Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa
File:                     323830343a3639383a3a2f33322d3438203d3e203238353733.roa (raw, json)
Hash identifier:          pLq4QFA3KC7IvjfLNAjvGaoN6lQeoYCFQLEMhxo18uw=
Subject key identifier:   70:B8:B8:4D:B5:D0:55:04:CA:15:C1:78:B6:21:49:F8:5F:81:75:55
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4420AC69437A550AC8B7708985889B67432AAC54
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     28573
IP address blocks:        2804:698::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:20:ac:69:43:7a:55:0a:c8:b7:70:89:85:88:9b:67:43:2a:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:a4:3f:ba:b8:25:9e:5c:1e:d6:7a:01:55:
                    d9:36:31:37:b2:73:cf:34:73:fa:ce:cb:8b:49:52:
                    2f:fd:5d:b1:c4:15:dc:5b:2e:de:31:c1:dc:b6:9e:
                    c6:1c:70:43:23:09:2d:26:a5:dc:6b:c3:70:b7:19:
                    f1:c0:2f:31:cb:1c:86:fd:c1:9a:ca:11:4e:ab:72:
                    8c:fa:92:9b:dc:10:f2:cd:2b:5d:11:27:00:4e:19:
                    78:51:d3:24:b9:e9:56:ca:6c:17:03:7a:76:5c:2c:
                    4f:a9:2f:13:f4:f7:d6:39:d7:5b:e3:d7:ce:d0:55:
                    19:a2:60:f8:85:bb:d3:03:ee:2e:fe:d4:03:88:98:
                    5d:98:90:3d:ce:2b:8e:40:15:b6:fa:ec:ea:37:1a:
                    24:43:4f:fc:f0:ae:b4:11:86:36:ad:5d:c1:bc:12:
                    68:46:d0:aa:2d:36:95:49:90:75:b7:cb:73:a4:53:
                    4e:c6:6b:70:00:b8:f6:82:63:05:07:10:d8:ac:28:
                    a3:20:e9:b8:6a:1e:39:16:59:9d:f0:bd:58:18:2f:
                    40:fe:1a:a2:df:55:2e:f2:5c:1e:4c:01:cc:a9:62:
                    7a:23:74:c9:96:f6:e3:29:e9:ce:b3:85:ca:6a:72:
                    06:61:de:63:94:7f:fa:7d:03:25:d2:79:e1:90:b8:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:B8:4D:B5:D0:55:04:CA:15:C1:78:B6:21:49:F8:5F:81:75:55
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:49:f3:1c:63:9d:7f:ed:97:e5:be:4c:83:fa:78:8f:41:31:
         a0:f2:18:29:94:88:3d:5e:93:52:cb:72:e6:99:a0:79:d0:31:
         02:5c:ac:64:dc:c6:a4:23:72:fe:9b:b0:90:7c:71:e1:7b:18:
         8c:55:7a:f3:35:d9:6d:43:ae:02:d8:d3:c9:49:14:a2:72:37:
         72:ae:79:0e:36:ba:87:2a:c9:b5:3e:cd:54:7e:db:15:41:4a:
         f0:84:0d:f6:b8:25:bf:da:bd:c2:5f:8c:18:8e:b5:30:da:01:
         4d:bf:3a:37:db:51:af:31:b1:a4:bc:cf:4e:52:7d:05:7b:84:
         7f:e0:ca:ef:7a:de:0a:c4:c0:99:e3:2c:03:ec:ce:af:7b:a2:
         ff:75:f7:f0:c1:6e:7b:ed:22:00:9d:a4:74:70:0a:eb:26:04:
         d6:3a:0a:55:ee:44:f1:90:22:ff:40:fe:f8:8c:5d:23:cf:8d:
         41:64:74:88:67:da:0b:5b:7f:45:d7:89:b6:2d:9d:c9:8b:b6:
         d1:23:7f:c6:41:e6:54:99:17:5d:be:42:0b:64:17:78:35:56:
         5b:c7:db:fd:f1:fc:35:61:2f:86:21:4e:4c:ab:1b:04:7d:90:
         28:87:aa:8e:37:bf:6d:4f:68:02:40:e4:a2:da:7f:ba:7d:4e:
         3c:bb:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:31 2025 by rpki-client