Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a323030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a323030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          GIVSpfAJP7+RHF3eFbfQSjFtz2TWthLVLwx1Cg8wiV8=
Subject key identifier:   C0:E2:88:A2:DC:15:14:DE:D7:AC:40:58:4B:33:EC:89:0F:E5:08:32
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       0771C77132BCA637B0034BEB10CD016F9378F652
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a323030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:24 +0000
ROA not before:           Tue 01 Apr 2025 13:49:24 +0000
ROA not after:            Tue 31 Mar 2026 13:54:24 +0000
asID:                     268659
IP address blocks:        2804:5494:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:c7:71:32:bc:a6:37:b0:03:4b:eb:10:cd:01:6f:93:78:f6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:24 2025 GMT
            Not After : Mar 31 13:54:24 2026 GMT
        Subject: CN=C0E288A2DC1514DED7AC40584B33EC890FE50832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:05:c4:7f:73:5a:5b:b9:f3:27:73:64:dc:
                    03:f3:eb:50:12:88:83:02:f8:4c:b9:5a:89:6f:45:
                    87:85:00:62:59:a2:3b:8d:7c:19:d3:da:be:d5:c4:
                    3c:d9:fe:d4:46:a3:4a:77:1c:e6:b8:92:06:21:bc:
                    63:c2:7d:1f:96:24:25:08:df:d3:41:7b:e6:33:c2:
                    2b:a2:34:61:fd:3a:ac:3b:93:0c:9d:e4:7d:9c:c9:
                    08:24:1d:f6:c0:b5:87:dd:44:48:c3:dd:ad:49:b0:
                    90:8f:dd:2b:12:16:78:be:e3:58:d8:b5:72:1c:a4:
                    1e:a0:d7:70:09:6a:df:92:3b:7e:5f:7a:5b:02:ef:
                    6e:be:7a:f5:35:3a:a1:6a:3d:8a:bf:f3:e7:ab:b1:
                    38:ed:cb:9b:99:1e:8a:f3:29:93:35:91:70:34:55:
                    e3:c4:21:ff:75:cb:7b:4f:ac:10:bd:78:99:48:21:
                    6a:83:02:29:17:9e:b7:c0:b7:01:fb:d5:32:a5:52:
                    95:c8:be:5c:04:69:ae:85:08:68:a9:df:53:cd:ed:
                    7e:73:40:1d:ac:68:27:6b:b5:6d:37:a2:bc:59:d8:
                    5d:0a:c3:5a:ef:d5:49:23:aa:72:c2:91:a1:e0:e8:
                    40:7c:66:ab:4d:d9:79:b7:f5:62:5e:06:41:b4:54:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:88:A2:DC:15:14:DE:D7:AC:40:58:4B:33:EC:89:0F:E5:08:32
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a323030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:29:80:6c:7e:62:f0:5a:a6:5c:b4:69:9f:67:44:28:22:
         35:e7:0a:74:f8:07:5d:0b:1f:4c:89:69:2d:d4:7a:16:c2:3f:
         d8:02:c2:4a:15:44:91:94:b7:98:a7:78:86:15:e3:87:e6:24:
         4b:2c:0e:28:5d:16:59:b8:77:7f:8a:14:b9:03:c1:cc:13:f9:
         28:8e:a1:06:5a:ff:a2:02:b2:7c:b7:85:c9:32:59:01:1e:4e:
         d1:b1:3e:56:7e:c9:70:ef:28:17:21:4c:0b:15:fa:7a:cd:38:
         72:6d:67:46:72:fc:fb:bd:94:26:26:d0:c7:db:67:bb:5b:a5:
         18:65:74:06:ed:7d:e7:ad:68:2e:c8:0b:8a:75:0a:76:cc:9d:
         10:84:92:4a:57:f2:b8:38:8a:c9:f1:1f:7b:0e:74:11:ba:75:
         14:1e:63:58:4d:18:48:bd:26:3b:7a:c1:5b:ca:b9:ac:1c:ad:
         49:3d:38:63:30:ed:11:26:31:38:3b:e6:0f:bf:98:7a:2b:b6:
         a5:f7:8f:15:b9:c5:46:27:15:78:93:02:fb:38:ea:a7:74:f6:
         69:01:f9:c4:52:06:bf:00:b7:32:bc:8c:27:74:9d:22:75:27:
         af:39:a1:26:fe:df:ad:28:92:a3:86:77:a3:3c:24:dc:b1:d5:
         66:17:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:41:25 2025 by rpki-client