Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a653030303a3a2f33362d3336203d3e20323638363539.roa
File:                     323830343a353439343a653030303a3a2f33362d3336203d3e20323638363539.roa (raw, json)
Hash identifier:          t5TCAszXrVEoHxVTmzEE7DXLwQjrklqMSNbRsK3JOyo=
Subject key identifier:   69:A8:58:AA:4B:46:73:5F:31:1E:F2:8A:96:DE:39:40:EB:DF:F2:BF
Certificate issuer:       /CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
Certificate serial:       0885A9E4ECFCC1F46F6372EC60CB95AF75C204ED
Authority key identifier: FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a653030303a3a2f33362d3336203d3e20323638363539.roa
Signing time:             Tue 01 Apr 2025 13:54:23 +0000
ROA not before:           Tue 01 Apr 2025 13:49:23 +0000
ROA not after:            Tue 31 Mar 2026 13:54:23 +0000
asID:                     268659
IP address blocks:        2804:5494:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl
                          rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 11:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:85:a9:e4:ec:fc:c1:f4:6f:63:72:ec:60:cb:95:af:75:c2:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF00468E3B1011CC27A434A1A3F019C31FC0DC96
        Validity
            Not Before: Apr  1 13:49:23 2025 GMT
            Not After : Mar 31 13:54:23 2026 GMT
        Subject: CN=69A858AA4B46735F311EF28A96DE3940EBDFF2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:d9:41:54:5f:a1:c1:3b:99:ad:2e:82:aa:
                    b9:96:d5:15:fd:d6:fe:76:92:e7:51:3f:5b:d6:fe:
                    3a:0d:99:33:23:c0:34:df:f3:9d:e2:72:30:cf:24:
                    09:5d:4a:52:d0:dc:7c:7b:4b:32:7b:4b:f3:97:46:
                    53:95:39:01:f2:eb:bc:c8:8c:68:74:98:48:c4:3c:
                    e4:27:e4:73:94:65:47:96:d8:99:bb:db:66:fd:2b:
                    ca:7c:fa:4e:80:18:6c:1c:3f:5b:0c:51:e4:8d:28:
                    0a:20:7d:e4:53:12:7b:e7:a6:03:66:46:e2:51:02:
                    21:83:f3:43:4a:9e:a6:17:44:bd:2a:20:12:86:94:
                    ec:b4:ca:44:d8:26:b7:cc:29:da:9a:f9:87:bd:ce:
                    c5:01:3f:40:cf:08:fd:a1:81:1b:18:e5:6f:7b:84:
                    17:59:6e:14:d0:07:11:73:15:14:2c:d0:9b:7d:05:
                    1a:c4:16:a2:46:e0:57:34:70:b7:92:a6:88:01:10:
                    61:d9:82:32:a0:cf:06:04:d9:ce:67:61:70:ab:d8:
                    85:87:b2:40:88:82:19:fa:36:b7:0e:b7:aa:3c:02:
                    94:0e:a4:46:f3:70:a0:64:dc:2d:9f:18:f0:cc:ca:
                    32:e1:2c:3a:f9:4f:db:59:a8:20:f6:88:a7:b9:16:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:58:AA:4B:46:73:5F:31:1E:F2:8A:96:DE:39:40:EB:DF:F2:BF
            X509v3 Authority Key Identifier:
                keyid:FF:00:46:8E:3B:10:11:CC:27:A4:34:A1:A3:F0:19:C3:1F:C0:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF00468E3B1011CC27A434A1A3F019C31FC0DC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/323830343a353439343a653030303a3a2f33362d3336203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5494:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:92:d5:85:3b:d3:89:54:4e:72:11:7b:27:7d:19:48:56:
         7b:5d:1d:ce:7a:f4:e6:3a:bd:d4:62:69:07:7a:22:93:66:1c:
         41:37:96:47:02:93:c5:b6:45:79:8d:72:6b:b3:0d:9f:3b:89:
         51:1c:f0:b8:da:23:94:e7:40:27:2b:52:9d:67:85:d6:93:bc:
         1b:ad:30:0a:4c:50:57:21:45:24:9c:c2:5d:c2:49:82:9b:0c:
         c2:e1:71:e1:9a:40:8b:6c:37:79:2f:fb:2f:c5:c3:aa:7e:8d:
         75:51:dc:d7:62:8f:6e:0c:68:16:2f:6f:73:66:e2:c0:c3:e0:
         fb:39:8e:5c:38:d6:89:c3:fd:75:3a:92:61:08:5e:93:f1:12:
         2d:e8:5a:24:8a:5b:54:b9:d4:3e:97:99:ca:fa:bc:c3:a2:76:
         a3:75:8a:d3:88:5c:3e:7f:b7:b2:1a:ba:e2:53:53:72:6c:83:
         76:87:6a:30:21:1a:fe:b8:9c:d1:a5:65:9f:38:9f:70:73:93:
         a1:97:8a:ff:5a:fc:bc:40:b1:7a:6e:da:5f:d7:19:15:ae:64:
         f6:d1:ce:2e:bc:8d:9d:a7:b1:6f:67:ff:24:a5:5a:69:59:fc:
         54:de:fb:d5:3a:d7:ec:40:2a:5a:fe:eb:e2:dc:58:c8:9a:f7:
         9c:f5:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:38:32 2025 by rpki-client