Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
File:                     323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (raw, json)
Hash identifier:          7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=
Subject key identifier:   69:2C:9F:70:83:23:67:51:65:63:D4:E5:10:B8:FF:FB:31:6B:A4:89
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       1FCDE3A0D1543467D7F5B76B576D51CCE512477C
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:39 +0000
ROA not before:           Thu 06 Mar 2025 07:20:39 +0000
ROA not after:            Thu 05 Mar 2026 07:25:39 +0000
asID:                     267024
IP address blocks:        2804:46fc:6006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cd:e3:a0:d1:54:34:67:d7:f5:b7:6b:57:6d:51:cc:e5:12:47:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:39 2025 GMT
            Not After : Mar  5 07:25:39 2026 GMT
        Subject: CN=692C9F70832367516563D4E510B8FFFB316BA489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:67:07:7d:af:60:af:ee:2c:97:2b:ed:06:
                    24:91:41:4d:de:4e:21:6c:31:05:f5:e0:ae:a6:a9:
                    40:39:74:4e:06:16:c9:22:8b:e8:af:3e:2b:52:6d:
                    41:79:7b:e4:17:5b:4a:81:87:b4:7c:83:76:f3:59:
                    7f:a6:4a:90:d4:eb:68:00:e0:7a:34:31:f7:ec:e9:
                    c1:1b:7b:e7:20:e0:96:b9:c9:e3:0d:7d:b7:1c:a8:
                    69:8f:af:1c:37:26:ab:3d:c2:f1:ef:58:78:93:53:
                    15:f2:6a:be:4f:e5:d2:78:37:cb:a1:c6:e1:38:1f:
                    82:3a:9a:2a:00:f2:c4:b8:df:6d:eb:3f:27:f3:55:
                    cd:1f:ed:49:9d:bb:68:52:fa:99:6a:42:28:17:51:
                    25:a0:98:d9:5d:27:98:e6:d4:fd:19:57:c7:67:91:
                    76:e9:22:ef:9a:b3:cf:35:f5:19:57:20:c2:68:53:
                    9e:30:a0:74:92:e7:c5:93:7e:bd:d8:aa:79:be:e5:
                    1d:f4:b5:a2:7e:a9:3b:bf:36:1f:87:ad:0e:44:fd:
                    91:f7:dd:76:a7:e0:bd:6c:4f:d3:5d:ba:a3:9b:f4:
                    f9:55:54:ee:86:cb:0c:ca:4f:4f:41:f6:8c:26:ad:
                    24:fc:a0:e7:a8:b8:df:8e:7e:ab:f1:f2:d0:a0:fb:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:9F:70:83:23:67:51:65:63:D4:E5:10:B8:FF:FB:31:6B:A4:89
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:0c:7d:d8:0f:c6:0f:2c:c5:f1:e9:05:1e:ac:fb:bd:85:
         71:7f:75:b4:c1:3d:cc:e2:ab:30:78:2f:96:91:67:07:e0:44:
         d7:2c:27:bd:e3:d6:60:b2:19:56:a2:c7:90:3e:d3:b1:06:30:
         16:c0:9e:cb:1b:ef:4c:b5:be:06:d5:fd:76:d8:4e:e2:9f:7d:
         59:e8:95:ec:bd:71:e5:ee:e4:16:76:7a:a9:b4:5f:2a:b2:a3:
         53:ef:1b:7a:43:2e:4b:b3:fb:03:de:38:4e:f8:37:50:c3:74:
         51:9d:c0:4a:aa:1c:21:ed:6f:a5:1a:f1:0d:32:48:25:7a:79:
         e9:cc:58:6d:64:02:6d:72:db:e6:d9:ee:89:bb:aa:a5:41:ec:
         8d:a9:26:b4:53:49:cc:45:ba:5a:ef:5a:e8:0d:67:63:21:fd:
         a9:a4:67:32:91:1b:bf:c0:2b:90:b3:f1:d4:30:c6:5f:73:e6:
         0e:41:a6:43:aa:70:61:e1:19:b5:58:3d:88:52:f3:21:9e:65:
         b0:7d:d4:bc:12:cd:24:9d:16:9e:c6:52:a9:b7:7b:b0:6b:66:
         b0:d7:93:61:97:fc:3e:28:fb:36:bd:fb:70:e0:66:43:c3:f6:
         c8:f4:58:1a:62:cd:34:89:fd:00:29:9c:de:e0:06:f8:1c:7d:
         f2:ee:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:07 2025 by rpki-client