Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a383030303a3a2f33332d3333203d3e20323632363235.roa
File:                     323830343a343936383a383030303a3a2f33332d3333203d3e20323632363235.roa (raw, json)
Hash identifier:          IKOxTVWEfd5IWHwGAITnzpYKWUNLXT1PWws6doRsGP8=
Subject key identifier:   11:72:20:92:64:D5:48:C8:40:EF:F9:A5:77:8E:BC:67:B7:85:3E:FE
Certificate issuer:       /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
Certificate serial:       6E0229420D72A75876071C8E9CFD5A4A19619AD8
Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a383030303a3a2f33332d3333203d3e20323632363235.roa
Signing time:             Mon 20 Jan 2025 17:20:02 +0000
ROA not before:           Mon 20 Jan 2025 17:15:02 +0000
ROA not after:            Mon 19 Jan 2026 17:20:02 +0000
asID:                     262625
IP address blocks:        2804:4968:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl
                          rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:29:42:0d:72:a7:58:76:07:1c:8e:9c:fd:5a:4a:19:61:9a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
        Validity
            Not Before: Jan 20 17:15:02 2025 GMT
            Not After : Jan 19 17:20:02 2026 GMT
        Subject: CN=1172209264D548C840EFF9A5778EBC67B7853EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:ed:0d:fc:f9:9b:43:92:84:9d:3a:d4:20:
                    ec:e5:f8:9b:b9:41:4f:06:c3:d7:12:02:1e:a5:3a:
                    8a:15:f2:21:de:f6:77:c1:bc:43:ca:dd:2a:1f:16:
                    03:59:05:00:11:71:53:58:f2:37:dc:96:3f:7e:b2:
                    d1:4a:02:41:0f:11:4c:d3:e7:b2:fd:59:6d:88:a5:
                    91:09:17:82:40:5e:80:e9:94:b2:99:f7:44:40:56:
                    9a:56:82:79:6f:85:d8:04:90:a9:11:89:36:16:20:
                    fb:69:00:c7:ae:4b:d3:52:eb:92:51:7d:ec:d4:59:
                    8a:04:ca:7c:3d:a0:10:e8:b4:e9:b6:16:9d:a3:eb:
                    f4:ee:5d:e6:dd:e8:a9:6a:5a:9a:72:47:70:e9:1e:
                    29:1c:41:3e:5c:cf:29:a6:ca:ea:88:7c:8c:3c:dd:
                    42:b9:09:1f:2b:4b:81:3d:8f:f4:32:5c:48:db:31:
                    91:66:7c:24:62:fa:22:9a:47:25:70:68:fc:83:d2:
                    4f:23:84:49:da:0d:73:99:a0:7e:49:c1:f0:a1:3a:
                    c5:3d:9b:e8:ab:cc:d6:fb:f0:fc:2c:a9:81:9a:fc:
                    43:d3:84:23:b6:89:9a:19:0e:2f:1e:87:f9:6b:d3:
                    87:b9:c8:5e:38:07:e3:5c:86:f6:3e:e7:06:d5:41:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:72:20:92:64:D5:48:C8:40:EF:F9:A5:77:8E:BC:67:B7:85:3E:FE
            X509v3 Authority Key Identifier:
                keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a383030303a3a2f33332d3333203d3e20323632363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4968:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:41:d0:2e:a6:5f:1b:c7:c4:b3:8e:f7:32:b9:66:7c:0c:
         5f:80:15:69:09:3c:5a:7a:a4:56:0e:41:7e:db:1c:28:58:bf:
         f5:b3:24:96:e4:ce:6a:68:f6:63:55:24:3b:95:13:fb:a5:63:
         a3:7b:d9:65:25:b3:bb:23:25:c5:c1:33:94:58:ae:af:98:ce:
         c3:f1:a2:fa:52:f3:e0:f1:4c:6b:f4:80:14:6d:69:03:ac:fd:
         85:08:1a:b9:9f:72:ba:bc:62:92:48:66:c7:4c:08:e6:5a:98:
         27:61:a2:45:a8:bd:c1:80:1e:0c:3e:9f:82:33:22:7a:24:c9:
         a8:c9:70:cf:65:d3:90:00:95:5d:ac:7a:d7:dc:37:47:c0:e6:
         04:f0:5a:e7:81:ee:2f:44:15:9c:d5:ae:10:d7:44:f3:c1:d4:
         27:2f:5b:d7:b3:4d:e4:92:e1:9f:96:72:fc:ff:75:cc:69:1a:
         d1:18:ff:47:3c:b6:f9:ea:c5:19:db:85:cf:5d:f0:0f:42:10:
         4b:fc:fe:48:85:6e:2b:60:39:1d:79:5c:1b:5a:be:2b:a9:9d:
         83:7b:6e:08:fb:ab:29:00:cc:c5:12:db:b4:2d:9e:78:a8:42:
         ba:34:4f:9b:09:8a:5a:2c:1a:68:af:d6:a2:1f:29:e6:cb:48:
         75:c8:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:20:55 2025 by rpki-client