Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          lXrRPwWgtjiiQYtaR2oyQB2G67vdUy166V4VRuYTHwI=
Subject key identifier:   C3:C4:DF:C6:A5:DA:F1:36:9C:37:89:CE:4D:31:FA:FF:97:26:86:09
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       6DE7FF0E456759C4CF02FCF998B8DF8B9687C5D8
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Thu 06 Mar 2025 08:27:13 +0000
ROA not before:           Thu 06 Mar 2025 08:22:13 +0000
ROA not after:            Thu 05 Mar 2026 08:27:13 +0000
asID:                     267218
IP address blocks:        2804:4a18:bbbc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:ff:0e:45:67:59:c4:cf:02:fc:f9:98:b8:df:8b:96:87:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Mar  6 08:22:13 2025 GMT
            Not After : Mar  5 08:27:13 2026 GMT
        Subject: CN=C3C4DFC6A5DAF1369C3789CE4D31FAFF97268609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:d3:ab:2d:1b:d5:c0:e8:fb:53:24:f6:6b:
                    b1:8d:7a:f6:91:95:77:b7:97:59:09:f8:84:bb:b0:
                    79:3e:99:75:7d:64:bd:49:c3:d1:c5:ed:a2:6a:a1:
                    ea:df:aa:ce:aa:c0:af:2f:ba:f0:55:fe:14:8f:d2:
                    b0:10:10:b1:96:44:ce:21:2c:fa:8b:b0:25:6e:39:
                    c3:fc:a6:a8:a6:04:b7:55:e2:bb:ba:7f:2a:f3:05:
                    33:69:9d:17:77:00:de:61:0f:60:8e:82:b9:fb:e3:
                    1a:88:3b:a6:64:fa:63:c9:77:59:6d:7f:4d:b0:f5:
                    0e:59:f6:ff:72:5e:75:85:28:56:b6:2c:55:ef:c8:
                    f0:27:fe:71:a0:b4:c2:fb:0b:ce:40:2c:0e:fd:8f:
                    d8:17:5a:3a:1d:ef:8a:63:77:02:81:db:6c:2d:ae:
                    c1:91:15:22:4f:0a:db:ca:61:92:ea:9d:47:ca:b4:
                    a8:3b:2c:f8:63:7b:d2:2b:d3:ed:df:fd:ff:1d:d0:
                    b1:7e:c8:7e:5c:11:40:6d:f7:ff:c8:fe:12:6d:50:
                    94:0b:fd:8b:c1:15:a7:22:09:f4:dc:da:4c:ab:21:
                    e0:1a:70:c2:c2:84:40:3c:b5:de:05:1c:7d:de:3a:
                    30:1b:92:c9:00:a9:17:2f:44:a1:53:93:12:f3:4e:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C4:DF:C6:A5:DA:F1:36:9C:37:89:CE:4D:31:FA:FF:97:26:86:09
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a626262633a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:bbbc::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:72:36:86:5e:36:f0:13:64:a9:56:b4:96:01:52:bd:8c:bb:
         b7:ef:eb:7c:cb:1d:c7:68:0a:58:c4:f4:24:78:d0:8f:62:dc:
         80:bf:cd:f7:bd:fb:30:80:50:4a:f3:c7:52:b2:ee:14:fb:83:
         49:4e:39:c2:0d:18:af:64:53:1e:c5:b9:f7:79:5c:05:01:cc:
         7a:e9:b5:ce:c8:e6:c7:85:9b:15:f9:96:fa:6b:36:49:9e:4f:
         fc:e5:46:16:7f:23:f0:5a:17:3e:75:d0:23:87:f4:2b:54:bd:
         7e:d2:7e:fd:cc:40:e1:98:ea:63:68:06:f5:a2:47:a0:a6:a5:
         1b:7e:c4:86:5f:59:f4:8b:f8:e1:30:3f:30:7d:91:b1:a3:4c:
         57:88:02:b3:b4:10:00:ca:b1:3e:8b:4b:6b:46:8f:8e:ce:26:
         f3:b2:18:63:db:f7:4f:fc:3e:4b:72:b5:6e:cd:b0:98:ff:20:
         fe:52:42:5f:0f:bd:97:0d:4b:e3:23:b7:0c:01:71:f0:80:d8:
         48:10:da:de:fc:43:0c:6a:4c:fe:3e:bf:ec:b8:0a:e7:ac:a0:
         4c:3c:31:a2:6b:91:72:69:62:12:13:09:b0:20:4b:f2:e4:a9:
         7d:8d:a7:9a:8a:46:76:41:3a:91:37:aa:d5:17:bf:63:38:27:
         73:0d:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:47:00 2025 by rpki-client