Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
File:                     323830343a316263343a3a2f33322d3332203d3e203631373438.roa (raw, json)
Hash identifier:          fx3GC2PjzxZS+TP5eg2gWKqb+Bx1gDYgAGUp7a+Uz6A=
Subject key identifier:   F9:F1:E6:50:81:2B:FC:80:A7:D2:F9:EA:5C:AC:76:2B:6E:25:AD:50
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       01C1DC33CE5567600A0A9AC212CAC777420D13C1
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa
Signing time:             Mon 25 Nov 2024 14:42:08 +0000
ROA not before:           Mon 25 Nov 2024 14:37:08 +0000
ROA not after:            Mon 24 Nov 2025 14:42:08 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c1:dc:33:ce:55:67:60:0a:0a:9a:c2:12:ca:c7:77:42:0d:13:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Nov 25 14:37:08 2024 GMT
            Not After : Nov 24 14:42:08 2025 GMT
        Subject: CN=F9F1E650812BFC80A7D2F9EA5CAC762B6E25AD50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:66:9a:bc:2e:24:68:e7:e8:8f:87:6e:89:
                    96:65:a1:f5:fe:1c:ab:bb:86:2d:e7:13:1d:a6:97:
                    c0:20:48:0f:72:3a:dd:e3:c6:4c:cc:a5:56:cf:f6:
                    b1:e3:2c:d7:65:85:14:ae:10:39:0a:9f:2b:99:29:
                    c1:bc:3f:fa:7b:f9:d0:c8:fe:2d:fa:25:c0:ae:7b:
                    67:40:21:d3:ac:4f:27:90:a6:e5:30:0e:b5:ff:6c:
                    e0:b0:72:85:66:94:5b:4c:0f:02:e1:d5:bd:13:a4:
                    75:e0:88:d7:0a:a4:00:46:03:a2:7b:db:3d:84:8b:
                    43:22:aa:48:00:b8:36:1b:51:59:25:6f:36:e9:db:
                    2b:c6:e2:d1:65:20:a9:5e:bc:56:7a:1e:b0:9c:18:
                    15:51:ee:ae:0f:bf:73:be:76:c8:fb:a5:6a:79:42:
                    b5:33:46:ca:47:56:b5:ff:03:1f:bc:b9:5a:c9:35:
                    e8:90:6f:07:04:2c:61:df:d8:f4:89:c5:e6:b2:77:
                    bb:a2:63:c6:68:8a:b7:d0:b7:ca:81:23:f0:8e:1c:
                    b9:1d:78:92:a7:ca:6a:e9:b2:eb:0b:b7:87:e4:c9:
                    4c:f3:3b:9e:a8:ac:be:60:60:db:17:17:55:08:b1:
                    ca:d3:fe:22:15:ef:31:01:4d:24:98:33:ad:4b:0c:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:E6:50:81:2B:FC:80:A7:D2:F9:EA:5C:AC:76:2B:6E:25:AD:50
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3332203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:64:9a:c9:63:49:96:de:52:92:8a:44:ef:a5:6c:40:ca:3d:
         8b:58:3c:b5:62:f8:5e:a1:30:82:3f:08:11:1e:24:8a:ce:56:
         44:13:27:5e:c0:d8:80:30:6e:6c:23:29:f6:e1:9d:97:70:bc:
         ec:0b:d0:9d:22:68:0a:22:9a:8c:c6:b3:de:3d:d1:6c:66:c0:
         31:c1:82:b3:c5:17:e0:7f:6c:1e:8b:e6:06:89:ca:ca:84:d1:
         40:7a:2c:71:a2:57:29:61:23:d8:0c:29:00:8a:98:35:28:71:
         a3:2c:47:a2:b7:5d:54:d0:c0:6e:d7:53:70:ed:60:a9:99:d0:
         80:ad:58:27:4d:c2:57:d8:28:fa:00:c7:9c:24:51:d1:53:bc:
         a6:3a:7e:38:f6:0b:b3:da:c1:fc:ec:17:eb:c8:ac:b5:98:20:
         2f:4d:ba:39:a8:64:e2:3b:73:18:e8:d4:44:75:7f:88:7b:67:
         42:bf:6f:16:d4:81:f0:47:60:fc:c8:2c:35:e6:ec:65:9e:2f:
         8c:a8:bf:87:d2:b8:54:d1:f7:1a:e2:5c:2b:37:80:20:df:d3:
         ff:90:11:a5:b1:7f:54:5c:9e:23:74:ce:06:92:2b:11:16:a4:
         0e:ad:0a:8c:31:4a:a0:60:d9:e7:01:db:73:f6:bf:59:81:23:
         15:75:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:53 2025 by rpki-client