Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
File:                     323830343a383466343a3a2f33322d3431203d3e20323732353438.roa (raw, json)
Hash identifier:          oXzqou6hsYj2ELcRjSkh2wVr70A0V8XsJDsMDK91qwo=
Subject key identifier:   C3:3F:20:ED:BB:E7:F5:9F:D4:19:0C:2D:D0:9B:92:00:90:F1:EF:50
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       D5E41981F31B8F7E2B429EF659C6E367918A13
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa
Signing time:             Thu 06 Mar 2025 15:56:48 +0000
ROA not before:           Thu 06 Mar 2025 15:51:48 +0000
ROA not after:            Thu 05 Mar 2026 15:56:48 +0000
asID:                     272548
IP address blocks:        2804:84f4::/32 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:e4:19:81:f3:1b:8f:7e:2b:42:9e:f6:59:c6:e3:67:91:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Mar  6 15:51:48 2025 GMT
            Not After : Mar  5 15:56:48 2026 GMT
        Subject: CN=C33F20EDBBE7F59FD4190C2DD09B920090F1EF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:b3:00:d6:cc:2b:9f:86:55:bf:1c:1a:1f:
                    d1:76:11:08:50:6e:6f:e3:a5:bf:07:97:1a:b5:18:
                    21:18:3f:81:eb:e6:7f:36:a0:fb:3d:71:b6:e1:10:
                    62:1c:cb:50:80:1a:cb:47:73:b4:d7:d7:80:91:2a:
                    fc:ac:b2:b3:cf:b5:2a:b7:15:91:80:5e:36:cb:50:
                    fe:c7:5f:13:97:6e:ab:af:32:46:89:9a:ef:d1:77:
                    d4:86:12:c2:c3:af:90:7f:74:1a:4b:f2:cd:f8:25:
                    48:e2:2e:e5:93:a4:7e:04:3c:d7:a7:e6:6c:7b:c6:
                    ee:37:8f:4b:e1:69:8b:de:e9:4f:61:94:d5:37:24:
                    08:0a:a3:61:05:31:9f:ea:9f:cb:a0:c2:c4:62:de:
                    6a:4f:88:f1:64:f5:fd:ab:20:93:41:a5:0b:9b:23:
                    d4:f3:6d:8c:02:02:78:82:c8:3f:89:22:a1:0b:3b:
                    c8:b7:84:5f:8d:2c:5e:9e:2c:6e:74:46:8a:34:5d:
                    43:50:2b:b1:94:4b:27:83:b4:65:e4:be:dc:00:aa:
                    05:09:29:3b:ad:c9:58:fc:f3:78:2d:d5:90:92:fc:
                    b8:93:03:96:57:60:dd:4a:84:07:ed:c3:7a:ae:46:
                    81:93:77:21:6c:66:a7:84:13:87:7e:35:49:14:3e:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:20:ED:BB:E7:F5:9F:D4:19:0C:2D:D0:9B:92:00:90:F1:EF:50
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/323830343a383466343a3a2f33322d3431203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:90:19:25:49:a0:aa:55:b8:17:a2:34:63:11:92:68:62:
         74:3a:1d:56:41:9d:d4:c2:e2:52:1a:e7:d4:8c:6f:56:4e:7f:
         57:69:12:c0:f0:89:e6:99:07:6a:c5:0a:da:c6:16:b0:69:1b:
         80:bb:08:09:ed:c5:c4:1c:9c:77:6f:84:c9:6b:24:f0:52:bd:
         c8:28:ac:21:3e:f5:b1:92:f5:83:9a:c6:82:89:4b:91:ca:e0:
         a4:26:fe:b4:96:b3:c2:75:44:4c:ae:78:99:2b:23:a3:cb:43:
         72:81:11:b5:4c:59:f3:01:1b:7e:b1:fe:4f:78:10:ba:af:0a:
         8f:2d:eb:08:84:17:3f:8b:7c:26:09:9f:be:dc:6c:1c:74:5e:
         ec:81:05:35:a3:0c:96:46:8c:16:be:e8:c7:82:cc:1b:1e:80:
         95:94:6e:65:57:1e:8a:f9:8c:ad:e6:4f:23:21:16:5b:33:73:
         ef:99:45:03:33:d3:dc:d9:c9:77:12:c0:4e:ed:a5:05:af:c8:
         e7:c1:47:02:3d:a9:67:05:d2:f7:79:3d:d2:70:0d:1d:51:0a:
         04:b1:b9:09:79:a8:4f:5c:9a:c5:b0:20:3f:d0:ba:e8:c2:ef:
         7f:ee:3f:c8:ac:bd:0e:6d:5a:39:eb:64:39:38:19:bf:10:e8:
         99:03:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:57 2025 by rpki-client