Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
File:                     323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa (raw, json)
Hash identifier:          W3wTlvePLpHNPbPRiB6RJiK82ghrQTDdFaRGX4Uogn8=
Subject key identifier:   BB:2F:EA:24:00:1C:41:F8:40:2B:39:A6:F4:FB:29:C7:39:CF:29:1B
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       633432BFA6E1DA9CFADB46A8AA6AFF7A736403BA
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa
Signing time:             Wed 04 Jun 2025 13:21:56 +0000
ROA not before:           Wed 04 Jun 2025 13:16:56 +0000
ROA not after:            Wed 03 Jun 2026 13:21:56 +0000
asID:                     263887
IP address blocks:        2804:2740:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 19:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:34:32:bf:a6:e1:da:9c:fa:db:46:a8:aa:6a:ff:7a:73:64:03:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jun  4 13:16:56 2025 GMT
            Not After : Jun  3 13:21:56 2026 GMT
        Subject: CN=BB2FEA24001C41F8402B39A6F4FB29C739CF291B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:c6:4c:e2:f2:67:a8:83:68:2d:b2:d5:4d:
                    0a:a4:dd:ce:8d:86:7d:37:cf:51:6a:36:91:1c:68:
                    bc:80:14:0c:c5:82:85:6d:0b:0e:43:66:3a:e4:3a:
                    e4:63:89:e6:55:d8:a3:c6:de:a1:0c:c6:e3:f8:7d:
                    56:20:7d:44:f0:94:cf:f0:4f:7d:e2:c6:a9:02:8e:
                    8f:c4:28:93:84:43:2e:17:32:d5:cb:50:c7:5b:88:
                    2d:85:11:95:4d:4b:47:d4:c0:c9:1a:51:18:6f:aa:
                    ea:16:17:57:3a:c3:ad:e4:9f:3a:65:84:69:55:b5:
                    c4:d9:d6:37:67:e0:44:4c:35:04:1e:7f:1b:ac:fd:
                    01:f5:f6:85:bb:b4:3d:3a:d4:7b:2c:da:d2:a0:03:
                    c3:34:7c:0f:fd:96:8b:d3:8e:b2:bf:f0:61:67:bc:
                    bd:d3:a1:83:e3:a4:e8:03:67:ca:01:31:1c:91:6a:
                    77:9d:6c:df:fd:52:db:99:96:41:a0:70:01:07:11:
                    03:12:73:30:da:ba:a3:b9:28:88:bb:80:88:ff:68:
                    35:ac:2c:50:6b:f3:13:06:c9:67:55:88:d1:86:9e:
                    11:90:65:0a:b1:8a:88:55:a7:38:3b:03:24:4f:eb:
                    d2:eb:1c:c0:dd:7d:7b:53:b2:b4:d0:7a:58:a7:2d:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2F:EA:24:00:1C:41:F8:40:2B:39:A6:F4:FB:29:C7:39:CF:29:1B
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a383030303a3a2f33332d3333203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:98:0e:b4:ef:3f:8a:af:89:21:45:53:02:77:dd:25:ec:
         f8:5f:83:0c:a8:18:91:1d:a4:4a:25:be:ce:e6:a3:c2:7c:23:
         b0:49:7c:64:fd:d9:8d:45:90:fc:d8:b4:2c:21:7f:55:06:9c:
         cf:89:9e:de:40:15:0e:aa:d7:31:51:59:d1:51:dd:c9:85:41:
         a5:00:62:5a:5d:15:c0:c2:9e:41:21:6e:87:4a:0f:54:33:e1:
         c7:b8:3b:6b:6c:89:14:cb:79:44:13:fc:46:08:8d:60:4c:18:
         c8:53:8f:d4:0c:44:e1:45:c9:19:ac:52:5d:b1:f9:e5:34:9a:
         12:a0:2d:ee:d2:50:60:05:dc:b9:af:6d:24:3d:dd:c5:b8:94:
         64:6c:2a:74:cb:58:46:cf:4a:f4:ac:e5:8f:55:04:bb:ad:9b:
         67:89:43:60:d8:a9:a9:2b:e1:15:3c:8a:38:cf:30:8d:cc:33:
         21:f9:c0:39:2d:8e:a1:2e:17:dd:5b:c1:52:6e:4d:53:ed:81:
         f2:f1:e0:ce:a9:63:74:ee:e1:5b:47:07:00:5a:aa:d4:2a:84:
         98:73:cd:e1:1d:70:db:75:17:00:c2:1f:24:56:15:83:5b:94:
         63:84:d8:00:61:5c:2e:e5:78:2d:ff:68:5e:d3:77:b4:0e:45:
         b3:9a:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:52 2025 by rpki-client