03:52:b4:d8:80:d1:a2:ec:d4:94:
                    de:72:cd:f9:90:f6:91:24:fc:ca:45:04:a8:f0:9f:
                    04:30:fe:3f:ed:bc:2e:f0:91:81:53:4c:2c:d8:7c:
                    f2:16:7a:38:7d:58:6a:75:61:55:b5:3c:31:3f:01:
                    ed:97:2a:bc:74:52:73:6d:5f:c6:96:82:e8:35:89:
                    50:da:ab:6b:d7:77:b7:d3:10:83:d4:79:1b:eb:3a:
                    dc:67:b3:8e:19:38:1a:e6:65:23:78:1e:51:b6:e5:
                    a7:59:5c:a8:84:fc:33:d1:c1:f5:99:3c:a8:f6:70:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:F6:87:39:02:0C:63:FA:1D:03:5A:69:BB:20:8A:58:B1:4D:06
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:19:78:0b:8b:77:60:0f:86:b5:51:ec:63:c5:28:c8:f3:
         b0:e0:25:45:79:74:04:a7:58:85:8e:ed:6d:d0:53:d3:84:9a:
         51:40:c4:ea:c0:aa:24:ba:2b:3b:6a:e1:1c:18:2f:05:83:38:
         95:50:13:90:14:90:6c:b7:68:56:4d:d8:78:bd:fa:0b:f5:9e:
         d3:59:a4:ef:fc:7c:c4:59:17:e9:3d:a9:3a:3c:3f:b8:b3:ba:
         2c:40:06:3b:27:0d:49:2b:29:c7:e7:23:ba:23:8c:5c:89:16:
         eb:c7:86:ad:b8:cd:ed:ba:2d:e0:ab:c5:b5:b6:89:25:8b:94:
         46:f5:b7:04:f3:9a:fb:54:1b:36:8a:c2:af:e8:be:6a:ef:75:
         3b:c4:f0:a8:ea:33:fe:79:fa:ab:79:17:8c:f3:9d:98:38:90:
         65:3b:29:5c:f9:62:e3:a5:e8:ec:7b:90:1e:05:e3:1a:83:11:
         ca:6f:36:22:49:bd:17:1f:16:fd:0d:9e:f1:ad:fd:58:5e:80:
         ac:7e:92:69:11:bf:bd:05:51:bd:3c:66:02:8a:bb:b9:9a:a3:
         b5:81:b4:51:90:8a:6a:b5:f6:c2:9d:ee:dd:47:1e:42:4d:71:
         58:e0:75:74:fa:8d:ca:5c:4b:2c:14:a6:41:49:ff:c6:2e:94:
         60:d6:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:04:59 2025 by rpki-client