Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/323830343a323231383a3a2f33322d3438203d3e20323634353931.roa
File:                     323830343a323231383a3a2f33322d3438203d3e20323634353931.roa (raw, json)
Hash identifier:          HlwUs2L7419/cMa2+4mwkPjcY7ZP9qFwySS+Yz91Nh0=
Subject key identifier:   8A:6E:97:3F:CC:E9:2E:41:B3:32:86:63:E5:8C:2B:15:E1:ED:7C:FC
Certificate issuer:       /CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
Certificate serial:       1DF1DBFA000072564DD321C9D5636F4DA58AC199
Authority key identifier: F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/323830343a323231383a3a2f33322d3438203d3e20323634353931.roa
Signing time:             Fri 02 May 2025 19:59:00 +0000
ROA not before:           Fri 02 May 2025 19:54:00 +0000
ROA not after:            Fri 01 May 2026 19:59:00 +0000
asID:                     264591
IP address blocks:        2804:2218::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl
                          rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 02:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f1:db:fa:00:00:72:56:4d:d3:21:c9:d5:63:6f:4d:a5:8a:c1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Validity
            Not Before: May  2 19:54:00 2025 GMT
            Not After : May  1 19:59:00 2026 GMT
        Subject: CN=8A6E973FCCE92E41B3328663E58C2B15E1ED7CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:f5:57:1a:87:5a:01:04:a6:ba:ed:f4:63:
                    11:0c:59:3b:b6:2c:e9:86:bb:26:78:c4:04:7d:3c:
                    3a:d7:32:11:89:9a:dd:f7:31:7c:ea:c4:e9:05:56:
                    0c:96:f9:c8:5d:0e:ca:ac:b8:96:65:7c:0b:84:47:
                    58:90:ee:51:18:ea:31:2a:b2:0d:4f:dc:35:a3:34:
                    64:19:37:ac:d1:21:d2:a3:29:6f:be:c9:7d:02:26:
                    32:54:a0:6b:9e:0f:54:2e:34:64:f7:1d:d5:4b:6e:
                    e7:e0:c2:b6:e3:a6:2a:09:72:62:09:e4:17:90:1b:
                    1e:52:48:3a:9c:18:3d:9d:83:22:8a:11:1a:c8:8f:
                    e7:25:98:ff:fb:c7:58:ce:7e:71:66:15:38:6e:94:
                    f2:5b:78:99:e5:20:d7:ba:bf:f1:81:97:1d:ac:eb:
                    b8:04:e3:90:2c:51:70:dc:aa:be:83:0c:0f:3c:ca:
                    93:09:17:8e:df:b5:ae:f6:51:95:99:35:f4:05:f3:
                    0e:46:d0:09:76:f3:b9:81:d4:02:91:8c:1b:74:36:
                    1f:ea:1e:fc:10:c7:f7:0b:8f:12:0b:45:f7:90:13:
                    47:ae:d7:39:da:78:62:65:ae:32:d9:67:3f:50:4f:
                    76:a5:d2:d3:db:ba:7c:31:7a:7e:51:88:78:4f:f5:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:97:3F:CC:E9:2E:41:B3:32:86:63:E5:8C:2B:15:E1:ED:7C:FC
            X509v3 Authority Key Identifier:
                keyid:F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/323830343a323231383a3a2f33322d3438203d3e20323634353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2218::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:31:72:44:99:70:f4:32:f2:d9:61:ab:25:6d:61:55:a5:b7:
         9a:67:82:ac:4a:9b:0e:71:f1:a3:9a:d4:1b:e3:40:9c:43:1f:
         ae:6f:45:5a:5a:02:3b:48:4a:37:a7:b3:d5:fa:7d:fc:3b:80:
         76:c6:ef:c5:a8:b3:3b:29:e9:f6:5c:39:10:cb:e1:14:dd:04:
         fe:bc:e7:bd:0b:9d:6a:c1:80:34:ab:9f:30:1e:d4:aa:5e:bb:
         b0:bd:e0:18:92:6a:f7:48:c1:15:55:2a:59:04:5a:7a:5a:5c:
         4d:65:07:63:23:7f:ef:3d:f9:f9:e5:6d:ae:76:c1:85:72:c9:
         ba:ba:a3:db:6d:21:8c:fb:c1:c5:0a:6c:ff:cc:a3:80:2b:3c:
         16:c5:52:92:95:c3:5f:e1:ab:02:e2:e4:23:30:b1:22:d4:56:
         83:aa:b0:ab:c2:d2:0d:b2:68:f2:5c:b8:51:68:e6:bd:2b:b7:
         50:26:d3:5d:3b:a5:e4:66:ed:bd:36:ab:4b:e1:a4:6b:80:88:
         43:4c:be:ca:ac:a7:f9:76:46:d2:ff:31:d4:f8:db:9d:00:56:
         b7:d1:ed:7d:b9:05:d7:a1:66:ff:4c:b5:b3:40:02:01:c5:19:
         95:a5:83:a5:22:dc:ed:fb:f2:d0:72:db:01:ba:a5:08:6b:a4:
         e6:f6:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:55:32 2025 by rpki-client