Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          nCPQEG9chLPgOhRuWPxvjF2TaiHnM1L+XqOJcREan0g=
Subject key identifier:   F7:5A:7E:2F:B0:13:27:C5:6C:19:9A:F7:C0:DC:9B:1B:89:80:49:B7
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       71BCE75B23A3D3903D3526F30C8E4FCD1AC0E126
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:54:59 +0000
ROA not before:           Mon 13 Jan 2025 12:49:59 +0000
ROA not after:            Mon 12 Jan 2026 12:54:59 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bc:e7:5b:23:a3:d3:90:3d:35:26:f3:0c:8e:4f:cd:1a:c0:e1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:59 2025 GMT
            Not After : Jan 12 12:54:59 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:ac:2f:86:a8:81:b7:da:38:2a:18:62:87:
                    3c:94:6b:a3:cc:95:41:2d:7f:fa:15:7b:57:0d:f2:
                    46:ed:d4:9a:3d:df:2f:7e:c0:e8:fd:fb:2d:4e:a7:
                    a9:47:72:91:fe:e1:f3:b1:16:fd:3b:54:b5:1d:5c:
                    9d:d0:13:eb:21:85:b5:7d:6b:32:c7:8e:fd:ec:4c:
                    a5:05:2e:f2:4e:93:43:c0:78:46:d3:df:7d:fc:8d:
                    e1:7e:57:6e:77:d9:8d:8d:0c:8c:ba:d8:69:70:de:
                    60:31:ac:b2:99:4f:f4:20:85:f0:59:dd:d6:ce:32:
                    11:f3:1c:1e:0b:bf:76:7a:06:6a:5b:ef:92:5f:57:
                    2e:ee:3a:78:fd:31:1a:bf:a9:78:2e:04:9f:df:ba:
                    09:00:c0:78:19:76:3b:ba:fc:1a:2c:f8:87:ff:3b:
                    d5:ea:4d:77:06:25:99:87:57:7e:72:db:c1:ab:e6:
                    3a:34:c5:da:63:01:f8:04:50:d5:74:18:48:51:0b:
                    ea:0e:c4:70:08:91:50:1f:9c:4c:eb:1b:89:11:be:
                    9e:a1:ff:e6:32:5f:33:98:fd:3d:97:96:96:db:68:
                    7f:6b:e2:60:54:db:5b:55:6f:09:93:ec:bf:a4:03:
                    ae:0b:40:e2:0a:7a:25:3c:ec:d4:cf:74:2c:84:ea:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5A:7E:2F:B0:13:27:C5:6C:19:9A:F7:C0:DC:9B:1B:89:80:49:B7
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/45

    Signature Algorithm: sha256WithRSAEncryption
         c8:b5:a7:ff:6e:a6:cf:6a:75:17:27:b6:91:65:36:43:12:ec:
         1a:12:43:f7:9d:e7:0b:42:95:3d:e5:15:5e:a6:fa:e0:4a:4b:
         e8:34:ce:4d:f1:1d:05:5b:d2:20:30:69:b8:4c:7e:f3:24:c4:
         2b:e6:e5:22:07:88:03:ff:25:eb:36:62:31:a5:ff:3d:4a:de:
         eb:6c:90:66:a0:f5:9c:32:d4:cb:28:83:a8:62:eb:c2:3d:ad:
         5b:95:a8:26:04:16:ab:d4:07:43:b9:b3:4a:35:69:fa:d0:14:
         4a:ed:76:15:78:c6:39:dc:d5:56:26:83:42:e3:29:24:ab:1d:
         d4:65:12:ae:10:bd:84:43:f8:0e:26:d8:35:3a:61:f9:0c:11:
         c3:ef:37:d0:d2:64:d7:05:20:3f:64:37:02:32:8c:c8:85:e1:
         7b:26:a5:15:56:42:5a:69:7e:ec:c1:b7:fb:98:1e:9e:a3:e1:
         b5:57:9d:02:34:4f:7b:6a:ec:00:ca:2c:f9:0c:58:74:30:59:
         02:76:75:94:3f:48:8e:66:c3:81:74:f1:cf:14:79:30:b6:84:
         8f:fb:3a:d4:f1:2c:a1:cb:c7:3b:bd:c7:12:64:03:b4:d8:6e:
         24:52:64:f1:5d:7d:4b:e3:33:cb:61:9f:61:e7:d1:a7:8b:10:
         ef:60:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:48:51 2025 by rpki-client