Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/323830343a393161383a3a2f33322d3438203d3e20323734363536.roa
File:                     323830343a393161383a3a2f33322d3438203d3e20323734363536.roa (raw, json)
Hash identifier:          AUoA0r9dJ2SGdG3DObemZmnv6RIILAS0ZINayti/Kns=
Subject key identifier:   49:69:D4:7B:F0:82:46:45:ED:6E:A2:6D:69:99:78:6B:01:64:04:0E
Certificate issuer:       /CN=F2AE98F26B4E4FBDB64D10E5844E666FBA044990
Certificate serial:       168D1DC87D2A7352584D543A4FD4E88E966D8E23
Authority key identifier: F2:AE:98:F2:6B:4E:4F:BD:B6:4D:10:E5:84:4E:66:6F:BA:04:49:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/323830343a393161383a3a2f33322d3438203d3e20323734363536.roa
Signing time:             Mon 07 Apr 2025 20:55:47 +0000
ROA not before:           Mon 07 Apr 2025 20:50:47 +0000
ROA not after:            Mon 06 Apr 2026 20:55:47 +0000
asID:                     274656
IP address blocks:        2804:91a8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.crl
                          rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8d:1d:c8:7d:2a:73:52:58:4d:54:3a:4f:d4:e8:8e:96:6d:8e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AE98F26B4E4FBDB64D10E5844E666FBA044990
        Validity
            Not Before: Apr  7 20:50:47 2025 GMT
            Not After : Apr  6 20:55:47 2026 GMT
        Subject: CN=4969D47BF0824645ED6EA26D6999786B0164040E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:98:cf:a9:27:7a:6a:c1:15:11:de:5a:74:
                    1b:79:a0:46:fb:72:cb:eb:c1:38:0d:ab:8d:5e:fa:
                    27:b1:2d:43:0e:d8:ec:17:ac:c3:26:23:a8:0d:f0:
                    d3:68:dc:0e:c0:7d:e8:17:96:db:42:90:d2:12:46:
                    3b:76:57:d0:29:8e:79:6f:a6:f7:a4:fe:a3:6d:cd:
                    83:d3:0a:d5:ca:e4:97:ee:99:d1:38:fc:51:3b:9d:
                    75:2e:2d:30:35:48:26:f2:28:f4:15:20:95:47:29:
                    ed:d1:bf:9c:28:c1:fe:c7:f2:e3:42:67:29:da:f2:
                    a6:dc:6a:b7:f8:c4:51:36:52:ea:bb:68:23:0d:ea:
                    1a:d0:66:32:8f:2c:8b:50:2b:0a:55:62:35:ad:47:
                    e8:5c:01:de:6d:6e:d3:21:27:1b:98:ec:5b:39:32:
                    f4:d4:b8:e7:08:dd:81:3b:be:02:fd:21:e0:bd:78:
                    15:ad:a6:6f:d2:8b:fe:36:d2:0c:dc:9d:e1:d3:c0:
                    b3:f1:eb:80:bd:5e:2e:a8:ed:af:53:c4:e3:da:84:
                    a5:15:fd:0e:1b:b7:81:f0:82:09:a7:3c:2c:6e:92:
                    d2:dc:13:a7:46:70:a8:72:58:d5:41:f2:c8:e4:0c:
                    60:04:74:f0:ed:7a:7e:32:a1:2f:8c:11:67:6f:4c:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:D4:7B:F0:82:46:45:ED:6E:A2:6D:69:99:78:6B:01:64:04:0E
            X509v3 Authority Key Identifier:
                keyid:F2:AE:98:F2:6B:4E:4F:BD:B6:4D:10:E5:84:4E:66:6F:BA:04:49:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AE98F26B4E4FBDB64D10E5844E666FBA044990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/323830343a393161383a3a2f33322d3438203d3e20323734363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:18:06:c9:75:39:fa:3a:16:66:75:27:63:e2:52:97:3e:8a:
         02:9a:4d:d6:d2:d4:92:71:fe:0d:0b:92:cb:5e:9d:73:98:40:
         40:0d:76:2f:32:dd:1c:16:ba:e1:72:fc:8f:57:d2:30:07:0c:
         34:08:63:56:47:61:33:cc:6c:8b:b2:15:20:bc:2e:29:b6:c8:
         7c:ff:38:9e:01:7c:1e:f3:2b:53:6d:90:3b:93:5e:2c:11:3e:
         4f:6c:98:e9:bd:14:b7:e9:c0:51:dd:ec:10:ab:ca:80:14:98:
         1f:66:6b:97:82:b2:db:56:85:17:27:62:16:44:0a:72:36:f1:
         16:c1:c3:4c:75:46:e3:ee:c9:03:19:f5:11:65:0d:2f:2f:91:
         d5:15:65:7b:a5:63:f9:16:9c:c1:dd:9b:b9:d2:c1:14:88:0f:
         ce:d1:2b:88:2e:5e:61:d5:81:bc:db:5b:01:e6:45:86:26:3e:
         1e:3a:2f:32:2c:29:85:41:79:a5:ec:6f:33:79:37:a1:4d:e0:
         06:eb:a3:e5:78:c5:c6:87:eb:1d:fd:59:cf:ad:97:27:01:c4:
         b2:43:6e:10:ac:dd:c7:8c:e8:06:71:e4:e3:95:36:6a:8b:58:
         76:d5:45:5d:45:98:58:26:80:23:13:25:ff:a1:74:39:1e:3d:
         7b:d8:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net