Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/323830343a363039383a3a2f33322d313238203d3e20323639313739.roa
File:                     323830343a363039383a3a2f33322d313238203d3e20323639313739.roa (raw, json)
Hash identifier:          r3+IdS3PKQSnQb8flMcQSCizjRU161pzAs4GgzT7MME=
Subject key identifier:   B1:00:ED:9A:2F:E8:40:5A:14:D0:F0:DD:CF:C7:D6:7D:23:E3:02:45
Certificate issuer:       /CN=F8F98CA5340788709739B7A6B75EDBD7FCEA06ED
Certificate serial:       756FE22DDB2D04D195CDA1130B30CC1A431C534A
Authority key identifier: F8:F9:8C:A5:34:07:88:70:97:39:B7:A6:B7:5E:DB:D7:FC:EA:06:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/323830343a363039383a3a2f33322d313238203d3e20323639313739.roa
Signing time:             Thu 06 Mar 2025 17:38:20 +0000
ROA not before:           Thu 06 Mar 2025 17:33:20 +0000
ROA not after:            Thu 05 Mar 2026 17:38:20 +0000
asID:                     269179
IP address blocks:        2804:6098::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.crl
                          rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:e2:2d:db:2d:04:d1:95:cd:a1:13:0b:30:cc:1a:43:1c:53:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F98CA5340788709739B7A6B75EDBD7FCEA06ED
        Validity
            Not Before: Mar  6 17:33:20 2025 GMT
            Not After : Mar  5 17:38:20 2026 GMT
        Subject: CN=B100ED9A2FE8405A14D0F0DDCFC7D67D23E30245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:67:b0:29:38:f6:5d:29:cc:10:46:26:f9:
                    a0:70:8b:1f:96:89:55:59:85:26:be:bc:81:05:65:
                    61:19:a0:66:71:8d:1d:bc:46:05:33:fa:47:c0:32:
                    ba:fd:3a:02:b3:f4:00:0f:45:f5:24:fa:b4:25:a2:
                    d2:62:5c:07:9e:00:6f:22:47:43:cd:0b:46:a1:e9:
                    d7:de:cb:10:f8:24:7d:34:3a:79:8c:f6:c8:7e:d2:
                    f2:46:be:07:67:39:cf:71:30:b5:6b:cc:f4:fc:6a:
                    1c:e0:7c:5e:6d:eb:6c:52:1f:42:95:6b:3f:10:1d:
                    81:bd:27:97:e1:5a:fa:76:45:42:e1:75:2c:0d:f3:
                    16:fd:37:5e:39:9f:fa:a9:c5:7a:85:e4:c3:73:2e:
                    42:2d:0c:43:ba:e9:c2:fc:0f:07:a4:f2:d8:03:f7:
                    f1:09:e5:11:95:ef:7d:fe:48:f2:c6:38:cd:f9:ad:
                    93:22:80:6a:6c:26:d7:94:b0:6d:13:56:2b:a5:0f:
                    77:35:ec:d4:c6:cf:87:a8:23:40:79:fc:2b:c6:42:
                    a0:4f:95:66:2f:d1:bf:e7:53:45:9d:06:4c:40:14:
                    96:fc:97:9f:7b:c4:62:1c:3f:b2:24:f9:5b:b8:66:
                    c7:a2:a4:c6:1e:d6:ce:fd:44:9d:3a:27:07:a7:4f:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:00:ED:9A:2F:E8:40:5A:14:D0:F0:DD:CF:C7:D6:7D:23:E3:02:45
            X509v3 Authority Key Identifier:
                keyid:F8:F9:8C:A5:34:07:88:70:97:39:B7:A6:B7:5E:DB:D7:FC:EA:06:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8F98CA5340788709739B7A6B75EDBD7FCEA06ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/1/323830343a363039383a3a2f33322d313238203d3e20323639313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6098::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:e6:d8:da:4d:b4:ff:27:93:1f:19:09:d6:73:0c:49:e5:
         a1:6f:20:14:84:0b:37:9b:33:39:3f:a3:7d:5f:98:c9:33:40:
         bd:0a:4a:42:65:4e:e4:11:f6:17:95:0d:23:95:7e:70:1f:e4:
         90:cd:6c:c8:88:90:b7:c1:de:0a:ed:ec:fe:0a:a2:4b:6e:23:
         e7:68:f5:5f:64:9f:c3:3c:8f:22:f3:35:83:ef:ca:ea:e3:c9:
         63:c0:5b:89:a0:41:ea:eb:7e:1a:72:76:a3:eb:0b:6c:07:d5:
         8c:7e:99:4e:0d:af:84:5d:6e:43:67:8f:e6:ee:84:cd:bf:bb:
         28:98:4b:75:7e:61:62:c8:8c:21:87:ea:96:ae:88:64:f0:57:
         6a:bc:4d:fd:ef:0f:b4:04:bd:f7:04:29:7e:2d:13:47:30:1c:
         4b:f1:78:d6:43:5d:db:84:be:11:76:67:ca:3b:eb:b5:45:01:
         95:53:60:4b:ff:3a:75:3e:ca:f4:c2:72:0e:98:b5:5e:59:5b:
         2b:de:f1:e4:1c:c7:2d:3a:25:47:01:de:bd:20:2e:71:8a:6b:
         44:2f:cc:9c:0a:9b:ae:a0:c2:8e:81:93:3c:70:1b:b6:50:37:
         1f:4f:0f:ea:09:1d:fb:b0:78:85:39:e6:71:d8:db:06:9c:c3:
         6e:65:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:45 2025 by rpki-client on console.sobornost.net