Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa
File:                     323830343a373563383a3a2f33322d3438203d3e20323731303639.roa (raw, json)
Hash identifier:          LxpPwo/5sefjyoS0YOY3qC2R+mYJu+ra9kiB95vkznU=
Subject key identifier:   FA:BA:03:D2:7E:38:46:B0:24:C0:AE:F6:05:A3:65:22:54:C6:3A:DA
Certificate issuer:       /CN=6F11EAE0541E2BEF427842B5ACBBB3FA60094958
Certificate serial:       301210ACAD05B089F766BBB7F49E62DD526F68E0
Authority key identifier: 6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa
Signing time:             Wed 23 Apr 2025 15:01:05 +0000
ROA not before:           Wed 23 Apr 2025 14:56:05 +0000
ROA not after:            Wed 22 Apr 2026 15:01:05 +0000
asID:                     271069
IP address blocks:        2804:75c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.crl
                          rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:10:ac:ad:05:b0:89:f7:66:bb:b7:f4:9e:62:dd:52:6f:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11EAE0541E2BEF427842B5ACBBB3FA60094958
        Validity
            Not Before: Apr 23 14:56:05 2025 GMT
            Not After : Apr 22 15:01:05 2026 GMT
        Subject: CN=FABA03D27E3846B024C0AEF605A3652254C63ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:c5:96:5b:8d:bb:8c:59:22:f1:a9:93:7b:
                    e7:9a:a9:25:f2:19:7f:e8:dd:22:e4:13:c7:ee:80:
                    de:2c:c5:90:48:15:3f:92:1d:c7:ab:05:94:84:dd:
                    04:33:69:16:b4:7d:ca:42:5a:e8:4c:70:36:3d:13:
                    cd:97:9f:09:7a:e7:fb:06:eb:ca:5b:43:63:4b:ee:
                    c8:b7:b2:6d:80:ad:20:91:c6:7c:20:26:29:26:f7:
                    53:dc:41:0a:a2:a7:5e:39:99:78:69:9c:47:51:86:
                    f4:18:c9:12:e4:f7:27:aa:d9:7b:ac:74:fb:19:8a:
                    18:fd:9f:74:88:74:97:e3:5d:3e:c4:52:a3:65:63:
                    ea:3f:7d:0a:a6:95:aa:9b:43:0b:48:32:ab:ed:1d:
                    10:9d:02:98:92:bd:63:a8:f0:29:9c:f5:29:6c:00:
                    a0:e1:82:a0:d9:a7:fa:09:a5:60:e9:6a:21:d6:e6:
                    d6:d7:4d:32:11:fb:5c:73:60:18:3f:20:7c:36:11:
                    96:34:ab:5e:07:09:86:0a:09:74:1c:bf:19:ba:e3:
                    cd:ac:10:34:26:f8:ca:fe:24:ad:b4:b5:57:f7:d5:
                    19:62:56:f8:ac:25:07:98:97:96:ba:73:97:1a:3a:
                    74:71:14:46:52:7e:10:65:63:48:5e:34:bf:08:3c:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:03:D2:7E:38:46:B0:24:C0:AE:F6:05:A3:65:22:54:C6:3A:DA
            X509v3 Authority Key Identifier:
                keyid:6F:11:EA:E0:54:1E:2B:EF:42:78:42:B5:AC:BB:B3:FA:60:09:49:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F11EAE0541E2BEF427842B5ACBBB3FA60094958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:82:7a:f8:9e:c2:e0:01:38:6b:62:f0:59:05:1a:1b:bd:
         1c:79:02:79:3b:72:15:a0:76:db:ed:98:73:93:32:d3:e9:b4:
         fd:a1:50:a7:d0:a4:60:46:4a:9b:1b:55:dd:2c:0f:bc:25:f8:
         99:9b:f3:dc:89:3d:30:af:7c:31:2c:42:53:74:fb:39:34:5e:
         c2:94:b2:8b:1d:eb:78:23:a3:78:4e:b7:59:19:a2:95:b4:91:
         50:bf:47:3a:41:6b:ef:e3:39:00:b3:45:2c:ec:0a:b1:9a:b6:
         6a:a5:76:56:8b:32:48:57:ad:aa:46:11:c1:8c:e4:40:1b:6c:
         c8:ff:ef:40:58:30:95:ef:0e:6e:4f:f5:01:1b:17:2e:6e:08:
         b3:63:7d:be:f7:df:1c:fc:0a:b2:dd:e7:7d:a1:e2:7f:7f:2d:
         43:85:fc:16:15:dc:a6:a6:83:97:b4:92:8e:dd:ab:5d:5e:29:
         59:00:20:35:13:9b:54:77:7d:c3:72:cc:67:26:02:9d:3a:d2:
         ba:c7:ee:97:04:9b:7b:e7:f1:f4:74:ed:c0:a3:a6:8a:e1:da:
         27:24:27:23:c0:25:1a:cf:f8:2d:a0:9c:7c:b3:a9:63:ed:0f:
         16:cf:dd:9b:da:8e:45:65:83:d0:6a:13:43:3d:6d:b0:dc:fa:
         38:16:96:c7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMBIQrK0FsIn3Zru39J5i3VJvaOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYxMUVBRTA1NDFFMkJFRjQyNzg0MkI1QUNCQkIzRkE2
MDA5NDk1ODAeFw0yNTA0MjMxNDU2MDVaFw0yNjA0MjIxNTAxMDVaMDMxMTAvBgNV
BAMTKEZBQkEwM0QyN0UzODQ2QjAyNEMwQUVGNjA1QTM2NTIyNTRDNjNBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y8WWW427jFki8amTe+eaqSXy
GX/o3SLkE8fugN4sxZBIFT+SHcerBZSE3QQzaRa0fcpCWuhMcDY9E82Xnwl65/sG
68pbQ2NL7si3sm2ArSCRxnwgJikm91PcQQqip145mXhpnEdRhvQYyRLk9yeq2Xus
dPsZihj9n3SIdJfjXT7EUqNlY+o/fQqmlaqbQwtIMqvtHRCdApiSvWOo8Cmc9Sls
AKDhgqDZp/oJpWDpaiHW5tbXTTIR+1xzYBg/IHw2EZY0q14HCYYKCXQcvxm6482s
EDQm+Mr+JK20tVf31RliVvisJQeYl5a6c5caOnRxFEZSfhBlY0heNL8IPJIDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+roD0n44RrAkwK72BaNlIlTGOtowHwYDVR0j
BBgwFoAUbxHq4FQeK+9CeEK1rLuz+mAJSVgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5GSGMxY2VITHlkb0xtVkhxY2ZFQkJCNHdoWHc5djd4WmtaN2ZxOVZp
NTYvMC82RjExRUFFMDU0MUUyQkVGNDI3ODQyQjVBQ0JCQjNGQTYwMDk0OTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMTFFQUUwNTQxRTJCRUY0
Mjc4NDJCNUFDQkJCM0ZBNjAwOTQ5NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JORkhjMWNlSEx5ZG9MbVZIcWNmRUJCQjR3aFh3OXY3eFprWjdmcTlWaTU2LzAv
MzIzODMwMzQzYTM3MzU2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR1yDANBgkqhkiG9w0BAQsFAAOCAQEADvCCevie
wuABOGti8FkFGhu9HHkCeTtyFaB22+2Yc5My0+m0/aFQp9CkYEZKmxtV3SwPvCX4
mZvz3Ik9MK98MSxCU3T7OTRewpSyix3reCOjeE63WRmilbSRUL9HOkFr7+M5ALNF
LOwKsZq2aqV2VosySFetqkYRwYzkQBtsyP/vQFgwle8Obk/1ARsXLm4Is2N9vvff
HPwKst3nfaHif38tQ4X8FhXcpqaDl7SSjt2rXV4pWQAgNRObVHd9w3LMZyYCnTrS
usfulwSbe+fx9HTtwKOmiuHaJyQnI8AlGs/4LaCcfLOpY+0PFs/dm9qORWWD0GoT
Qz1tsNz6OBaWxw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:42 2025 by rpki-client on console.sobornost.net