Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a343030303a3a2f33342d3334203d3e20323638383239.roa
File:                     323830343a356234303a343030303a3a2f33342d3334203d3e20323638383239.roa (raw, json)
Hash identifier:          bhsKrD7ojXoMwGt8AyWWdSVOidNf4TwPVXnlI/jv3s4=
Subject key identifier:   5E:FD:BF:58:61:6C:97:61:DA:2B:87:5C:25:3B:9D:4B:8F:61:B5:85
Certificate issuer:       /CN=2E8650E1A7B09F7749A5126450B8242131048354
Certificate serial:       15274E3CB1FD9F13EB98CEEB9B3E960D95C49157
Authority key identifier: 2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a343030303a3a2f33342d3334203d3e20323638383239.roa
Signing time:             Tue 18 Feb 2025 14:13:11 +0000
ROA not before:           Tue 18 Feb 2025 14:08:11 +0000
ROA not after:            Tue 17 Feb 2026 14:13:11 +0000
asID:                     268829
IP address blocks:        2804:5b40:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:27:4e:3c:b1:fd:9f:13:eb:98:ce:eb:9b:3e:96:0d:95:c4:91:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8650E1A7B09F7749A5126450B8242131048354
        Validity
            Not Before: Feb 18 14:08:11 2025 GMT
            Not After : Feb 17 14:13:11 2026 GMT
        Subject: CN=5EFDBF58616C9761DA2B875C253B9D4B8F61B585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:72:e4:a3:9f:50:ad:11:6d:7f:6c:4e:c2:
                    d1:fb:30:ab:e1:ac:b7:f9:f0:53:2d:23:aa:b7:c4:
                    49:91:b2:24:43:f9:20:1a:4c:e8:91:44:bf:5a:f7:
                    c9:43:d5:c3:25:2b:24:24:3f:6b:2f:bb:c5:39:69:
                    ba:2e:1f:86:35:a0:a3:39:11:04:45:5d:88:fa:ac:
                    db:b5:a0:05:b9:93:8e:76:89:17:dd:e7:8d:5b:41:
                    29:7e:1f:79:8e:68:95:2c:ea:4d:9c:c4:3d:0c:3d:
                    c2:e6:12:14:38:9b:30:27:35:6c:d5:dd:cd:36:f0:
                    93:fa:27:9a:1a:8d:45:3d:94:63:7d:21:07:e7:18:
                    08:03:d5:8f:d4:23:47:30:ee:5c:19:68:15:ca:05:
                    ae:6e:9d:44:67:e5:23:3c:79:78:72:39:c7:78:3d:
                    05:e3:d8:c1:61:09:fb:00:a3:94:69:3e:7a:69:b1:
                    71:bf:93:b1:82:54:d6:3d:1f:26:9b:74:fc:06:9a:
                    d0:7b:25:d5:6f:ba:04:21:96:1a:03:0b:42:46:19:
                    40:f5:33:65:ab:9f:29:4d:56:c2:cd:9b:af:44:83:
                    46:77:5d:e6:68:8c:f1:f4:17:e1:18:c4:e2:ed:7c:
                    09:38:11:a3:50:7b:2f:05:eb:1f:fd:75:63:26:cb:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FD:BF:58:61:6C:97:61:DA:2B:87:5C:25:3B:9D:4B:8F:61:B5:85
            X509v3 Authority Key Identifier:
                keyid:2E:86:50:E1:A7:B0:9F:77:49:A5:12:64:50:B8:24:21:31:04:83:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/2E8650E1A7B09F7749A5126450B8242131048354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8650E1A7B09F7749A5126450B8242131048354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/323830343a356234303a343030303a3a2f33342d3334203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b40:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:db:e1:da:1c:1d:ac:a7:c0:09:a1:85:ff:c4:6e:20:b3:
         21:6b:7a:f2:e8:f4:25:19:8d:1b:0c:f3:91:8c:b7:e0:31:fc:
         c0:6a:61:92:0b:14:73:31:ad:be:79:55:f7:2c:cb:46:a8:e7:
         c4:cb:f3:75:20:37:60:b6:90:fa:26:70:99:6c:4b:03:d7:b0:
         0c:84:9a:d3:e7:27:70:fc:4c:23:81:ff:b7:5e:41:a7:36:67:
         c4:39:69:00:c4:38:b5:20:b2:25:00:69:64:b4:60:e9:a5:6d:
         b8:56:66:ce:a5:f6:9c:4c:51:33:3d:0a:9e:71:6c:e8:95:a0:
         d6:b7:b5:6b:fa:3c:41:7b:62:b3:6b:91:b6:bf:82:ad:68:b1:
         fa:48:11:06:b5:af:cb:a3:f3:18:b2:2d:30:ec:33:dd:6e:3c:
         12:5c:65:94:38:be:63:2e:d7:06:f3:fe:3c:fc:3f:3b:f0:65:
         09:63:42:16:05:07:2f:cc:ae:f6:9a:ee:4d:6a:90:5d:24:74:
         00:87:0a:7b:ff:3e:e4:4d:b2:01:9a:8b:af:e8:f9:b8:a3:0f:
         b0:d9:01:3a:fe:79:c9:fe:4e:b2:9a:4e:0f:a8:11:a7:d9:3d:
         81:05:77:d7:3f:1c:59:41:92:3c:75:ff:4c:11:91:94:46:e8:
         bc:b2:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:51 2025 by rpki-client on console.sobornost.net