Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa
File:                     323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa (raw, json)
Hash identifier:          rHMawISW74ABh6Ymr5evosGIJ0yvV173eVcCKVDaJvU=
Subject key identifier:   82:49:8D:8F:FB:C7:8A:9B:A9:2A:47:C5:C2:BC:6C:FB:C0:07:90:3C
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       583AFBB4D5C9DF58CBCE1023E02020C5C8B5B6A2
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa
Signing time:             Wed 05 Mar 2025 20:00:07 +0000
ROA not before:           Wed 05 Mar 2025 19:55:07 +0000
ROA not after:            Wed 04 Mar 2026 20:00:07 +0000
asID:                     263900
IP address blocks:        2804:276c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3a:fb:b4:d5:c9:df:58:cb:ce:10:23:e0:20:20:c5:c8:b5:b6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Mar  5 19:55:07 2025 GMT
            Not After : Mar  4 20:00:07 2026 GMT
        Subject: CN=82498D8FFBC78A9BA92A47C5C2BC6CFBC007903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:f1:dd:c8:2b:98:37:c8:a2:81:b9:d3:13:
                    2d:85:48:e1:ec:a6:68:f9:3a:5e:6a:e2:16:a4:80:
                    46:4a:59:bf:58:b1:d5:7b:b0:be:6d:14:f6:5c:bc:
                    f9:e8:ea:db:36:5e:81:24:55:cb:5a:ba:e0:0e:ca:
                    d0:d7:e5:80:29:a2:5c:e8:6c:9b:80:c0:10:c2:62:
                    63:c3:81:a9:97:c1:e9:ac:bd:17:fd:38:b9:35:42:
                    6c:5b:ae:ea:0b:a5:82:fb:dc:df:68:35:62:a6:8e:
                    65:9a:83:36:36:36:b7:81:dc:d7:7d:06:55:79:da:
                    be:63:05:2b:81:f8:0c:77:58:38:fa:f6:27:f5:fd:
                    0a:07:c9:4b:7a:06:da:57:71:0b:6c:0c:a4:ff:6b:
                    45:2b:33:13:5a:de:46:94:02:f5:d8:2c:d9:e4:7c:
                    40:83:06:aa:d2:27:a7:e2:cf:03:e0:99:d8:1b:1a:
                    b0:e1:c5:2a:d7:14:8f:bb:0e:5d:8c:91:09:e0:fe:
                    10:80:98:88:37:bb:11:13:07:ac:b7:74:9c:ea:54:
                    0f:6b:10:c3:f7:16:73:b8:a2:e9:4f:97:8f:70:e8:
                    8b:93:f3:fe:42:f0:3d:d8:be:18:75:6a:69:af:c7:
                    08:e6:45:ec:c4:f2:04:64:75:86:d2:02:55:15:ed:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:8D:8F:FB:C7:8A:9B:A9:2A:47:C5:C2:BC:6C:FB:C0:07:90:3C
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:276c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:50:f2:54:24:81:d5:99:f3:f1:75:26:e0:b1:35:4b:41:
         4e:96:29:66:8e:87:5a:3b:a2:24:f4:73:a8:65:26:1d:ce:e0:
         d1:65:16:93:0c:93:e0:31:8e:d8:68:3b:40:5c:fa:43:90:e2:
         94:4e:df:c6:65:fd:f8:af:c8:8d:f8:25:c4:31:a8:af:47:d8:
         09:af:79:d9:de:fe:02:56:40:19:5a:c2:43:9d:44:e6:99:00:
         c7:8b:69:bc:63:a2:d0:3d:63:ec:72:b1:bf:80:d1:61:ea:b4:
         21:5d:c6:4e:8a:d4:77:09:30:07:19:a7:b1:f7:ef:f4:6a:e3:
         44:8a:1a:56:4c:3f:8b:41:61:03:5f:99:57:3d:21:da:0f:92:
         9a:a2:43:8e:41:f8:12:68:5f:17:da:b7:c0:ce:63:24:c5:16:
         e5:69:54:2d:c2:96:12:ba:45:81:3f:7c:b2:39:30:b2:8d:f5:
         79:6c:44:da:b2:2b:93:94:d3:09:26:81:62:76:07:b3:a4:da:
         e5:47:54:9e:1b:b7:ce:56:c2:57:fe:fb:90:89:47:a5:f1:59:
         39:0f:3a:c2:eb:54:f5:93:8a:32:dc:21:c9:73:c0:02:41:20:
         f5:5f:3d:b2:f7:b4:af:75:81:07:42:cd:3e:e9:c9:48:70:8e:
         79:34:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:40 2025 by rpki-client