Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a333030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a333030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          7keZcIJBq67I/lwM6pY0S5sCY1PIJazY+AZ1YU/O7aI=
Subject key identifier:   FB:AA:44:94:01:D1:C1:7E:D7:F0:93:1F:D7:20:B5:D1:CD:EE:1B:C0
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       59C70E9081741A324A829EC404B5D9976E306252
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a333030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:22 +0000
ROA not before:           Tue 01 Apr 2025 13:49:22 +0000
ROA not after:            Tue 31 Mar 2026 13:54:22 +0000
asID:                     268659
IP address blocks:        2804:5494:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:0e:90:81:74:1a:32:4a:82:9e:c4:04:b5:d9:97:6e:30:62:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:22 2025 GMT
            Not After : Mar 31 13:54:22 2026 GMT
        Subject: CN=FBAA449401D1C17ED7F0931FD720B5D1CDEE1BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:4e:2a:e8:6f:71:3c:57:89:e1:e9:92:7a:
                    ee:c6:6b:d9:0b:fb:59:d8:1c:29:08:65:d6:7b:d2:
                    32:5a:b1:69:9a:83:2f:99:0b:79:27:d4:54:f9:77:
                    00:48:e9:26:c9:53:5b:14:62:6d:cb:e3:6d:41:0d:
                    d8:42:96:b3:a4:2d:27:8a:f7:ea:01:8e:76:e9:0e:
                    14:eb:e9:07:db:8a:e1:3d:b7:22:25:6b:48:d8:9f:
                    e4:a5:01:32:c9:ca:20:37:82:41:49:d0:0c:09:b6:
                    55:7d:31:b2:b0:0d:da:d4:d1:1f:23:2e:88:18:29:
                    7f:50:60:29:b3:db:92:b0:ba:b1:a6:d4:59:0f:dc:
                    02:d4:83:6e:89:d7:24:c4:eb:d7:b0:25:1a:f4:2f:
                    42:56:03:56:2d:d4:8f:72:ff:4c:56:82:ea:41:15:
                    19:dd:2b:ab:c7:86:2e:7f:33:8b:14:e0:6f:08:ee:
                    cd:11:80:2c:72:ce:c7:34:82:fa:15:7e:45:6a:d8:
                    a6:e1:07:4a:ea:26:59:28:97:97:fc:51:27:81:2c:
                    9c:f3:c3:55:1e:6c:bc:fb:92:5d:7f:b1:de:d8:c7:
                    c3:14:b2:b4:31:b6:10:26:ac:f8:7d:0b:2d:58:03:
                    29:83:87:e8:d3:28:41:94:d8:73:ea:4d:be:00:10:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AA:44:94:01:D1:C1:7E:D7:F0:93:1F:D7:20:B5:D1:CD:EE:1B:C0
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a333030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:51:a3:57:ae:2e:e7:e4:60:06:54:8b:83:bb:5a:d0:aa:ff:
         c6:42:f6:2e:7c:1b:6f:c8:ab:c8:65:7c:6e:70:2d:ca:a8:8b:
         cf:0b:2f:5a:7f:a9:79:03:3e:b8:03:23:ae:e1:e3:eb:e4:c2:
         8e:66:7e:63:71:b7:30:5e:f8:99:1e:06:8a:db:f1:70:a8:4c:
         a3:35:87:b0:14:5f:79:0f:28:c5:b8:4b:2b:51:2a:33:90:88:
         78:e3:74:4f:b1:a1:09:3d:95:94:ce:e5:d3:26:ea:e0:a9:60:
         2c:dd:d3:e8:53:3c:8e:15:94:e6:ad:13:27:12:27:65:79:97:
         4c:22:8c:ae:f0:51:ea:9f:46:96:2a:50:35:fe:2c:c9:d8:19:
         63:f9:c8:8a:12:23:5c:69:8e:6a:83:04:64:fe:56:4c:de:74:
         80:38:b9:6f:43:d8:94:2b:8e:36:59:d7:d6:4e:1a:b6:bc:21:
         ae:f5:5d:3f:ab:92:d8:db:62:2c:f5:42:62:57:4f:3c:ca:03:
         0d:01:cb:c5:15:b9:ba:82:ed:b6:53:75:6c:3a:ff:a7:4c:1d:
         25:4b:1a:76:9c:34:4d:f5:6a:ac:7c:a7:5d:3b:40:74:f8:41:
         c8:87:d0:05:79:8f:ec:e4:1f:81:53:f9:43:50:e7:e9:3a:64:
         9e:7a:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:37:00 2025 by rpki-client