Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa
File:                     323830343a323536633a3a2f33322d3438203d3e20323634323830.roa (raw, json)
Hash identifier:          FEHW+lalSdIM8ug/1hSnuyIyfXi6lUTgog0s1q3zD30=
Subject key identifier:   DB:AE:12:33:35:CF:03:DB:08:21:A6:98:32:8F:E9:0D:CA:F5:89:B1
Certificate issuer:       /CN=CC067DAAC9269BC78CA094B1DF2073E50079CF60
Certificate serial:       17A310BFB91744AB60C1F333DA98077CD94A9D0A
Authority key identifier: CC:06:7D:AA:C9:26:9B:C7:8C:A0:94:B1:DF:20:73:E5:00:79:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa
Signing time:             Thu 06 Mar 2025 02:33:06 +0000
ROA not before:           Thu 06 Mar 2025 02:28:06 +0000
ROA not after:            Thu 05 Mar 2026 02:33:06 +0000
asID:                     264280
IP address blocks:        2804:256c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a3:10:bf:b9:17:44:ab:60:c1:f3:33:da:98:07:7c:d9:4a:9d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC067DAAC9269BC78CA094B1DF2073E50079CF60
        Validity
            Not Before: Mar  6 02:28:06 2025 GMT
            Not After : Mar  5 02:33:06 2026 GMT
        Subject: CN=DBAE123335CF03DB0821A698328FE90DCAF589B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:be:a2:4f:58:46:cd:d4:e3:57:0d:d3:6c:
                    84:9c:46:32:8b:15:fa:aa:cf:7e:10:ec:27:8d:e6:
                    34:e4:be:13:5f:a5:e5:ff:b8:03:42:c0:24:b3:59:
                    91:40:70:22:6d:8d:88:87:6d:4f:a9:dd:83:68:cb:
                    a4:7d:3c:d5:d7:b6:40:a8:86:05:7a:dc:0a:26:64:
                    d2:03:c2:36:5e:d3:a5:5b:da:88:ef:e9:6f:e5:06:
                    42:eb:07:14:af:c9:a4:97:7c:22:15:55:ce:a4:24:
                    b6:bf:2a:9f:e7:f9:04:45:f7:67:91:0e:d1:dd:b9:
                    b3:db:93:16:5e:73:1c:67:72:38:22:58:cc:3d:9a:
                    94:eb:91:a7:f6:d9:30:3c:f1:20:45:82:39:5f:81:
                    99:34:7f:12:b7:56:b8:8f:b8:b0:d0:5e:bc:00:a4:
                    72:3f:ae:95:27:c2:ef:ea:e1:b3:46:4c:d7:b5:61:
                    73:0e:1e:9f:68:10:97:50:b6:75:e0:66:fd:39:fa:
                    a1:b6:1a:2c:a5:e6:94:6b:5d:de:bc:4e:98:13:49:
                    f5:b4:5e:8d:55:2f:3e:a7:65:51:af:be:93:b8:34:
                    f2:02:8f:b9:43:22:d6:95:67:35:8a:a7:71:86:3d:
                    25:44:c2:45:40:a8:9a:d1:c3:c8:56:f1:53:4c:22:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:12:33:35:CF:03:DB:08:21:A6:98:32:8F:E9:0D:CA:F5:89:B1
            X509v3 Authority Key Identifier:
                keyid:CC:06:7D:AA:C9:26:9B:C7:8C:A0:94:B1:DF:20:73:E5:00:79:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/323830343a323536633a3a2f33322d3438203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:256c::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:a6:78:99:20:ce:3d:77:38:80:e9:2e:2b:fc:50:66:ed:0e:
         06:90:53:09:ad:c2:66:15:07:b3:79:df:1d:4f:76:ea:b4:e4:
         87:ca:8c:44:18:81:a1:d5:71:71:98:19:94:89:2c:da:4f:81:
         0a:c2:95:f0:f5:e2:69:11:a8:dd:b1:78:9c:e9:e8:64:fc:91:
         9c:58:0d:ae:28:17:18:33:d6:85:b9:fa:58:61:a0:5b:a1:43:
         01:8e:12:07:0e:2f:73:b1:98:79:50:2e:55:c8:66:4f:62:e7:
         9c:40:12:9c:24:30:77:f9:af:01:47:09:0e:88:db:bc:b1:9f:
         49:07:2e:49:84:db:28:11:28:83:34:0f:20:83:45:52:04:c5:
         6e:ce:f7:96:7c:96:f1:96:4c:71:96:9d:d5:cf:af:7c:d5:04:
         58:4f:10:05:f7:34:f1:ca:fc:9b:05:3c:52:17:bf:99:24:15:
         93:50:52:bf:5e:ac:57:5a:f6:d8:18:03:f0:62:ff:8d:4a:c6:
         0e:67:10:9c:0f:e5:0f:e4:ce:13:28:31:fe:d7:00:d8:fb:24:
         7b:47:df:05:6e:57:4b:8e:5a:fd:f8:65:5a:fd:e7:1b:b9:7e:
         9b:b9:af:3e:7d:d7:cc:f7:17:0f:c2:3a:80:74:af:59:c9:01:
         b6:35:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:59 2025 by rpki-client