Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3334203d3e20323731313835.roa
File:                     323830343a373738633a3a2f33322d3334203d3e20323731313835.roa (raw, json)
Hash identifier:          +2FlKewuZktP4c66zuxHNwVCYsXgbLYozrON0BqHGO8=
Subject key identifier:   AC:AC:6D:48:00:F1:DE:5F:09:58:13:D5:EE:24:3A:C8:74:7A:C7:8F
Certificate issuer:       /CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Certificate serial:       3D5C23A202272E3542934D12263C3684C90329F6
Authority key identifier: FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3334203d3e20323731313835.roa
Signing time:             Tue 25 Mar 2025 18:00:00 +0000
ROA not before:           Tue 25 Mar 2025 17:55:00 +0000
ROA not after:            Tue 24 Mar 2026 18:00:00 +0000
asID:                     271185
IP address blocks:        2804:778c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl
                          rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5c:23:a2:02:27:2e:35:42:93:4d:12:26:3c:36:84:c9:03:29:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
        Validity
            Not Before: Mar 25 17:55:00 2025 GMT
            Not After : Mar 24 18:00:00 2026 GMT
        Subject: CN=3082010A0282010100D17A784451ABEBCACED98D48FBD8F1895E91E0927E2F1972B70013C844E2E27D42C7F2AC817772A69369F9013C7482EB0135BD8E13E99E1F12A711B569D45E4571F92B156EE2830BB86B86596ABC30D7BD780DA1FC741DB09BD7531962AF7FAD485889E0B9990DBE8AC41AA11E5CB34FDD26753C1A72015CF3E85CC76FB595920BD62C9A418E3C735CE352A519858969DF896FAB93773EC98385C08A50C84790306E3665B2AF8DE0EC155E25F70A6B8D80F25998BDBB427ABD60D137D00C3250CADDA90C4A11F2D50DABB1A25620EDA4880DE2BAAA2DDAE1796A741FB9753C2AF46556D4E951412B153BB4E07E4C59C35EDA965911659E255D1F3A7E70FDE6A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:78:44:51:ab:eb:ca:ce:d9:8d:48:fb:d8:
                    f1:89:5e:91:e0:92:7e:2f:19:72:b7:00:13:c8:44:
                    e2:e2:7d:42:c7:f2:ac:81:77:72:a6:93:69:f9:01:
                    3c:74:82:eb:01:35:bd:8e:13:e9:9e:1f:12:a7:11:
                    b5:69:d4:5e:45:71:f9:2b:15:6e:e2:83:0b:b8:6b:
                    86:59:6a:bc:30:d7:bd:78:0d:a1:fc:74:1d:b0:9b:
                    d7:53:19:62:af:7f:ad:48:58:89:e0:b9:99:0d:be:
                    8a:c4:1a:a1:1e:5c:b3:4f:dd:26:75:3c:1a:72:01:
                    5c:f3:e8:5c:c7:6f:b5:95:92:0b:d6:2c:9a:41:8e:
                    3c:73:5c:e3:52:a5:19:85:89:69:df:89:6f:ab:93:
                    77:3e:c9:83:85:c0:8a:50:c8:47:90:30:6e:36:65:
                    b2:af:8d:e0:ec:15:5e:25:f7:0a:6b:8d:80:f2:59:
                    98:bd:bb:42:7a:bd:60:d1:37:d0:0c:32:50:ca:dd:
                    a9:0c:4a:11:f2:d5:0d:ab:b1:a2:56:20:ed:a4:88:
                    0d:e2:ba:aa:2d:da:e1:79:6a:74:1f:b9:75:3c:2a:
                    f4:65:56:d4:e9:51:41:2b:15:3b:b4:e0:7e:4c:59:
                    c3:5e:da:96:59:11:65:9e:25:5d:1f:3a:7e:70:fd:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:6D:48:00:F1:DE:5F:09:58:13:D5:EE:24:3A:C8:74:7A:C7:8F
            X509v3 Authority Key Identifier:
                keyid:FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/323830343a373738633a3a2f33322d3334203d3e20323731313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:778c::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:34:16:61:ad:91:e5:14:10:86:f9:df:cb:bf:e1:63:c0:
         54:1f:8d:53:fc:4f:b2:43:c0:01:72:72:dd:19:6a:a5:b2:e7:
         d6:c3:18:3e:8c:ec:df:6c:d3:7a:f7:11:c7:23:9f:a2:04:63:
         76:64:39:37:f3:d1:05:51:e5:04:55:ce:4d:65:6d:7f:c6:74:
         12:57:61:aa:6c:e7:53:d3:02:07:4f:a1:ce:d9:1e:d3:e3:ab:
         62:80:65:5e:0b:b8:6d:ac:59:dd:5b:f8:37:a7:ef:0b:4d:8d:
         4a:41:8d:6a:b0:c4:b8:08:dc:37:7a:23:e2:c8:7b:81:2b:83:
         1a:c2:2b:4c:ee:17:dc:42:31:02:c1:7f:9e:a1:4d:be:85:5a:
         4f:3f:d1:6c:5d:3c:8f:68:04:51:89:30:fc:43:b3:ca:4c:1d:
         d9:48:14:ef:31:df:4d:c1:4f:3f:81:a5:ce:fe:01:cc:e3:dd:
         dd:a1:82:93:41:bc:9e:05:22:52:6e:25:14:fc:8c:07:64:b0:
         ba:11:76:8e:78:56:e9:aa:b6:e2:64:3c:15:e2:04:16:ae:6e:
         cb:64:8a:0b:83:ea:5b:38:6f:51:2c:90:49:96:c1:14:96:04:
         07:28:a7:86:e9:db:c1:24:cf:5b:5e:22:21:c5:ea:db:a3:db:
         40:4b:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:10 2025 by rpki-client on console.sobornost.net