Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d313238203d3e20323639323435.roa
File:                     323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (raw, json)
Hash identifier:          YKjIAqG1yuEFYMVP4xZkWKECjkHqyOHvad/Qpo5c/Co=
Subject key identifier:   26:3B:4F:A7:32:C7:E0:C0:BC:0D:60:E3:BE:D8:07:FB:C9:92:14:3F
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       739434DF300D60CCF33E588BE1391FF3B78FF8A7
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d313238203d3e20323639323435.roa
Signing time:             Thu 24 Apr 2025 18:46:14 +0000
ROA not before:           Thu 24 Apr 2025 18:41:14 +0000
ROA not after:            Thu 23 Apr 2026 18:46:14 +0000
asID:                     269245
IP address blocks:        2804:619c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:94:34:df:30:0d:60:cc:f3:3e:58:8b:e1:39:1f:f3:b7:8f:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Apr 24 18:41:14 2025 GMT
            Not After : Apr 23 18:46:14 2026 GMT
        Subject: CN=263B4FA732C7E0C0BC0D60E3BED807FBC992143F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:68:4c:e9:17:dc:4f:c7:24:0f:28:44:47:
                    2f:5d:ce:d1:66:10:92:55:04:29:83:60:1a:e1:49:
                    57:bb:5a:e4:0e:8c:b5:44:47:a0:09:9c:07:cb:ab:
                    0f:8f:00:4f:e4:12:ea:44:b1:29:f3:59:f4:d3:d6:
                    57:7a:b8:46:51:e9:54:d9:55:31:f3:2c:70:29:6c:
                    34:ef:46:13:7e:d4:da:12:e0:3b:87:4a:55:fb:f6:
                    3c:da:d8:5a:b2:56:01:f2:40:22:d2:a1:66:f0:1e:
                    e4:65:7a:5b:07:57:70:d5:f9:9f:6f:12:9f:cd:67:
                    97:ca:b4:d8:e8:1e:46:66:a9:87:d1:15:f0:53:7b:
                    e6:86:df:8a:04:9c:96:ef:94:a3:5d:06:b7:af:92:
                    5e:91:3c:a0:fb:d2:d6:d3:19:e0:31:9f:36:f1:aa:
                    ea:f6:1b:69:70:ea:41:25:92:78:14:aa:d5:bf:e5:
                    69:ba:ef:f2:48:a2:2d:0e:5b:ab:3e:84:9a:7f:fb:
                    78:d1:6f:d6:ac:79:0f:76:53:b8:a5:9f:3b:e8:e3:
                    78:58:5f:f7:1c:83:da:bc:06:87:03:97:6a:36:4e:
                    bf:d5:7e:e3:f7:14:50:59:f4:54:b8:43:40:5c:5b:
                    25:6d:99:47:b9:f6:d6:b5:a1:53:be:06:3f:49:5c:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:4F:A7:32:C7:E0:C0:BC:0D:60:E3:BE:D8:07:FB:C9:92:14:3F
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/323830343a363139633a3a2f33322d313238203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:619c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:19:bb:d7:f4:4c:22:a3:a8:5e:d3:f4:36:2b:5c:11:fc:c4:
         d1:42:77:dd:bd:79:e1:99:61:58:ee:b3:32:16:12:18:85:ab:
         4e:47:81:be:fc:40:f6:62:19:b9:4b:83:79:43:e7:1b:9f:94:
         32:75:8c:53:ca:f3:b8:bb:bc:94:59:c5:fa:4d:ff:9e:fd:90:
         31:fe:3d:2e:86:31:ad:de:08:f4:7d:b9:09:77:50:a0:47:99:
         1c:2f:31:bb:ca:54:e0:13:fb:ac:67:af:6e:10:a9:d9:05:78:
         12:73:e7:b6:7d:d0:5d:53:79:7c:a7:89:9a:db:9e:4a:12:5a:
         4e:52:59:ee:a4:46:b6:a0:7b:08:a9:79:7d:23:7a:ee:6d:25:
         9b:49:f0:9c:ba:c6:ba:e1:75:9f:0e:29:ed:a7:0b:d4:6e:86:
         d0:c2:34:c3:90:ab:fb:c6:6d:e7:ac:41:df:ad:f9:87:3d:d9:
         c2:ab:af:b4:3f:78:fb:a2:01:2b:fc:52:40:fd:ac:88:1f:77:
         a3:73:63:3c:11:e4:a4:59:0e:29:f3:a1:4d:ea:bb:f5:b7:ae:
         78:2e:de:e1:04:0f:a0:62:54:bc:ba:33:fe:b9:a5:60:6a:64:
         09:f2:73:10:32:96:02:aa:ae:c5:e2:3b:87:2d:63:ba:95:7b:
         6d:55:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:01:28 2025 by rpki-client