Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          lQT2I00sbwZHTPbi0qfYMvJFtmVfmRCOP0M6WzOvV+A=
Subject key identifier:   E5:3A:21:48:54:BF:F1:20:5C:57:6A:CD:92:37:97:D4:8B:DD:C2:B6
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       5AC761C92604038F3506DF5EDF196AD1B398A72B
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 19:05:35 +0000
ROA not before:           Mon 13 Jan 2025 19:00:35 +0000
ROA not after:            Mon 12 Jan 2026 19:05:35 +0000
asID:                     268144
IP address blocks:        2804:58b0:120::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c7:61:c9:26:04:03:8f:35:06:df:5e:df:19:6a:d1:b3:98:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 19:00:35 2025 GMT
            Not After : Jan 12 19:05:35 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:17:9e:c8:9f:2a:24:fa:b5:fe:68:96:5d:
                    c3:2a:d5:0d:5e:d6:47:da:79:58:1e:f4:99:67:df:
                    5a:e1:63:f0:c9:c5:71:ae:aa:de:83:aa:ef:80:fb:
                    6b:c0:b9:8b:b4:72:d2:a5:72:6e:58:f2:c6:e9:ce:
                    d6:4c:ec:2b:47:fb:cc:a2:3c:1e:6c:25:fa:df:6e:
                    61:72:80:0d:22:88:f0:0b:8b:53:12:3a:44:0e:4f:
                    ae:20:93:3b:dc:4a:59:ed:49:14:e6:5c:0c:58:10:
                    b2:bc:f5:dc:05:21:94:4b:ab:03:f4:fd:47:f4:7d:
                    b5:95:c4:c1:cd:4a:b7:e6:62:63:5c:b0:6a:7a:cb:
                    92:99:2a:39:38:de:d5:e0:83:b4:82:73:49:dc:21:
                    b1:c8:22:b8:78:ac:b7:fb:66:f5:3c:d8:05:a7:9c:
                    91:20:9a:fc:4d:f9:05:b3:ff:92:b3:aa:d1:01:8b:
                    d9:12:2f:b9:ec:4f:42:d5:2c:8e:b3:a0:b3:b1:e9:
                    f5:01:15:7e:39:80:66:61:d5:49:90:0a:72:5e:7a:
                    28:6d:ce:78:aa:42:97:2f:66:3c:d9:b7:e2:a2:16:
                    ee:22:16:35:8b:b1:df:25:2d:0d:39:8c:83:be:37:
                    bf:23:fb:3b:f4:87:03:98:e7:00:31:eb:ca:ad:5e:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:21:48:54:BF:F1:20:5C:57:6A:CD:92:37:97:D4:8B:DD:C2:B6
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132303a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:120::/46

    Signature Algorithm: sha256WithRSAEncryption
         38:74:34:1c:e4:3e:a5:07:f6:bf:66:43:c0:f3:ae:78:1e:18:
         2f:14:2d:fa:83:d9:d0:b9:5a:6c:b3:2c:57:2f:53:1c:9e:a6:
         84:95:7d:39:b5:cb:07:2d:27:cf:a7:29:b1:e4:f3:6f:75:a2:
         d1:e9:66:fd:e0:c2:c5:14:2e:bb:a8:22:7e:3b:d4:7f:c5:14:
         2e:21:6a:22:50:c4:42:a8:d5:90:15:56:27:f2:09:94:27:68:
         de:72:b3:ac:be:ed:e2:67:4c:4a:b5:81:dd:33:5b:de:4e:2f:
         43:60:74:d3:d8:7a:33:2c:21:e7:bc:c3:93:ff:f1:f4:70:0b:
         f4:93:32:60:ed:18:be:ca:18:79:e8:23:a2:83:a7:16:5b:9c:
         a2:7c:37:6b:e7:4b:ea:a0:ca:7a:c9:a3:f7:a0:2b:38:82:fa:
         9c:ab:ac:14:bc:13:52:73:c7:d1:fa:cc:5a:f3:e3:03:23:44:
         59:53:42:98:a5:06:69:3d:0d:5f:a1:b4:1a:5a:5b:a0:f4:03:
         56:3e:c4:62:19:89:d1:ed:d5:44:cc:14:c2:6d:b8:d2:6b:e1:
         79:bf:b3:b2:57:b2:c3:18:26:83:ce:9b:0e:35:68:31:e4:c1:
         44:b4:fb:1b:36:31:ee:ad:db:25:ad:c4:32:24:c0:4e:07:a6:
         2f:52:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:48:30 2025 by rpki-client