Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa
File:                     323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa (raw, json)
Hash identifier:          FYNfKWLGCborOJHpYOR+IduNVUTj0eYEWMDVeqXk4Oo=
Subject key identifier:   47:63:15:F2:07:E9:EB:66:4C:07:15:D0:58:B5:6E:D5:C5:63:60:6C
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       4FDFFB102D281E1B4A6F3CC30516360CE87C746A
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa
Signing time:             Thu 06 Mar 2025 14:31:12 +0000
ROA not before:           Thu 06 Mar 2025 14:26:12 +0000
ROA not after:            Thu 05 Mar 2026 14:31:12 +0000
asID:                     268134
IP address blocks:        2804:5884:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:fb:10:2d:28:1e:1b:4a:6f:3c:c3:05:16:36:0c:e8:7c:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Mar  6 14:26:12 2025 GMT
            Not After : Mar  5 14:31:12 2026 GMT
        Subject: CN=476315F207E9EB664C0715D058B56ED5C563606C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:dd:9a:99:90:58:6a:3f:58:74:40:2f:09:
                    3d:87:f7:55:9a:08:0b:32:86:e5:29:16:af:28:7a:
                    05:a9:3d:22:d7:2b:b7:df:fc:ff:c2:86:73:26:b0:
                    c2:8c:77:86:74:e6:1f:8b:9e:70:98:8d:38:af:d2:
                    13:7f:31:3d:69:ed:a4:58:4b:ee:e7:a8:a8:30:f3:
                    b8:0f:ad:3e:2e:5e:30:c9:a3:b7:32:23:04:63:96:
                    05:5c:46:8f:5d:13:36:94:d5:cd:3a:9d:72:e0:7a:
                    d0:bc:1d:c3:74:75:ca:52:61:65:f0:68:3d:a5:1a:
                    5b:80:d2:a8:00:3b:98:43:53:df:be:86:5c:b6:c5:
                    5f:6b:73:61:b5:36:0a:e7:50:6b:e1:23:81:1d:fa:
                    6e:7f:ed:ee:a8:4f:08:21:1e:da:5e:72:79:d5:c5:
                    c6:c6:7d:e1:82:7f:79:3b:5e:27:7d:3d:ce:5b:31:
                    ff:50:c1:50:00:7c:06:06:d2:6b:f6:6d:ec:e8:3f:
                    2d:1c:d6:5d:0d:d6:c0:62:68:f1:9f:eb:72:06:8f:
                    78:c6:58:9d:34:a6:8d:fb:56:3a:c7:be:09:33:bb:
                    dd:28:03:84:bf:b8:28:67:08:94:b2:a9:e1:e2:b8:
                    06:00:22:81:3c:57:d3:fa:e2:c8:1a:d7:17:1c:d4:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:15:F2:07:E9:EB:66:4C:07:15:D0:58:B5:6E:D5:C5:63:60:6C
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a343030303a3a2f33342d3334203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:97:6d:3e:92:8d:f0:0a:87:4a:ca:46:8c:e3:a9:34:20:
         28:c2:4f:65:2b:27:a2:ea:56:59:15:00:1b:b6:4d:7e:f7:c9:
         d7:2f:e9:61:f5:8f:e6:2c:4f:ed:e5:36:a6:12:a3:2c:9c:c5:
         49:e1:75:96:38:69:41:a4:a7:3a:ce:a3:4c:02:0f:f6:d4:6e:
         ca:ef:1e:80:bd:ea:71:ca:fd:2f:db:0f:15:3a:42:24:16:b6:
         f8:6c:1f:39:60:c4:aa:f4:b7:b8:de:5c:ce:a2:fb:7e:6d:96:
         8b:35:10:72:c0:3d:3b:6a:b8:47:61:bd:64:fa:2e:45:2f:ed:
         6f:df:6d:f8:9b:89:d5:10:b1:bd:c5:ac:2e:61:a3:5a:ca:99:
         fb:54:18:69:1b:4a:96:3d:d9:1c:dd:08:b8:47:09:20:f2:a3:
         d9:38:cf:10:5b:46:bf:7a:55:a1:65:79:82:35:6e:f5:a6:8e:
         3d:79:76:9d:22:96:90:5e:61:12:9d:98:97:78:ed:02:31:59:
         37:3c:9f:ea:a0:1f:19:03:d3:00:13:43:6d:21:17:dd:d8:a3:
         5f:60:16:03:4c:f2:43:f1:f9:44:a1:a8:65:13:dd:fe:4f:b5:
         d4:09:7f:0f:df:a7:1c:6b:9d:23:dc:0e:79:21:3c:02:b5:bb:
         9d:ed:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:42:59 2025 by rpki-client