Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/323830343a356166303a3a2f33322d313238203d3e20323638383038.roa
File:                     323830343a356166303a3a2f33322d313238203d3e20323638383038.roa (raw, json)
Hash identifier:          OwrapX32h/ywz4sUg3mSeaJJwWwwsVhb3Y/lGdEvg1U=
Subject key identifier:   AE:75:85:79:8C:CE:01:6C:12:6E:FB:58:CF:72:49:C4:86:7A:C9:EA
Certificate issuer:       /CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
Certificate serial:       3E31C20C954682C1252495C239ED2BC06D35183C
Authority key identifier: F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/323830343a356166303a3a2f33322d313238203d3e20323638383038.roa
Signing time:             Thu 17 Apr 2025 17:42:38 +0000
ROA not before:           Thu 17 Apr 2025 17:37:38 +0000
ROA not after:            Thu 16 Apr 2026 17:42:38 +0000
asID:                     268808
IP address blocks:        2804:5af0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl
                          rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:31:c2:0c:95:46:82:c1:25:24:95:c2:39:ed:2b:c0:6d:35:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
        Validity
            Not Before: Apr 17 17:37:38 2025 GMT
            Not After : Apr 16 17:42:38 2026 GMT
        Subject: CN=AE7585798CCE016C126EFB58CF7249C4867AC9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:6b:f5:1f:8f:d5:3f:65:da:f7:59:c3:9b:
                    05:9c:26:39:85:b2:53:da:32:0e:f5:b2:25:d1:76:
                    39:b8:2c:ed:6f:32:57:c9:4e:4d:6e:d0:82:38:03:
                    06:3b:83:69:28:ec:8d:29:93:ac:49:a5:c2:12:4b:
                    c2:a2:4b:fc:95:05:9d:43:88:3f:d4:9c:9d:06:55:
                    f1:03:6c:a9:66:1a:7e:11:bb:64:41:88:0c:07:3c:
                    56:0f:a5:bb:50:96:19:df:6f:93:d0:10:03:dd:d9:
                    4e:df:2a:22:b1:f5:52:07:6b:09:84:6a:2f:f9:e3:
                    bd:80:5a:5c:e6:a5:53:ee:17:23:0b:2a:aa:3d:d1:
                    09:bf:36:15:8e:07:74:28:3b:b8:37:86:b5:af:b0:
                    2b:45:52:84:45:b7:41:44:b0:0c:47:17:ae:18:6b:
                    3e:76:81:4d:0a:07:83:02:06:11:76:95:ce:5b:b6:
                    48:75:97:95:53:cf:cf:80:4a:c9:dd:8f:4f:91:9a:
                    1f:a2:f6:0b:8a:f2:28:23:e0:20:e8:fd:75:ad:d8:
                    76:1b:9a:de:af:17:39:f0:ab:54:ee:82:7f:a3:e8:
                    6e:4f:f8:ab:ee:f2:94:e5:63:ed:46:66:3d:0f:dd:
                    cd:b7:fc:62:fb:fa:21:e4:29:1f:4e:3f:c1:eb:f9:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:75:85:79:8C:CE:01:6C:12:6E:FB:58:CF:72:49:C4:86:7A:C9:EA
            X509v3 Authority Key Identifier:
                keyid:F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/323830343a356166303a3a2f33322d313238203d3e20323638383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:12:14:e0:8c:1f:b7:9d:d6:1a:d5:c3:0a:de:23:2a:2e:09:
         7e:5f:d0:32:54:d7:0c:31:de:fd:05:00:6f:8b:01:c1:af:68:
         f4:75:f3:6a:54:68:f9:01:cc:13:b3:01:84:5c:b1:79:de:65:
         f5:54:e0:dc:76:79:c6:40:2d:5d:d4:cb:18:a2:ae:3a:82:50:
         ef:52:72:82:17:e1:e4:9a:96:8a:f0:97:d9:fd:4a:df:df:a7:
         ca:e0:49:fa:27:78:d4:5f:4d:7e:02:98:1d:35:aa:f2:2a:1e:
         bd:f3:e3:52:8c:7c:c5:f2:0e:7a:4a:44:0d:2a:36:28:93:54:
         db:df:96:bf:c5:fd:f2:84:7b:d9:6b:ef:40:9a:34:8b:5a:79:
         11:e6:72:9e:78:b9:ee:d1:54:b8:f9:ea:f3:9b:6c:93:9c:e5:
         fd:30:e9:51:38:d9:9b:09:0c:8c:4d:aa:94:ab:f4:95:77:a6:
         7c:95:f4:fd:5e:21:9a:0b:b0:15:84:be:de:28:f6:6a:b9:be:
         84:7b:c0:95:b9:52:bc:0d:1a:ef:d0:72:69:93:49:d3:19:8e:
         2f:37:2f:c0:df:aa:61:d0:1d:25:87:19:2f:da:72:74:fe:08:
         64:89:8d:3d:86:b1:fa:4a:1d:e0:88:d2:a1:95:ee:05:1b:b5:
         0b:a2:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net