Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
File:                     323830343a373636633a3a2f33322d3332203d3e20323731313131.roa (raw, json)
Hash identifier:          3rnaR44203C0S+1T1mwNKTkurg2tIBTFmj4MuO9T2OU=
Subject key identifier:   6F:E6:C1:53:84:5A:0C:7C:10:A5:A7:94:47:90:50:65:96:02:FC:04
Certificate issuer:       /CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
Certificate serial:       3812BB38FBB9BCA928E2192614E87AF1CD4DBE57
Authority key identifier: 4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa
Signing time:             Thu 06 Mar 2025 18:54:58 +0000
ROA not before:           Thu 06 Mar 2025 18:49:58 +0000
ROA not after:            Thu 05 Mar 2026 18:54:58 +0000
asID:                     271111
IP address blocks:        2804:766c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:bb:38:fb:b9:bc:a9:28:e2:19:26:14:e8:7a:f1:cd:4d:be:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A76AD5E8EDE48E8E0141FB450CC590B38DF818A
        Validity
            Not Before: Mar  6 18:49:58 2025 GMT
            Not After : Mar  5 18:54:58 2026 GMT
        Subject: CN=6FE6C153845A0C7C10A5A794479050659602FC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:51:2b:a9:bc:09:68:cd:d2:6c:7c:b3:96:
                    28:94:25:bb:67:38:68:4f:60:3f:58:28:aa:af:2e:
                    ba:81:4e:01:df:ee:4a:3c:35:79:8d:90:0d:cf:22:
                    a3:7c:2c:6a:db:f4:31:81:29:a5:42:83:43:e5:ee:
                    ec:af:71:ee:bd:d4:dd:a9:1e:fc:63:c2:03:b2:73:
                    85:e4:22:8f:58:8f:69:59:8c:1a:4e:c7:c9:f1:c4:
                    3b:c9:9e:e2:82:bb:b4:43:b0:1b:0d:22:93:e4:bc:
                    87:15:e0:cd:1b:9f:29:de:9f:e2:ae:68:57:24:a4:
                    e9:77:e7:12:25:13:67:a9:e8:12:8a:4e:03:d7:9c:
                    4e:b4:49:dd:cd:36:5c:d2:5f:5b:d5:06:ea:fd:a0:
                    d0:29:1c:ad:f0:66:a6:85:b1:a0:79:96:92:0a:7a:
                    41:64:26:15:89:a2:62:4c:67:49:18:e1:90:9f:cb:
                    15:b2:b1:9f:8b:cf:ce:ba:14:9c:36:c7:a1:58:0c:
                    58:95:9d:f1:84:26:09:af:c5:da:e3:a9:7a:2d:08:
                    59:5a:bc:02:95:33:b9:a8:06:b8:d6:6b:fc:03:c8:
                    27:08:59:fa:3f:b2:2a:ca:e8:6e:b7:36:5d:ee:0c:
                    95:14:b8:6c:e2:59:e0:60:73:1f:17:4f:77:06:f9:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:C1:53:84:5A:0C:7C:10:A5:A7:94:47:90:50:65:96:02:FC:04
            X509v3 Authority Key Identifier:
                keyid:4A:76:AD:5E:8E:DE:48:E8:E0:14:1F:B4:50:CC:59:0B:38:DF:81:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A76AD5E8EDE48E8E0141FB450CC590B38DF818A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/1/323830343a373636633a3a2f33322d3332203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:48:8e:23:f7:98:ff:70:81:78:5e:24:7c:73:c8:55:a2:4e:
         5b:a9:00:4b:5f:91:b8:d0:1d:ec:d0:60:81:db:c3:af:88:39:
         f0:31:b0:8a:13:b4:1d:b1:81:b5:1f:d7:73:48:61:49:b9:57:
         80:24:42:29:73:dc:64:60:8f:61:ed:61:d6:89:d6:2d:28:f7:
         98:be:c8:d2:d7:60:9d:b1:8a:8a:d9:d7:01:b8:79:df:36:13:
         92:18:b2:00:90:db:1d:fa:f3:2c:17:ec:98:0b:34:cf:45:52:
         13:fe:c0:bd:96:e7:cd:93:16:8d:be:4e:77:12:51:d7:fc:15:
         ec:cb:c7:7b:2b:41:29:e6:70:a5:5e:ac:6c:51:b1:57:97:00:
         12:2c:34:1a:41:b4:bd:68:61:04:e4:4c:6f:ea:b1:ae:68:8a:
         f6:9d:e2:a6:88:76:3f:9b:57:f3:23:02:20:18:ab:ac:d0:38:
         e4:96:30:2a:44:d4:e1:95:46:cc:c8:1f:e1:f0:23:19:10:2f:
         3a:98:10:6e:07:5c:a8:23:e5:58:a4:0e:a6:d9:4f:74:4e:d9:
         f8:bf:2e:d9:3c:f0:cf:fc:03:d8:34:b5:7e:76:18:93:a4:a3:
         7b:ba:3b:86:61:b6:be:16:c5:c3:2c:fb:ec:fe:2b:99:aa:34:
         73:93:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:06:58 2025 by rpki-client