Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          jj/DFtVSWkmoEDR9MMoDSC5fGS5/8QPrbd2PVIl6KtU=
Subject key identifier:   56:B1:14:F1:9E:25:26:A9:8B:40:1D:8D:CA:0E:E5:23:28:A9:29:53
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       17627FCC08842FF8F7A02BA93EEE4898246BAF44
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     270765
IP address blocks:        2804:7114:166::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:62:7f:cc:08:84:2f:f8:f7:a0:2b:a9:3e:ee:48:98:24:6b:af:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100AFE411A1D7474495E809E0A32494CA861B7D1921B33102E2492CE815E7943683FD7443ED0BD5C56D909425068852BD72794F107115EABAEC932BA4E96BBEC6C956DB6FD08DD629494A5B26E2E7822B8F1AA7E842BF961B78EE1EBD58964D80E6B068C47663DEF527A79D92600E510D462095C13FE80C863F2A5A070B7EC41F7722CD261E075A49E014921F971450DA3BC6459169B808C4ED277442F820E222968395A406FA8F018105B30115CC38D61568C71C1BB2234B555189BE64EF24E03E0C19D0A9C064A63CC3C664D733F1756B9332B719B4653750679B4B88D58DC478C3248817EE5809E6A767A6711BF317140AE48318EDE1C335CBBC5ED6611CC6AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:11:a1:d7:47:44:95:e8:09:e0:a3:24:94:
                    ca:86:1b:7d:19:21:b3:31:02:e2:49:2c:e8:15:e7:
                    94:36:83:fd:74:43:ed:0b:d5:c5:6d:90:94:25:06:
                    88:52:bd:72:79:4f:10:71:15:ea:ba:ec:93:2b:a4:
                    e9:6b:be:c6:c9:56:db:6f:d0:8d:d6:29:49:4a:5b:
                    26:e2:e7:82:2b:8f:1a:a7:e8:42:bf:96:1b:78:ee:
                    1e:bd:58:96:4d:80:e6:b0:68:c4:76:63:de:f5:27:
                    a7:9d:92:60:0e:51:0d:46:20:95:c1:3f:e8:0c:86:
                    3f:2a:5a:07:0b:7e:c4:1f:77:22:cd:26:1e:07:5a:
                    49:e0:14:92:1f:97:14:50:da:3b:c6:45:91:69:b8:
                    08:c4:ed:27:74:42:f8:20:e2:22:96:83:95:a4:06:
                    fa:8f:01:81:05:b3:01:15:cc:38:d6:15:68:c7:1c:
                    1b:b2:23:4b:55:51:89:be:64:ef:24:e0:3e:0c:19:
                    d0:a9:c0:64:a6:3c:c3:c6:64:d7:33:f1:75:6b:93:
                    32:b7:19:b4:65:37:50:67:9b:4b:88:d5:8d:c4:78:
                    c3:24:88:17:ee:58:09:e6:a7:67:a6:71:1b:f3:17:
                    14:0a:e4:83:18:ed:e1:c3:35:cb:bc:5e:d6:61:1c:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:14:F1:9E:25:26:A9:8B:40:1D:8D:CA:0E:E5:23:28:A9:29:53
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:ff:f9:86:05:9f:5f:86:9d:fd:1a:d5:13:a7:84:79:de:
         4f:c6:2d:be:36:85:be:34:4a:57:f6:ba:46:ac:c7:e2:1e:b5:
         02:f3:31:b9:9f:9c:ee:19:b6:89:09:92:2f:2b:87:f2:be:67:
         37:23:ac:1f:f7:95:a3:9b:bc:fe:a4:3a:f3:a0:1a:b0:50:a5:
         5d:35:69:41:ed:be:a0:6a:f3:39:8a:4b:97:6d:dd:88:11:f8:
         1e:f5:21:66:ac:db:2c:d7:6a:cd:17:d7:76:e5:33:58:f2:7a:
         a5:ad:85:28:85:58:fa:1e:0a:9d:bd:f5:ab:ae:5a:fb:fc:ec:
         4e:fd:2c:34:16:04:f9:fd:7f:60:36:61:ae:d4:17:2e:dc:b9:
         c0:21:d1:82:a7:ca:37:50:92:fe:19:c8:1f:5c:ab:aa:93:9a:
         73:28:6c:1f:d3:d6:b0:88:79:1a:46:2b:f0:25:3a:1d:36:aa:
         5a:49:55:92:e7:b6:5e:bb:f2:31:33:69:3b:ab:57:e7:bb:b9:
         bb:e3:d1:6f:25:89:0b:a8:04:f6:17:c7:2d:8b:4b:24:6d:0c:
         30:eb:d5:e8:b7:24:78:ed:89:a6:71:51:61:73:ce:d7:04:6a:
         02:aa:ec:af:8b:42:54:9c:a5:06:8d:9a:96:ee:f5:b6:42:dc:
         12:3b:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:33 2025 by rpki-client