Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa
File:                     323830343a343064343a3a2f33322d313238203d3e20323635393834.roa (raw, json)
Hash identifier:          WLYhSMEXxjKAD12Bb5qg/Y+DGJZK5kxo0vyS7bks/1Y=
Subject key identifier:   39:BA:1A:D2:39:DD:53:64:06:35:E3:18:D1:71:98:78:22:12:ED:4A
Certificate issuer:       /CN=A5A6676C87AFB1AC441BC809A5F9E72B5AD73061
Certificate serial:       2240ED82B25775BB9597ADBD73BD65A6B6DFF084
Authority key identifier: A5:A6:67:6C:87:AF:B1:AC:44:1B:C8:09:A5:F9:E7:2B:5A:D7:30:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa
Signing time:             Fri 23 May 2025 18:15:15 +0000
ROA not before:           Fri 23 May 2025 18:10:15 +0000
ROA not after:            Fri 22 May 2026 18:15:15 +0000
asID:                     265984
IP address blocks:        2804:40d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.crl
                          rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:40:ed:82:b2:57:75:bb:95:97:ad:bd:73:bd:65:a6:b6:df:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A6676C87AFB1AC441BC809A5F9E72B5AD73061
        Validity
            Not Before: May 23 18:10:15 2025 GMT
            Not After : May 22 18:15:15 2026 GMT
        Subject: CN=39BA1AD239DD53640635E318D17198782212ED4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:fb:bf:9f:19:d8:b6:b7:0d:b4:02:30:fb:
                    de:86:fe:c8:1a:25:c2:09:07:77:83:ff:a0:0d:04:
                    47:47:61:68:cb:da:aa:9a:b0:9b:92:62:4b:67:c9:
                    49:7f:03:97:c5:26:3a:0c:11:b3:4a:64:62:ae:23:
                    d5:c4:6d:2b:54:dc:77:39:d3:d3:f9:6d:c4:0e:2b:
                    76:d6:af:1c:bd:7b:02:24:03:5e:cf:47:61:45:bf:
                    2f:40:48:90:23:e4:b1:d3:e5:0c:6b:6c:4b:6c:63:
                    57:18:72:af:e3:fb:e5:ad:f8:e1:e5:24:a8:77:0f:
                    c4:0f:ec:00:e7:eb:41:f1:56:09:f5:3f:a2:d1:45:
                    31:b4:10:00:19:72:2a:a6:92:ff:9d:23:3c:b0:84:
                    36:e8:31:c1:96:da:10:22:46:83:3c:5f:f5:bb:c7:
                    78:63:18:6c:d2:cb:19:91:cb:13:1f:5e:19:23:9d:
                    b8:e2:74:4f:5e:85:91:b8:bc:11:28:63:3f:21:cb:
                    3e:7e:d0:8a:55:7c:cf:b7:1e:3e:3b:71:d0:d6:af:
                    2e:6d:08:47:18:43:a6:a4:b9:18:30:41:ae:64:92:
                    4b:48:29:b9:16:b0:f1:f1:78:6b:66:6d:55:ae:40:
                    04:f3:57:aa:c3:2a:f1:59:b9:3a:97:16:a0:dc:4f:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:1A:D2:39:DD:53:64:06:35:E3:18:D1:71:98:78:22:12:ED:4A
            X509v3 Authority Key Identifier:
                keyid:A5:A6:67:6C:87:AF:B1:AC:44:1B:C8:09:A5:F9:E7:2B:5A:D7:30:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A6676C87AFB1AC441BC809A5F9E72B5AD73061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/323830343a343064343a3a2f33322d313238203d3e20323635393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:af:b5:03:c2:e6:ee:2b:95:de:eb:cb:e0:e1:81:cf:a2:de:
         bf:bd:00:eb:ed:ea:1a:0b:83:a8:25:71:06:7e:22:f6:9d:17:
         f2:36:aa:54:65:d5:c5:ef:79:9a:3b:b3:d2:ff:0b:de:34:c7:
         35:7a:2b:97:d5:e1:5c:54:a8:7d:90:b8:ff:4c:2a:cc:b3:5b:
         a6:ae:57:93:e4:3f:bd:c4:9b:46:43:e6:13:51:86:8d:7d:af:
         2e:a9:b7:e6:88:1b:7c:b1:87:02:9e:6b:a8:45:64:c8:8c:05:
         96:8b:8f:58:68:98:48:78:0a:42:e0:5b:0f:ae:66:7a:ac:df:
         39:98:56:03:3e:ea:10:f5:6a:fb:c6:3d:98:3d:2f:6d:b3:24:
         ba:1a:b4:72:24:d8:9d:01:c9:39:cb:80:06:31:ce:82:7a:d3:
         0f:fa:95:ea:ad:ab:2c:bb:be:cc:d8:92:ea:af:fa:ca:f0:8e:
         f3:37:8f:f5:5a:da:da:6e:ab:0b:a7:27:49:f7:aa:d8:b9:c8:
         2e:1e:3f:a7:41:61:f1:6f:5a:42:6f:7c:95:a3:2f:f0:ff:51:
         a4:f8:9d:9d:63:5b:9f:18:a3:6a:a5:d7:40:db:74:67:9a:f3:
         e4:4e:44:22:af:f5:b5:b1:33:e6:2f:28:51:cb:a2:b4:f8:94:
         e3:1f:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:49 2025 by rpki-client