Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          MlsIcbt+7QWCpD0Cf7HV/IzWAB0AUSWZ3hcn6fj3vpg=
Subject key identifier:   A5:8B:1F:55:1F:AB:0E:C2:3D:EF:83:79:5F:7E:C8:0E:CB:5A:21:91
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       57D2313B1FC1587C8BB2DE8A936E9A04E8E5154F
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        2804:5788:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d2:31:3b:1f:c1:58:7c:8b:b2:de:8a:93:6e:9a:04:e8:e5:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:af:23:80:ea:bf:d6:e5:46:99:3a:6f:14:
                    78:81:c0:7c:aa:76:03:5f:9f:6d:f3:cc:3d:67:5a:
                    25:d9:4a:40:cf:ad:da:c9:e2:cf:55:84:15:3e:d7:
                    fa:c0:f4:41:d2:f3:0e:37:36:8e:c3:bc:80:48:7f:
                    e5:6d:e5:b7:8c:6f:c9:7b:72:33:d2:8b:5b:73:67:
                    a2:4a:a3:a0:de:cf:5b:54:48:8f:19:73:cd:9b:8b:
                    37:62:47:73:ec:af:49:4b:58:39:ad:a6:ad:e4:b0:
                    1b:f6:af:93:4c:c1:22:11:a2:aa:7b:59:6c:a3:a9:
                    19:d3:c6:64:16:8f:cc:f8:85:b5:e8:c2:13:81:b9:
                    2c:bb:0e:d1:6a:3c:72:ee:d9:33:27:ea:9c:8e:e3:
                    c2:8f:f5:34:5d:f3:37:f1:f9:2e:37:e8:8a:39:e7:
                    f2:f1:8a:3b:44:79:b2:a9:67:4b:3f:ca:07:41:ba:
                    d8:f0:c7:bc:03:3a:ef:a0:15:d8:65:2e:f8:bd:f1:
                    70:15:5b:e4:4f:54:ed:5d:26:52:7c:61:93:dd:3e:
                    44:69:b1:8e:71:da:5a:f0:de:60:34:5c:31:fd:1d:
                    15:c6:af:fb:e4:16:9f:1c:1c:d6:dd:f0:26:ce:80:
                    ed:72:1d:14:f9:64:7c:4f:61:bd:c0:c5:36:f7:6a:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8B:1F:55:1F:AB:0E:C2:3D:EF:83:79:5F:7E:C8:0E:CB:5A:21:91
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a383030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:ef:05:ee:29:65:ba:c6:6c:92:93:76:8e:13:2e:cb:ef:
         e5:11:45:44:fc:b8:a6:e0:5b:6c:69:91:4c:c8:89:29:31:53:
         f0:84:86:e5:78:f8:68:52:aa:4a:7c:62:06:7a:77:8b:24:ba:
         3c:e3:c1:d6:c9:1b:3c:ab:e2:73:b7:a5:d6:c4:0d:58:9c:50:
         4f:4b:e5:3b:92:54:62:19:8e:87:03:45:51:4f:88:9a:f5:ec:
         da:b3:cb:4c:3c:cf:1e:19:99:88:1f:2d:cd:e0:06:18:e1:f8:
         c0:e1:23:10:a9:cd:e2:37:2b:92:ac:a7:4e:e4:ef:83:53:84:
         c6:af:f1:76:8e:97:64:ee:c1:16:83:52:fd:4c:0e:eb:9d:c1:
         4e:ea:2f:3b:eb:17:99:de:47:7e:e6:2d:38:48:b6:dc:1e:ca:
         79:dc:6d:d6:29:13:1a:cd:5e:f9:b2:ee:19:05:4d:ee:75:01:
         17:ae:d5:ec:27:b2:0e:d2:b5:ce:39:ac:5b:fd:9c:89:5b:8e:
         34:53:82:af:a2:05:8e:5f:03:ff:e4:15:8b:81:86:08:9f:ba:
         7b:9d:b5:2b:01:f8:c7:b6:54:b6:84:41:00:36:f8:eb:b8:8a:
         ce:a5:c2:5a:cb:be:e1:bf:91:58:02:49:52:45:87:c1:f5:f7:
         0e:ef:b7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:22:33 2025 by rpki-client