Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
File:                     323830343a326263343a3a2f33322d313238203d3e20323635313734.roa (raw, json)
Hash identifier:          MSZC4cnjSTPVauvz+PyFfCygCJbJ4516xcQYT7CZNjk=
Subject key identifier:   1E:CB:10:01:4A:15:04:0D:A1:78:83:3F:94:8B:7A:2D:78:00:E9:28
Certificate issuer:       /CN=51A41F1275FF94CC496816F994B49E1F6B638B92
Certificate serial:       6F06C22AA5AADC71F87D36D35A5833D026EE38A3
Authority key identifier: 51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
Signing time:             Wed 29 Jan 2025 20:10:37 +0000
ROA not before:           Wed 29 Jan 2025 20:05:37 +0000
ROA not after:            Wed 28 Jan 2026 20:10:37 +0000
asID:                     265174
IP address blocks:        2804:2bc4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl
                          rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 01:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:c2:2a:a5:aa:dc:71:f8:7d:36:d3:5a:58:33:d0:26:ee:38:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A41F1275FF94CC496816F994B49E1F6B638B92
        Validity
            Not Before: Jan 29 20:05:37 2025 GMT
            Not After : Jan 28 20:10:37 2026 GMT
        Subject: CN=1ECB10014A15040DA178833F948B7A2D7800E928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:82:a4:66:c4:3e:61:df:30:16:bb:40:81:
                    e8:10:4a:55:8e:fa:c9:f5:fa:1b:9d:02:cd:3c:a0:
                    9c:c9:18:76:8d:0e:b4:fa:70:74:34:bc:7d:c5:b0:
                    87:2c:2c:51:16:a8:66:96:6c:40:b2:ea:49:ef:e8:
                    7c:9d:09:f6:f3:b0:27:be:bf:f2:88:48:f8:62:10:
                    3e:2f:88:c9:1a:c7:f6:8e:84:49:20:a8:14:f7:5e:
                    6c:9d:0f:12:4b:74:1c:d7:55:d3:c5:76:33:37:40:
                    6c:42:57:10:18:de:0c:5e:40:22:dc:1e:48:6f:ce:
                    69:3d:9c:16:84:fe:d5:bc:82:d9:50:5f:ad:09:45:
                    7e:df:21:17:08:fc:d3:57:30:03:34:96:d0:bd:db:
                    2c:b2:d8:c6:16:01:98:37:b7:3c:0a:43:62:a8:dc:
                    89:95:d1:d8:5f:a6:5c:03:0b:fb:2e:fa:e2:b1:90:
                    4f:48:4f:4f:42:c0:e2:41:2e:57:87:85:ce:82:ef:
                    fd:0c:27:5e:b1:49:c6:92:9d:cb:80:0e:f9:ef:cc:
                    b3:81:ce:82:c5:27:66:ba:6c:c0:44:4e:09:c0:3f:
                    13:9e:71:cb:f7:b4:41:18:90:59:0b:ce:4c:9c:76:
                    e8:3f:43:2d:fd:7a:db:db:33:bb:10:6e:36:5c:25:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:10:01:4A:15:04:0D:A1:78:83:3F:94:8B:7A:2D:78:00:E9:28
            X509v3 Authority Key Identifier:
                keyid:51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:cc:20:51:5f:ce:01:64:02:fc:6d:6d:2c:b7:0c:23:56:fa:
         dd:d4:59:ee:8a:ee:47:05:2a:53:01:f7:c2:64:2a:2d:aa:f2:
         e2:e6:ff:7c:e9:21:8d:6d:75:95:bc:2d:53:5b:cb:c3:e9:fb:
         2c:cf:f4:be:6f:9f:be:35:3c:fb:2b:f7:a4:31:61:28:6d:5a:
         eb:c1:72:ce:e9:47:09:32:b2:79:61:b0:81:42:2f:3b:e0:c3:
         ff:55:79:53:3b:01:9c:ad:52:b6:f3:e3:32:54:7c:c5:78:ea:
         ba:bd:59:de:a6:4d:6f:2d:49:86:9a:3c:ed:db:9b:a2:cc:a8:
         ac:06:bf:f5:8d:af:fa:a0:09:5a:0d:3d:de:d1:5c:b2:ff:26:
         5a:4a:c4:13:f8:31:34:b7:f1:4a:04:eb:95:77:54:ca:94:e0:
         0a:9c:83:73:0a:d1:4c:e8:25:51:7e:ed:05:45:4f:37:0d:2e:
         78:3f:49:27:3c:05:79:1f:b8:0f:68:b2:a2:69:f0:86:06:23:
         72:50:be:e1:6c:4c:00:dc:2f:3b:ba:5e:9d:bd:c9:c4:df:1a:
         49:78:e8:78:f2:0b:7a:5b:bb:36:29:d2:a9:46:a9:89:d1:2e:
         7e:04:d6:9a:c6:bf:df:3a:17:16:1d:09:b9:91:08:3e:a4:ef:
         d3:85:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:26 2025 by rpki-client