Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa
File:                     323830343a326434303a3a2f33322d313238203d3e20323635323639.roa (raw, json)
Hash identifier:          GmdIez8A29YUJXEfxfl/6qOJ4Fo8hVfWQl7aHiO+Y+k=
Subject key identifier:   EC:7C:4D:03:11:8D:67:D4:6A:3A:A6:35:AD:27:2B:6B:44:7B:7A:47
Certificate issuer:       /CN=FA12FB62D4F53CB5136A67195B17917F37FA7160
Certificate serial:       06B0789B0C5B3C25C79FE81DA20E409BC863EBF5
Authority key identifier: FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa
Signing time:             Fri 06 Jun 2025 15:25:43 +0000
ROA not before:           Fri 06 Jun 2025 15:20:43 +0000
ROA not after:            Fri 05 Jun 2026 15:25:43 +0000
asID:                     265269
IP address blocks:        2804:2d40::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.crl
                          rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b0:78:9b:0c:5b:3c:25:c7:9f:e8:1d:a2:0e:40:9b:c8:63:eb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA12FB62D4F53CB5136A67195B17917F37FA7160
        Validity
            Not Before: Jun  6 15:20:43 2025 GMT
            Not After : Jun  5 15:25:43 2026 GMT
        Subject: CN=EC7C4D03118D67D46A3AA635AD272B6B447B7A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:0b:a0:ee:8c:49:ae:98:32:6c:ff:6f:df:
                    08:f2:95:9f:90:4d:ab:bc:a5:6b:a2:0a:d6:9b:74:
                    95:1f:bc:2d:8e:04:93:6c:73:9b:ac:db:f2:6f:d1:
                    b9:d9:a2:db:4f:87:63:57:af:10:c9:7d:19:ff:c7:
                    ff:aa:ab:33:90:03:91:6b:5e:23:c7:40:f0:8f:8e:
                    eb:26:71:e0:da:4b:1b:f1:6c:c3:85:c8:8a:b3:da:
                    ef:52:41:f6:9f:60:25:2e:ae:bc:d6:a3:f6:87:79:
                    8c:11:9c:8f:14:44:5a:b1:e9:de:05:07:77:70:09:
                    e7:b8:9a:6c:5e:9d:d2:09:71:52:3e:60:b8:e1:f1:
                    8f:c2:8e:53:61:50:01:71:75:1f:0f:e0:63:93:f5:
                    8c:d6:50:92:5c:9a:a8:fa:e1:62:47:28:e0:8f:10:
                    f4:dd:39:f6:c5:20:b6:ca:09:ba:d1:37:d1:83:7a:
                    5c:12:5f:98:15:1d:18:17:96:89:36:55:7a:92:c7:
                    90:bd:1e:69:d0:a6:77:6c:db:26:1d:6f:7b:56:73:
                    71:b8:3f:6c:ae:5c:ab:5d:8b:49:28:e0:d2:c5:1f:
                    47:2f:52:f2:9c:b2:e6:62:aa:22:2d:a4:4b:ec:4d:
                    cc:6b:29:00:91:d3:02:75:58:5a:42:7b:ee:6d:c2:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7C:4D:03:11:8D:67:D4:6A:3A:A6:35:AD:27:2B:6B:44:7B:7A:47
            X509v3 Authority Key Identifier:
                keyid:FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d313238203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:67:f4:58:c5:f4:ad:39:0d:18:8e:15:c7:60:fe:1a:a4:
         1d:17:f1:a8:5a:d1:92:95:2f:2b:d9:fa:5e:a0:f9:6b:93:ed:
         70:c7:fd:98:18:b0:e7:b1:75:6f:08:b1:5a:ad:fd:16:4a:2a:
         df:2b:46:83:23:0d:db:26:f6:f3:90:f5:68:48:a3:5c:c3:cc:
         e3:a7:e0:2c:d0:6d:b6:e8:46:3f:6a:30:78:68:dd:4c:b4:b4:
         a7:8e:4a:2e:c9:50:a2:bb:fe:cf:9e:7d:9c:3f:f0:3d:ad:cd:
         e8:c1:59:9b:af:73:a4:d2:a4:ed:c9:fa:8e:1b:c1:3a:dd:f7:
         55:bb:fe:59:56:e3:21:91:49:00:a0:2e:be:d7:2a:23:4a:8a:
         ff:0f:fd:f6:84:0b:86:f6:28:ea:ab:59:1d:db:70:24:23:bd:
         a6:d7:df:9e:0d:c5:c4:01:31:73:d5:83:0f:17:b5:a6:51:60:
         fa:13:74:7f:2e:47:92:8c:46:00:e5:71:07:e0:64:57:99:4b:
         0b:dc:ca:b9:de:22:2e:e4:cb:0b:75:63:98:37:22:13:df:23:
         68:62:55:e0:92:25:14:94:dc:45:02:c1:93:3a:ee:3e:9e:cd:
         35:67:d7:68:f3:fc:64:6b:9f:bc:74:af:47:48:19:dd:8a:66:
         ce:c1:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:22:31 2025 by rpki-client