Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          DYgfVTlUTOzbs1b95Fk/nlOoopLedZ6HYcrZIX1/YWQ=
Subject key identifier:   7C:D8:90:86:A6:77:AC:DD:E8:DF:15:A0:A2:AA:FA:CB:88:1B:A8:5F
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       0CD13D800893D0852993F4803BDBCD32BBC2D3AA
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:57 +0000
ROA not before:           Mon 13 Jan 2025 12:49:57 +0000
ROA not after:            Mon 12 Jan 2026 12:54:57 +0000
asID:                     268568
IP address blocks:        2804:532c:130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:3d:80:08:93:d0:85:29:93:f4:80:3b:db:cd:32:bb:c2:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:57 2025 GMT
            Not After : Jan 12 12:54:57 2026 GMT
        Subject: CN=3082010A0282010100C6BB879F2E5ED10DD4EF430A507FA537EA59A1DC50AE7BA5D253E461BE931AB6EE7E2177AF9D7104FABFFB04F6679B70495708B12C8B7A16E5386254D57C5183616F9CAA0B30C9EDDC5212F57A8D985D4C625AF5E05B78D94364FF13FB1AFDDF491214ECD5D44FE4B57339DABE444B91EF5FBA1B189D774E86832DD33ED4F928494B6C8F68F0A16E908D8185C929A0AD2175878F2B31ABD49EDE923CCD9240413C8EECCEA3D6F97D73EABFF4417D3229253176CFFDEED6C24BCB9592E02356E2BCCF2C7EFF7FDE2480E43CCB58AF1AFCCE745DCBBE01E00F32707B930E8A65109501A8FF0B5560FB90B665F1E0598E861FE196202AD623933A3002BA3D53052D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:87:9f:2e:5e:d1:0d:d4:ef:43:0a:50:7f:
                    a5:37:ea:59:a1:dc:50:ae:7b:a5:d2:53:e4:61:be:
                    93:1a:b6:ee:7e:21:77:af:9d:71:04:fa:bf:fb:04:
                    f6:67:9b:70:49:57:08:b1:2c:8b:7a:16:e5:38:62:
                    54:d5:7c:51:83:61:6f:9c:aa:0b:30:c9:ed:dc:52:
                    12:f5:7a:8d:98:5d:4c:62:5a:f5:e0:5b:78:d9:43:
                    64:ff:13:fb:1a:fd:df:49:12:14:ec:d5:d4:4f:e4:
                    b5:73:39:da:be:44:4b:91:ef:5f:ba:1b:18:9d:77:
                    4e:86:83:2d:d3:3e:d4:f9:28:49:4b:6c:8f:68:f0:
                    a1:6e:90:8d:81:85:c9:29:a0:ad:21:75:87:8f:2b:
                    31:ab:d4:9e:de:92:3c:cd:92:40:41:3c:8e:ec:ce:
                    a3:d6:f9:7d:73:ea:bf:f4:41:7d:32:29:25:31:76:
                    cf:fd:ee:d6:c2:4b:cb:95:92:e0:23:56:e2:bc:cf:
                    2c:7e:ff:7f:de:24:80:e4:3c:cb:58:af:1a:fc:ce:
                    74:5d:cb:be:01:e0:0f:32:70:7b:93:0e:8a:65:10:
                    95:01:a8:ff:0b:55:60:fb:90:b6:65:f1:e0:59:8e:
                    86:1f:e1:96:20:2a:d6:23:93:3a:30:02:ba:3d:53:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:90:86:A6:77:AC:DD:E8:DF:15:A0:A2:AA:FA:CB:88:1B:A8:5F
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353332633a3133303a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:130::/45

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:0b:1f:68:cf:73:b8:02:8e:9b:e2:90:c7:bd:6e:01:5a:
         89:4e:0a:1d:02:d2:d4:a8:8f:83:c7:5e:75:3a:b8:57:22:c9:
         fc:02:a7:de:3e:64:31:1d:9c:75:d8:bb:8e:de:a6:d6:51:f9:
         47:00:50:90:c0:6d:92:f1:e7:a9:47:13:fb:27:48:12:49:5f:
         07:ed:98:38:dd:8f:7d:b2:71:56:65:21:6f:63:20:2c:58:1f:
         db:33:98:e7:f3:ef:42:7b:3f:b7:69:14:e6:c5:64:47:3f:64:
         88:aa:b1:4c:43:b1:67:d0:06:4d:f7:1f:9b:f9:e6:a9:72:e9:
         54:fe:d5:2b:8e:da:c7:a6:08:ed:cc:64:a2:10:86:07:3d:ec:
         23:6a:26:31:13:c4:e7:c2:b8:2d:48:76:84:21:66:6c:8a:27:
         e1:ab:6b:cb:f7:59:1b:b0:85:2d:10:26:4e:d4:fb:00:d1:03:
         d4:71:50:d2:db:03:49:9c:46:3a:41:fc:35:44:de:1d:5f:bd:
         c5:f6:91:7e:69:e5:34:66:05:35:ba:bc:da:b4:9e:81:1f:69:
         a0:db:be:21:27:be:85:e9:d0:88:16:bf:cb:69:d3:b8:44:38:
         3a:61:21:3d:ab:85:d9:cf:8a:6d:62:51:51:c9:2a:57:d9:25:
         ff:2a:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:51:35 2025 by rpki-client