Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          SRq6sCX4573IN6lKbjm3sFFV/2Y2vxcv6N1iitTZbac=
Subject key identifier:   FC:85:50:36:F0:09:17:B0:56:48:4D:93:C9:28:E2:86:3C:70:10:8E
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       08696AB47B65AEB2BE7690BF8D313620ECAFEDC7
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        2804:385c:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:6a:b4:7b:65:ae:b2:be:76:90:bf:8d:31:36:20:ec:af:ed:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:35:e7:2e:b3:52:56:a1:24:aa:e5:ed:ff:
                    64:cf:e0:d9:2e:c3:ae:bd:c7:d8:79:8d:2e:18:e5:
                    b0:4a:3b:5e:21:0f:e6:e2:ed:4b:48:1a:d2:31:fd:
                    67:ee:d3:63:57:55:1d:a8:c7:c1:e0:1e:36:b5:e8:
                    e6:2e:2e:3d:ff:c0:79:8a:97:ca:d4:d4:21:4b:0b:
                    9c:83:26:40:10:bb:ee:26:f5:72:8f:4c:d0:5e:aa:
                    a4:1d:79:67:c0:53:c1:99:37:70:20:c6:01:32:67:
                    25:50:49:7f:10:f9:2b:c5:a1:7f:40:21:63:8e:aa:
                    85:6d:81:a0:1c:21:93:bd:d2:e1:fc:c2:20:9b:7c:
                    ec:26:47:04:17:ac:28:2f:31:4f:f3:2e:f1:68:de:
                    68:38:be:ac:21:ec:20:32:86:f6:8d:66:3f:64:e1:
                    3e:88:93:1d:76:d5:e6:7a:27:b6:e6:ce:57:10:06:
                    16:9a:cf:49:51:22:25:47:27:43:a4:66:c1:9f:94:
                    24:05:81:ee:eb:de:9f:af:26:05:d8:36:d9:15:d7:
                    4e:d4:1a:1c:1b:d2:95:c7:b3:f5:1a:df:4a:55:cb:
                    49:c1:38:d4:08:dd:3a:89:d8:02:1c:e2:ec:a9:c1:
                    26:b3:f4:4c:65:83:b8:53:b1:35:90:ce:94:ee:c4:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:50:36:F0:09:17:B0:56:48:4D:93:C9:28:E2:86:3C:70:10:8E
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:12:54:1b:52:a7:0e:c1:16:25:15:11:15:45:09:1b:e8:
         9e:ba:96:f7:ed:33:22:26:61:8d:cb:ab:7b:d4:e6:49:8b:7a:
         15:61:3f:61:bc:4b:a1:7c:18:f8:d7:e2:cc:80:dc:90:ca:68:
         0c:93:b5:15:d0:9e:f6:6f:6a:93:19:68:1f:a5:43:f6:97:3b:
         c6:29:90:ea:bc:c5:c4:fa:e7:53:6e:ca:df:1b:e2:be:e0:a8:
         82:b3:50:77:22:56:d5:48:23:3b:df:da:d1:7f:2c:4a:f0:c7:
         e7:a2:6f:56:5d:2f:b2:a1:c0:a1:40:9d:2b:58:89:3f:13:6e:
         f5:7c:74:d3:11:ee:f7:d1:50:b9:43:4f:5f:55:40:1b:f3:af:
         f2:66:0b:fa:db:62:38:f3:57:1f:76:ad:18:15:ec:34:ba:54:
         30:9a:b7:5f:a6:43:f2:3c:c7:4c:ed:75:c7:65:87:ca:e0:12:
         13:c8:63:06:0c:b3:85:03:a3:cd:43:75:ae:02:e5:9a:64:39:
         ba:99:92:ef:71:9e:59:67:d9:9b:3e:80:0b:7a:e8:c5:a5:22:
         7e:6f:e0:02:b6:ec:8e:d7:46:3d:41:1a:67:6b:ee:6e:eb:6a:
         c9:1d:f9:71:39:7d:ba:9c:ae:d3:91:05:eb:15:9b:9d:64:03:
         a7:d5:d6:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 8 00:45:01 2025 by rpki-client