Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33322d313238203d3e20323637343233.roa
File:                     323830343a343134303a3a2f33322d313238203d3e20323637343233.roa (raw, json)
Hash identifier:          qW+mjVAUTvOV0FGKAF4xtWRLpzFugRuSbKtriasIvAk=
Subject key identifier:   33:61:5D:8C:83:A8:C4:A6:83:CA:17:72:A2:D9:EE:20:9E:42:E7:B7
Certificate issuer:       /CN=26482FC136F55A1EC85E625FA1203C2750189C48
Certificate serial:       7BB169627C79394D6034C08FBC2BCFF90A00358A
Authority key identifier: 26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33322d313238203d3e20323637343233.roa
Signing time:             Thu 03 Apr 2025 15:33:00 +0000
ROA not before:           Thu 03 Apr 2025 15:28:00 +0000
ROA not after:            Thu 02 Apr 2026 15:33:00 +0000
asID:                     267423
IP address blocks:        2804:4140::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl
                          rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 20:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:69:62:7c:79:39:4d:60:34:c0:8f:bc:2b:cf:f9:0a:00:35:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26482FC136F55A1EC85E625FA1203C2750189C48
        Validity
            Not Before: Apr  3 15:28:00 2025 GMT
            Not After : Apr  2 15:33:00 2026 GMT
        Subject: CN=33615D8C83A8C4A683CA1772A2D9EE209E42E7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:db:25:f9:bb:54:a9:3f:42:9b:f7:ba:57:cb:
                    3a:bd:7b:a5:c3:bc:03:f6:59:8b:63:4f:93:0a:fe:
                    49:52:ec:67:7e:51:e3:82:16:43:93:28:78:09:ee:
                    ac:1f:9c:92:57:76:93:2e:72:9d:6e:f5:0c:45:30:
                    23:8f:3c:a1:ff:67:30:fd:26:20:2a:af:cd:10:55:
                    1d:fa:6a:0c:6d:6a:dc:e3:9d:12:01:bd:c7:89:30:
                    6c:95:76:5c:f9:3d:36:bc:61:7d:9b:f9:1b:c2:c6:
                    2f:1d:33:e5:45:76:68:ff:b1:3d:d5:a3:b5:1e:2a:
                    9f:a5:44:40:75:4c:2c:cf:08:89:15:49:ec:66:cc:
                    f2:78:31:ec:22:ba:f3:42:6b:7d:4b:63:7c:10:dc:
                    66:8d:c0:ff:83:06:4c:3e:40:f3:64:32:5a:ff:0e:
                    61:9e:b3:59:89:08:04:17:f8:c4:a0:d2:e0:71:86:
                    56:9a:a0:e0:51:4d:24:dd:cf:f7:44:54:e6:5c:ea:
                    50:51:2f:97:e2:a0:c0:cf:3b:94:da:e9:84:b1:54:
                    cd:96:2b:fe:60:d6:90:40:b9:52:37:da:98:15:79:
                    6b:95:9d:6d:08:0d:98:70:ec:77:ab:1f:22:cc:2f:
                    d1:43:77:5c:f8:3b:b6:10:0c:e5:23:22:6d:bb:5a:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:5D:8C:83:A8:C4:A6:83:CA:17:72:A2:D9:EE:20:9E:42:E7:B7
            X509v3 Authority Key Identifier:
                keyid:26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/323830343a343134303a3a2f33322d313238203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4140::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:02:67:15:44:14:88:65:db:14:67:d5:20:51:1d:27:4d:08:
         52:d2:63:c9:b4:2f:b3:55:8d:df:b3:02:e0:d0:47:a3:03:37:
         96:3a:8b:6b:04:d9:93:05:f1:63:4a:a4:d2:83:4a:94:63:25:
         45:8a:35:09:b7:93:e8:e9:d6:c7:ad:50:75:ec:33:c7:ba:8c:
         58:c3:32:a7:5b:97:39:96:92:47:60:be:65:81:7c:a3:a6:a0:
         06:82:8e:7e:c7:f6:41:75:7c:3b:d7:c5:cd:ec:2c:bf:04:8d:
         8d:c4:3e:6d:9d:db:a4:0a:04:8c:27:69:83:79:f5:24:29:fe:
         08:a3:a6:1d:26:07:c8:9f:29:02:fb:4f:67:b2:63:74:2f:85:
         91:76:25:54:b1:63:e3:5d:b1:1f:89:77:9e:59:5a:45:34:5f:
         80:69:3f:c6:43:cc:c5:bb:58:99:55:4d:55:1d:9e:da:1f:d4:
         7f:58:f4:28:5e:49:46:8e:39:22:2e:f4:8b:0a:7d:62:8d:44:
         da:30:0a:0b:1a:df:38:ce:fb:c0:48:19:af:0e:19:65:66:ea:
         81:3c:db:36:8f:79:9d:fd:eb:b7:5a:af:2e:b5:df:c1:e0:4f:
         f5:ed:c2:17:5f:79:d1:84:d6:ad:61:28:2f:53:d7:9a:36:a6:
         3d:a5:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:22 2025 by rpki-client on console.sobornost.net