Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa
File:                     323830343a356234303a3a2f33322d3332203d3e20323638383239.roa (raw, json)
Hash identifier:          uWtTok8/SWinpdvoaLccJqLT3QzD22YmQzKWwYQIB9U=
Subject key identifier:   53:D8:C7:D7:33:2A:D3:4F:5A:55:56:89:90:35:F9:6D:A0:91:A8:62
Certificate issuer:       /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial:       3FA723CCC03B15B457EE2F0BD6B9A171DC121A1B
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa
Signing time:             Tue 18 Feb 2025 14:13:00 +0000
ROA not before:           Tue 18 Feb 2025 14:08:00 +0000
ROA not after:            Tue 17 Feb 2026 14:13:00 +0000
asID:                     268829
IP address blocks:        2804:5b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 23:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a7:23:cc:c0:3b:15:b4:57:ee:2f:0b:d6:b9:a1:71:dc:12:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
        Validity
            Not Before: Feb 18 14:08:00 2025 GMT
            Not After : Feb 17 14:13:00 2026 GMT
        Subject: CN=53D8C7D7332AD34F5A5556899035F96DA091A862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:8d:10:7d:46:94:2f:c7:28:a5:ee:c7:e5:
                    4e:bd:68:b1:fa:a1:d4:e6:9f:22:b8:da:cd:37:9e:
                    9f:89:fc:3a:30:8a:fa:0b:da:da:77:f0:a8:ab:7c:
                    12:46:75:f5:54:0b:69:c2:47:ba:de:a8:1b:4a:c5:
                    d1:3f:2e:ee:8f:33:5c:dd:6c:ac:ee:9c:c9:db:80:
                    98:5e:c2:ed:2c:27:cc:27:10:32:e9:66:22:f7:2b:
                    5b:63:13:4e:ff:50:a8:c1:eb:92:0e:bc:80:4b:a9:
                    7f:af:80:eb:be:62:20:87:f2:70:71:9f:f7:e1:cf:
                    4a:c8:af:f7:52:20:6c:74:bb:c7:10:e3:c6:7b:52:
                    3a:a0:81:e7:41:eb:f3:bc:4e:86:6f:9f:66:8e:77:
                    a7:7d:f2:c9:9f:10:2a:00:2a:99:bb:b8:79:dd:6f:
                    d6:0e:58:fb:a4:aa:1d:c2:db:3e:95:10:01:65:d5:
                    44:71:f4:f2:94:fe:c1:39:94:d6:6d:1d:93:f1:38:
                    c8:fc:10:33:cd:f1:15:5f:2f:b0:a8:68:1e:38:71:
                    56:8d:e2:ab:da:59:ea:27:71:4f:4f:4d:fc:2b:da:
                    8b:29:f0:f1:d7:9b:d5:f9:85:dd:5c:ca:29:68:da:
                    e9:4a:77:6a:6b:d5:95:5a:84:72:7d:93:dc:d1:25:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D8:C7:D7:33:2A:D3:4F:5A:55:56:89:90:35:F9:6D:A0:91:A8:62
            X509v3 Authority Key Identifier:
                keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a3a2f33322d3332203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:a7:2d:72:8e:36:b0:3f:96:4b:25:ca:3b:29:53:7f:20:
         fe:ef:9d:2d:f8:d2:bd:7b:a9:19:8d:b3:4c:8f:a9:7f:41:f5:
         a0:d0:8c:a4:6f:56:b3:cf:fb:21:23:d4:e0:05:42:4e:07:67:
         9a:97:55:64:16:6d:01:12:69:66:e9:fb:e6:60:b6:ca:89:b9:
         9c:ff:c4:62:3e:67:bb:a6:70:f6:50:34:1e:c8:6e:5b:03:8f:
         68:2e:25:cf:2d:4c:64:e6:d9:51:36:d6:7f:c0:ba:e8:a5:6b:
         d8:e9:94:fd:ca:88:d0:69:20:1c:40:03:a5:26:1d:e1:a2:27:
         a2:83:7d:5d:7c:d4:aa:69:ab:84:a2:87:16:bf:62:0c:aa:af:
         82:e7:8c:c6:82:a2:75:db:65:b0:27:ba:3a:4f:65:6e:62:b3:
         c6:81:16:69:a0:a2:ae:01:86:e1:d0:b0:56:cb:38:e3:5d:2d:
         9e:96:54:3c:d7:51:67:a8:08:a8:38:f6:85:6f:e6:17:bc:14:
         82:ca:07:1b:fc:94:56:cc:5e:ed:0f:51:ed:aa:71:1c:bd:ac:
         78:18:9c:99:5f:51:d2:43:98:c8:64:23:d9:8f:7c:e0:af:e3:
         44:72:c8:3e:96:3f:84:34:5c:86:e7:13:65:46:f7:2d:cb:06:
         37:33:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:19 2025 by rpki-client