Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          G8Hd1b5LWp8xFyzTzbhpY9p2w2ghD7BLYCm7y5nYjuc=
Subject key identifier:   B7:93:3D:16:01:E2:15:DF:78:E3:E7:34:8C:25:76:66:6B:69:9F:0C
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       57DDEEA0D317A2D94D1D424C42F103A5856A052D
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:55:01 +0000
ROA not before:           Mon 13 Jan 2025 12:50:01 +0000
ROA not after:            Mon 12 Jan 2026 12:55:01 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:ee:a0:d3:17:a2:d9:4d:1d:42:4c:42:f1:03:a5:85:6a:05:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:01 2025 GMT
            Not After : Jan 12 12:55:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:6c:b8:62:90:bb:0a:8b:38:24:9d:ba:15:
                    63:f0:45:08:22:9e:17:ca:30:5d:85:f9:0b:db:f1:
                    0f:65:ed:4a:a1:f7:f8:9a:5b:03:7a:e9:41:59:a4:
                    a6:6e:b3:95:3b:a4:b5:ae:ed:a5:e6:bb:15:3b:6e:
                    1d:d6:31:30:82:4c:33:01:ed:45:56:2c:6b:60:d5:
                    f4:58:cb:00:00:a4:d0:9c:65:a3:bc:f8:20:d9:b1:
                    d2:f9:43:ba:ea:32:05:5a:8f:57:9a:ea:70:04:34:
                    a5:06:ab:0d:8c:86:23:a5:b7:01:a9:4c:45:2d:cc:
                    46:16:2a:4f:a5:af:91:e2:24:fa:d1:ba:48:42:68:
                    b9:5a:d9:f7:86:ac:26:1d:51:c8:32:d1:83:aa:d8:
                    5a:64:82:dc:68:1a:71:42:c0:e6:69:dd:52:7b:3d:
                    da:89:f0:54:e4:fb:bc:16:10:b4:61:a6:30:b1:a1:
                    1f:14:7e:f6:7c:7c:20:39:24:83:29:fa:c6:96:f8:
                    49:50:bc:80:6d:16:f3:db:89:b2:d5:b3:0a:8a:33:
                    5d:cc:bf:57:f5:f4:b0:f4:68:31:3e:d2:cf:0e:7e:
                    33:45:70:f0:b9:42:0d:76:f8:52:a4:8e:d0:6b:f7:
                    11:3e:33:02:a7:f1:20:01:50:8f:a4:c9:70:e6:6a:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:3D:16:01:E2:15:DF:78:E3:E7:34:8C:25:76:66:6B:69:9F:0C
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/46

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:55:74:88:b1:18:57:47:f8:51:77:09:9d:e9:be:c1:51:
         bc:79:3d:bc:5f:33:e4:50:46:64:72:a0:43:52:ec:c7:4c:72:
         75:8c:34:f8:2c:73:8e:f7:0a:87:8c:76:b5:a0:31:b0:3b:b5:
         5c:c5:d8:5f:3e:f6:f0:ba:16:36:33:84:6f:75:f7:bf:35:d2:
         a3:8d:1d:1d:63:a4:30:2e:a3:89:c0:01:32:a6:27:cb:52:9f:
         f9:f1:cd:8f:e6:73:0f:a6:7f:6d:8f:eb:80:2e:f3:c7:ef:40:
         cd:a9:93:84:ef:28:a2:04:98:cc:1c:d1:30:d2:89:7f:17:a6:
         91:15:85:b0:ea:bf:59:48:6b:80:75:38:50:4b:02:1f:56:7d:
         df:44:8f:48:67:4e:fb:02:b5:16:70:66:1d:2d:cf:3e:5f:f8:
         7e:3d:76:bd:71:0d:ee:a0:e8:f9:ed:b2:ec:64:9d:f1:ab:3a:
         ec:27:08:88:21:27:8d:9f:1a:06:78:ff:1c:36:c8:83:da:ae:
         3b:c8:a1:3d:ff:e2:4d:95:5f:b8:67:2f:a5:38:3a:91:86:8e:
         c2:26:5a:5f:67:ad:f3:88:28:97:c1:26:3b:8d:70:fb:9a:4e:
         49:52:f1:2d:9d:5b:67:44:11:62:bf:b4:87:26:bd:ec:64:5d:
         a6:d1:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:58:11 2025 by rpki-client