Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33332d3333203d3e20323730373431.roa
File:                     323830343a373061633a3a2f33332d3333203d3e20323730373431.roa (raw, json)
Hash identifier:          yMvcBfcJYc43wnTumWmPAo36bi4O8T4ELqxOZotEghw=
Subject key identifier:   FA:2F:D7:A6:B4:59:4E:04:F7:B7:AA:64:9E:E2:DD:07:30:57:62:24
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       0DC0659AB45E9EE19FB321907D23047788A426C1
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33332d3333203d3e20323730373431.roa
Signing time:             Sat 02 Aug 2025 05:11:08 +0000
ROA not before:           Sat 02 Aug 2025 05:06:08 +0000
ROA not after:            Sat 01 Aug 2026 05:11:08 +0000
asID:                     270741
IP address blocks:        2804:70ac::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c0:65:9a:b4:5e:9e:e1:9f:b3:21:90:7d:23:04:77:88:a4:26:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Aug  2 05:06:08 2025 GMT
            Not After : Aug  1 05:11:08 2026 GMT
        Subject: CN=FA2FD7A6B4594E04F7B7AA649EE2DD0730576224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:64:a5:d9:b7:cb:95:b2:d0:c3:7a:2b:92:
                    5f:ff:80:d8:31:5e:7c:73:12:81:1f:4e:5f:dd:69:
                    9e:05:62:9c:77:85:26:12:d2:99:3f:1b:a6:b2:cf:
                    1b:77:c2:2f:1d:f5:23:7f:b2:25:0c:1b:59:2a:7d:
                    4f:98:78:ff:b4:8d:6b:ae:ac:c5:eb:e1:2d:6d:cc:
                    fd:34:d4:28:d0:c1:72:5e:86:0d:b8:9c:1a:ca:f6:
                    a3:91:dd:2a:33:f7:6b:be:e7:19:e6:23:17:12:1e:
                    8c:07:53:28:94:19:14:1e:ad:09:21:c8:e2:41:71:
                    3f:32:80:cb:03:62:6e:f1:b4:54:97:21:b7:28:d1:
                    30:f7:83:56:4b:67:06:6c:37:e8:80:31:a1:83:79:
                    a4:be:2a:b0:0c:ef:0b:b8:de:f0:c5:40:d1:55:87:
                    80:eb:a2:20:cf:b5:2e:4c:4b:74:34:28:77:e7:76:
                    2a:92:d6:de:29:c4:28:7d:d9:b1:b9:37:8f:d1:09:
                    d6:31:0f:b4:f3:c4:d5:fc:92:a3:28:09:8e:ac:c6:
                    a3:3f:f6:fd:ae:5b:32:5e:28:db:5e:8c:f3:5c:af:
                    68:65:58:df:76:16:ef:54:02:77:b3:e8:9b:b4:24:
                    ee:63:a4:41:fb:78:d4:6e:1d:a9:91:0b:8e:a4:96:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:D7:A6:B4:59:4E:04:F7:B7:AA:64:9E:E2:DD:07:30:57:62:24
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a3a2f33332d3333203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ac::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:15:f3:95:24:3b:fe:a5:c2:c7:b2:97:57:80:72:86:ca:
         33:ea:ad:89:c8:0b:9b:69:d6:cb:5c:d2:85:bb:7a:9a:27:17:
         84:3a:12:ce:a7:50:bd:72:ff:f6:21:40:cc:01:8f:d6:84:4a:
         2d:c5:6b:3e:ec:7b:d0:76:c3:87:4f:76:82:d1:82:9b:1e:39:
         16:05:22:cd:98:37:a0:b5:6f:b9:9b:28:38:97:1e:40:33:6c:
         1a:63:6e:24:9e:33:58:af:13:95:58:75:81:9d:48:d8:6a:bb:
         f4:10:b6:05:53:14:09:33:e6:37:98:79:41:2c:89:28:f6:79:
         64:c5:6d:82:37:b4:56:ef:13:6c:93:82:b1:7a:f1:f9:71:54:
         4a:ea:37:2f:5c:cc:81:40:57:2c:1c:fe:17:03:cc:6b:47:a1:
         0d:35:97:ea:37:cf:02:d5:79:df:7a:d5:cc:38:23:76:76:19:
         f9:a7:53:01:3e:79:19:1d:8a:5f:18:71:ab:35:fb:48:75:0e:
         44:f0:79:58:6f:fc:54:59:c9:d3:6a:e3:69:fd:86:82:11:c8:
         69:14:33:fe:22:8a:8f:af:f9:e3:59:f2:54:8f:40:98:29:33:
         f6:90:b9:89:49:66:f0:da:9e:24:f7:7e:ad:d7:ce:a1:63:18:
         06:f2:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:50 2025 by rpki-client