Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa
File:                     323830343a363432633a3a2f33332d3333203d3e20323639343131.roa (raw, json)
Hash identifier:          eJ65QEsYY/tZoEoKpzBvkL/RPSNHD/YE9I9UuX63SjQ=
Subject key identifier:   51:96:5F:E5:DB:E6:10:C6:D0:45:CB:EB:0A:AA:AB:84:50:FF:DE:68
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       06042F0B735D2B1C8B7AA009AFD0E5D57A9F31AD
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa
Signing time:             Wed 15 Jan 2025 15:46:20 +0000
ROA not before:           Wed 15 Jan 2025 15:41:20 +0000
ROA not after:            Wed 14 Jan 2026 15:46:20 +0000
asID:                     269411
IP address blocks:        2804:642c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:2f:0b:73:5d:2b:1c:8b:7a:a0:09:af:d0:e5:d5:7a:9f:31:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Jan 15 15:41:20 2025 GMT
            Not After : Jan 14 15:46:20 2026 GMT
        Subject: CN=51965FE5DBE610C6D045CBEB0AAAAB8450FFDE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:00:3d:81:1e:1d:bd:f6:64:90:3a:0b:55:
                    58:7a:bc:c2:f1:cf:b5:45:f5:eb:c9:75:18:50:a1:
                    66:7a:bd:bf:60:8b:30:26:ba:04:be:3a:06:a7:6e:
                    54:61:c1:e9:4a:09:1f:b7:74:06:47:9b:05:d5:e2:
                    6d:79:f0:cb:40:11:fd:06:3b:c9:9f:38:1c:74:09:
                    61:c1:c0:a9:72:1f:f5:26:91:56:35:9f:b8:c6:37:
                    6f:e4:ef:fc:81:55:77:d2:b8:ee:b8:03:ea:6e:75:
                    26:e5:dc:9b:ba:fd:e6:9a:5f:58:1f:fa:d4:ed:5f:
                    6a:3b:42:e9:2b:b0:e7:23:02:b3:9c:a7:05:d0:9e:
                    c8:e1:f1:58:64:87:de:52:2d:e0:15:cf:19:56:d3:
                    49:a4:96:06:d5:27:02:27:7f:2a:49:93:9f:63:42:
                    8d:50:01:48:7e:d3:93:e1:15:eb:8e:8f:12:e2:cc:
                    c8:53:d4:60:cf:d2:b6:ed:4c:03:6f:a4:58:4b:7d:
                    82:35:e2:6d:4a:82:1d:c1:f3:15:d8:df:1d:4c:68:
                    e6:6e:00:7d:68:04:5a:f4:e0:c8:dc:64:58:1c:06:
                    65:c8:41:7b:0e:59:0e:c8:1b:30:a8:89:9c:c8:36:
                    fd:00:01:0b:92:9e:1f:d1:ba:0f:87:db:26:4a:33:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:5F:E5:DB:E6:10:C6:D0:45:CB:EB:0A:AA:AB:84:50:FF:DE:68
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:a8:bb:7f:09:12:99:30:00:cb:25:da:8f:18:08:16:d9:
         1f:e7:77:b6:10:cc:1e:98:2c:17:bb:13:b1:ed:50:e1:52:ce:
         24:7b:58:29:0a:a1:a5:11:37:0c:72:82:44:e6:05:62:90:84:
         39:87:10:57:2f:dd:4e:04:28:95:43:6a:57:69:97:a6:d2:55:
         48:c5:95:98:4e:2b:4a:e9:65:d4:c4:27:9e:c0:40:5d:5a:db:
         c9:43:5b:59:e2:a8:49:eb:11:7b:8c:ac:a6:ab:4b:5b:77:fd:
         d8:61:de:8b:9d:80:0a:38:2a:1a:5f:45:1f:49:9d:a9:ad:12:
         1e:27:ae:32:f2:9c:37:3e:2b:e0:e0:35:ed:3f:69:5e:c7:38:
         7d:15:2c:bc:cb:b8:5c:1b:71:d7:56:82:e8:d4:1e:6d:b0:2b:
         d9:61:6a:03:ae:78:cf:10:c1:3a:2e:e1:b9:34:3e:5c:20:4f:
         78:46:66:84:fc:63:dd:7f:3f:26:fe:cb:47:c8:1b:2f:79:7b:
         aa:2f:6c:e7:de:a0:cd:56:9d:60:0f:1f:da:04:f7:69:25:0c:
         a9:d5:10:ce:a8:5b:a0:f3:fc:a6:8e:3a:f9:dc:5f:9d:eb:68:
         09:54:8e:83:6b:39:b0:3c:95:15:3c:48:2c:ed:42:2a:67:3d:
         38:84:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:11 2025 by rpki-client