Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
File:                     323830343a333639343a3a2f33322d3438203d3e20323636333537.roa (raw, json)
Hash identifier:          kq+t39XYb04jC79wRnzSnXx/v6llrqq++pXqP3EjJ5Y=
Subject key identifier:   DA:66:22:44:C2:08:08:67:44:39:48:EC:97:F5:62:68:34:D0:9B:84
Certificate issuer:       /CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
Certificate serial:       38DE01F19F4170A1C8339B10AD8961591486AD3F
Authority key identifier: 0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     266357
IP address blocks:        2804:3694::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl
                          rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:de:01:f1:9f:41:70:a1:c8:33:9b:10:ad:89:61:59:14:86:ad:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:3c:c2:7b:3c:9a:39:42:7f:fd:85:8d:4a:
                    30:ab:f5:df:60:9a:6b:4f:76:c3:fe:fa:0a:d2:64:
                    08:a7:8f:11:4f:f0:66:5d:e9:81:72:53:94:40:68:
                    77:f7:c5:3f:e4:5e:7f:d6:77:db:d6:0b:d9:a1:47:
                    2c:13:12:1d:01:35:46:95:90:c2:63:da:5f:0e:59:
                    fe:3f:3f:d8:20:4d:71:b7:fa:0f:fd:49:ca:42:1f:
                    13:80:69:30:c0:58:f3:dd:c5:bd:3a:7d:16:75:e6:
                    f4:f7:33:4c:ab:a0:05:f2:a7:cf:de:17:e0:e2:09:
                    13:a4:2c:73:f9:10:f0:7f:00:f3:2f:7e:b1:6b:13:
                    16:1f:aa:0b:8f:db:29:bc:ac:47:55:a2:f0:4b:fd:
                    42:58:3c:c9:e3:4c:d1:bc:98:6a:f4:d5:9d:66:19:
                    d1:43:85:ad:64:97:14:66:6f:7c:c8:ff:c7:82:80:
                    28:a8:cc:b5:ae:17:9e:37:55:82:ff:e5:a1:67:7c:
                    34:2b:94:4a:ec:86:9c:b3:9f:bd:38:4c:78:c1:8b:
                    34:1d:0d:a5:8b:63:ad:71:26:31:b8:4c:4f:9b:34:
                    42:10:51:ff:e6:f0:8b:7b:ba:38:f1:db:ba:e2:1f:
                    f3:65:a9:5f:43:6d:38:b0:54:dc:6d:19:33:ae:0e:
                    d1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:22:44:C2:08:08:67:44:39:48:EC:97:F5:62:68:34:D0:9B:84
            X509v3 Authority Key Identifier:
                keyid:0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/323830343a333639343a3a2f33322d3438203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3694::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:8a:c9:dd:77:34:67:78:21:bf:33:93:26:e8:90:e1:7f:
         73:50:50:28:90:96:7e:89:a7:42:94:14:8e:18:5a:bb:41:5b:
         1c:61:87:c6:57:f4:10:5a:47:e5:96:91:fd:bb:b2:4a:ac:d1:
         33:c6:47:7e:a9:2f:ee:e2:b2:09:b4:ae:48:29:24:79:c2:2b:
         e6:3f:25:7f:97:ab:ea:91:45:35:05:aa:11:55:0a:cd:c1:0c:
         f6:e6:dc:b7:84:2d:87:62:87:ac:e1:d3:fe:0a:46:13:e9:50:
         c5:76:4c:5b:84:23:cd:c2:b7:9b:02:71:70:a5:80:fa:90:5c:
         21:56:f4:fc:2d:aa:b3:b9:c4:93:fd:c1:6d:f3:99:2c:24:ac:
         32:86:70:b9:77:0d:9d:fc:5a:bf:97:7f:96:23:5e:99:3a:a2:
         74:c5:e3:f7:8a:ba:1c:f3:7e:c9:7a:76:84:d7:40:a5:06:f0:
         be:d5:62:ec:9f:33:45:aa:4e:f7:72:a0:16:60:11:9c:09:7d:
         ce:f3:7c:57:96:8a:f7:b5:19:24:cb:18:e1:8c:17:fb:4b:b1:
         67:57:81:f8:6c:a3:ba:ec:66:0b:5a:b4:cd:46:46:d7:ad:85:
         f7:55:a7:50:a7:61:d4:98:e1:34:b4:d4:22:75:f9:ae:9f:fa:
         0d:63:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net