Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa
File:                     323830343a363234303a3a2f33322d3438203d3e20323639323836.roa (raw, json)
Hash identifier:          OpCaSDNWIkJJX1q6+UuMG93CxmavK5wHmbySPC6n2WY=
Subject key identifier:   FF:85:D6:8A:20:6E:92:E1:D4:AE:0C:12:C9:D4:3E:9C:FF:95:2F:51
Certificate issuer:       /CN=98EA20A009301C2358E08E395002F34F079AC9D0
Certificate serial:       6A63180C5E7E9F1E24AD5A37099906C50A54C899
Authority key identifier: 98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa
Signing time:             Thu 06 Mar 2025 01:55:19 +0000
ROA not before:           Thu 06 Mar 2025 01:50:19 +0000
ROA not after:            Thu 05 Mar 2026 01:55:19 +0000
asID:                     269286
IP address blocks:        2804:6240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl
                          rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:63:18:0c:5e:7e:9f:1e:24:ad:5a:37:09:99:06:c5:0a:54:c8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Validity
            Not Before: Mar  6 01:50:19 2025 GMT
            Not After : Mar  5 01:55:19 2026 GMT
        Subject: CN=FF85D68A206E92E1D4AE0C12C9D43E9CFF952F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:e1:04:4c:9b:c0:ab:32:46:36:0b:ca:b4:
                    5a:fb:f4:b9:05:82:d0:39:18:da:6f:70:08:14:e5:
                    c4:a9:fb:fb:8a:e2:eb:ca:cf:23:25:e8:cb:dc:24:
                    fd:32:7b:1a:a7:82:61:60:56:c7:3f:6b:b7:1b:5a:
                    5c:68:6f:87:62:78:19:53:70:f8:a4:1b:de:34:a5:
                    f2:14:ff:ac:b2:4b:19:87:f5:bb:6f:4c:1c:1c:c9:
                    23:4e:3c:65:1d:31:59:98:70:59:ad:46:21:c1:6c:
                    17:06:36:c2:d1:63:3b:dd:f4:c1:34:2f:35:16:27:
                    90:e3:e3:b1:6b:72:94:a8:fa:65:d9:15:79:4c:97:
                    ac:08:a3:0b:35:e5:ff:2c:96:8c:b0:91:e4:6e:0b:
                    34:f1:bb:6e:71:93:f8:c3:fc:fd:69:0f:b1:3a:6c:
                    c7:70:47:d8:ac:eb:c2:82:54:5b:00:33:d4:cb:92:
                    de:c4:2f:c1:84:cd:84:80:ce:63:d3:0c:46:ee:46:
                    45:72:d1:52:b6:f8:f1:48:a1:27:52:af:4e:88:45:
                    28:27:d1:f6:77:f0:50:43:18:29:ec:69:77:d5:5a:
                    34:f8:ad:bc:97:8b:9e:fb:2f:39:31:f5:25:30:11:
                    06:f3:ba:ff:77:c0:97:9f:c8:a6:fc:44:6d:09:40:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:D6:8A:20:6E:92:E1:D4:AE:0C:12:C9:D4:3E:9C:FF:95:2F:51
            X509v3 Authority Key Identifier:
                keyid:98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/323830343a363234303a3a2f33322d3438203d3e20323639323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6240::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:99:89:ac:d8:25:c4:53:1c:45:f9:42:e5:b8:ce:9d:b3:e9:
         8a:10:ff:80:44:24:d3:bf:86:5d:2f:b2:cb:05:de:31:26:75:
         b7:fe:3d:ee:85:54:c6:c9:3c:dd:4a:d0:01:a7:db:55:bd:ca:
         6a:6b:af:a8:31:0b:32:d3:52:77:e4:fd:be:85:54:f9:f1:10:
         0d:73:62:bd:cd:f5:9e:9f:16:05:ed:72:28:e7:50:12:ab:03:
         dc:e6:99:cc:01:c0:70:e6:6b:b2:c4:ce:33:2f:ae:24:62:2b:
         f2:0e:71:26:b6:aa:7c:55:04:db:95:58:72:da:e0:48:49:e3:
         cf:82:58:a5:bf:22:52:c1:43:7a:20:ad:b1:9d:b0:95:52:37:
         38:7d:50:dc:d9:6d:16:e9:59:7a:d9:c3:a3:1b:45:a2:7c:8e:
         a0:1d:8e:da:c7:bb:c2:81:b1:10:d7:29:0a:7d:0a:86:aa:0b:
         39:0b:3a:4f:c5:21:9f:84:80:8b:3f:13:f7:68:45:0a:9e:9e:
         2e:b6:78:81:41:f0:42:e4:02:cc:bf:0f:03:aa:0a:f3:15:73:
         77:a9:dd:ec:08:06:7d:da:ca:0c:3d:c5:57:76:f8:bf:01:bf:
         3f:da:e1:b1:86:91:e0:90:a4:57:76:2e:fe:ea:9e:d7:98:8b:
         d8:1a:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:22:12 2025 by rpki-client