Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa
File:                     323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (raw, json)
Hash identifier:          B+W9Frc+XlYM7J/MsTk/HS6qJWiZIbS4YJ+YQvXnnuc=
Subject key identifier:   2C:A7:45:D7:70:5F:9D:B6:E6:A7:D7:FA:92:43:E8:04:A3:DA:BC:82
Certificate issuer:       /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
Certificate serial:       0B7F744E6F9191806D620393B17DD5074A5EB38A
Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa
Signing time:             Fri 22 Nov 2024 16:49:01 +0000
ROA not before:           Fri 22 Nov 2024 16:44:01 +0000
ROA not after:            Fri 21 Nov 2025 16:49:01 +0000
asID:                     263486
IP address blocks:        2804:1298:4000::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl
                          rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7f:74:4e:6f:91:91:80:6d:62:03:93:b1:7d:d5:07:4a:5e:b3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6
        Validity
            Not Before: Nov 22 16:44:01 2024 GMT
            Not After : Nov 21 16:49:01 2025 GMT
        Subject: CN=2CA745D7705F9DB6E6A7D7FA9243E804A3DABC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:3e:37:29:40:65:b3:2f:26:09:eb:27:63:
                    47:52:79:01:bb:7d:a4:80:1b:72:fd:a3:2b:18:8d:
                    b4:ba:7b:c4:5f:2e:bf:53:60:71:c8:12:42:f0:54:
                    ee:66:78:e4:fd:63:b6:00:c9:82:2d:4c:05:55:7d:
                    08:22:f4:93:83:3b:ac:a0:2e:cd:65:f3:7f:cc:f8:
                    e4:0b:0a:65:b4:3c:51:ec:12:f4:e4:44:82:5b:14:
                    d9:67:fc:eb:cd:8b:16:85:1a:72:d2:dc:ff:2b:f5:
                    5c:0b:0f:1b:84:e8:7e:1d:09:7e:0b:ec:87:98:d5:
                    d3:97:27:ee:92:04:b4:f1:53:17:f4:d0:a5:90:f7:
                    6a:e0:9f:8e:17:cc:6a:d6:60:96:ba:61:96:28:3c:
                    83:27:df:61:d8:3c:df:be:56:93:9b:50:53:77:46:
                    9f:60:84:83:5f:69:69:48:f0:4e:f8:58:eb:12:df:
                    e8:a9:95:42:f6:26:71:56:be:e1:7c:d2:c9:91:04:
                    ba:82:05:8b:41:83:89:02:a6:ee:7d:98:0a:fc:f5:
                    52:45:d3:84:11:6a:2a:32:0f:73:7b:23:3a:ba:fa:
                    62:b3:85:fe:2f:57:1b:64:0a:8c:e6:24:ac:e7:2c:
                    fe:a4:82:48:21:3d:19:f4:8c:b6:6b:25:83:94:04:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:45:D7:70:5F:9D:B6:E6:A7:D7:FA:92:43:E8:04:A3:DA:BC:82
            X509v3 Authority Key Identifier:
                keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1298:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:5c:84:2f:b1:c8:c7:90:1e:c7:c5:b0:20:d0:13:1d:ff:08:
         c2:79:0e:3f:25:37:f8:72:21:55:19:0e:c4:a0:8a:bb:ac:b0:
         af:3c:e4:79:d2:c8:c3:be:07:b2:b7:58:bb:ba:42:16:e9:12:
         89:e5:69:7a:24:0c:ea:86:df:aa:ba:2a:b7:21:34:c2:7c:31:
         f2:b1:6e:ba:f1:aa:33:7c:c1:60:7d:0b:4b:e2:f6:72:ec:d3:
         4f:dd:b0:93:ec:ae:14:ff:10:70:89:e5:0d:ff:ad:f8:6c:4e:
         ac:d0:4e:0f:6b:0b:f2:54:6a:b4:62:87:96:95:09:af:d4:ae:
         b0:04:7a:6e:48:ab:c0:b9:27:b0:68:f1:d2:43:29:a2:27:61:
         b3:a2:05:fa:12:13:e6:66:bb:df:be:3a:d5:d8:7a:72:0b:ca:
         a4:24:85:51:12:0f:ea:9b:7b:5e:62:11:5b:bd:74:47:cf:ff:
         61:2e:60:93:46:e1:e7:3c:dc:fa:b3:9d:1b:ab:b2:ae:9d:f8:
         81:72:18:8c:b1:f7:96:8e:f0:e5:5f:78:c4:be:d6:e1:69:09:
         16:f7:03:32:9a:41:05:24:4b:01:f1:d0:90:b1:5b:8e:bc:24:
         21:5e:de:c8:48:f6:ff:42:23:f0:ab:a5:77:81:26:49:38:09:
         1d:d6:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:44:15 2025 by rpki-client