Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          wJclfU20u4HIvcBj4IWRfYRwAghfTYp25LnArCa2f88=
Subject key identifier:   FC:34:F9:2A:24:B2:DE:A1:85:18:05:A0:7B:08:9B:50:3B:A1:8F:56
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       4476CEED8B6D2C409329625841300AD3800CC288
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:15 +0000
ROA not before:           Wed 05 Mar 2025 18:55:15 +0000
ROA not after:            Wed 04 Mar 2026 19:00:15 +0000
asID:                     266623
IP address blocks:        2804:3ed4:30aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 08:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:76:ce:ed:8b:6d:2c:40:93:29:62:58:41:30:0a:d3:80:0c:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:15 2025 GMT
            Not After : Mar  4 19:00:15 2026 GMT
        Subject: CN=FC34F92A24B2DEA1851805A07B089B503BA18F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:1f:b0:59:c8:78:e2:9b:53:c8:01:ba:84:
                    66:25:09:c2:b8:38:07:03:fa:b6:ea:fa:cf:8d:9b:
                    c3:c0:29:63:f3:f4:cb:89:01:7e:20:ac:14:bd:91:
                    03:a6:b2:bc:c2:b1:09:8b:ce:95:d6:c0:da:48:e8:
                    84:06:00:2f:9f:94:6f:a2:98:36:38:02:3d:e4:80:
                    21:bb:46:c3:00:ec:67:8c:1a:db:e6:f6:87:64:f1:
                    d2:09:67:25:b5:df:e1:ef:1c:9e:a0:2d:6b:6b:b6:
                    e6:b4:53:8d:67:e1:f7:a7:39:77:f1:ed:80:74:ca:
                    34:66:8e:99:d0:33:34:9b:39:98:87:de:f5:cb:e0:
                    c8:f0:5d:c5:d5:70:15:d5:81:f4:27:3d:a9:5c:56:
                    ff:82:2c:bf:18:49:1a:81:34:27:eb:0a:18:9b:bf:
                    a5:e0:6d:0b:28:14:dc:0d:1b:a9:50:07:53:c9:70:
                    8e:28:de:44:04:1c:b6:56:22:c4:8d:ae:dc:c1:ed:
                    16:f5:70:3c:31:b0:e1:97:c8:a3:30:a1:cb:89:2e:
                    ce:fe:4f:05:b8:05:ca:c6:a7:fb:bb:31:39:25:18:
                    be:fe:39:57:75:11:bc:ca:2f:d4:8a:ab:de:99:dc:
                    1a:73:f2:4c:c4:bd:5c:e4:d6:82:d5:33:39:f0:91:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:F9:2A:24:B2:DE:A1:85:18:05:A0:7B:08:9B:50:3B:A1:8F:56
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a333061613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:30aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:95:42:fc:70:ba:6e:5f:d6:37:7a:8b:11:f4:43:70:00:66:
         55:a4:d6:8d:4d:ee:21:f3:ef:32:7a:55:00:d1:f7:0e:7e:b1:
         b8:01:ea:89:c4:37:9a:75:3e:86:6e:83:3f:18:80:36:ed:ce:
         36:62:ab:e1:db:f6:00:26:fd:dc:4c:d3:30:91:40:c4:63:2f:
         26:68:c7:43:56:65:45:4a:1b:ce:84:d1:09:5a:e3:97:28:3c:
         05:6f:73:fc:12:6e:4a:74:f4:7b:bd:1e:c9:79:ff:a7:95:1f:
         54:46:dc:a2:1f:4e:77:8a:37:d4:67:88:f4:a3:d7:a0:1d:8c:
         df:a5:4d:38:cc:b8:41:85:73:f8:c8:08:56:a3:eb:e4:38:75:
         32:79:61:0d:29:5c:3d:1e:67:4f:7e:0d:79:82:a4:a1:ad:bf:
         38:50:10:59:d3:e4:fc:ae:38:0d:16:82:9c:ab:d4:24:cc:11:
         0a:af:9d:c9:76:52:64:c7:45:2c:78:d6:80:a4:fc:ef:19:2b:
         37:55:50:3e:e8:7e:a0:05:1e:ac:67:43:ee:79:f2:d4:a6:d0:
         d4:8d:9c:61:2c:e9:67:e5:83:70:df:15:9d:39:73:1d:c7:a0:
         5b:36:5d:a9:ad:1d:63:26:4b:f9:93:d5:a7:f6:93:45:1d:99:
         56:b5:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:46 2025 by rpki-client