Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d313238203d3e20323638303734.roa
File:                     323830343a353739383a3a2f33322d313238203d3e20323638303734.roa (raw, json)
Hash identifier:          ulK1a2KgubQBK0daFQ0sUnVNGjm6/BjzY3X9w9kkTzc=
Subject key identifier:   97:B5:75:68:1C:06:10:FF:F8:41:AB:1E:2E:30:36:D7:AA:42:BE:B4
Certificate issuer:       /CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
Certificate serial:       5ED67880ABB261E99E68FDD27B42FEA610C310F3
Authority key identifier: 3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d313238203d3e20323638303734.roa
Signing time:             Fri 13 Dec 2024 01:15:30 +0000
ROA not before:           Fri 13 Dec 2024 01:10:30 +0000
ROA not after:            Sat 13 Dec 2025 01:15:30 +0000
asID:                     268074
IP address blocks:        2804:5798::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d6:78:80:ab:b2:61:e9:9e:68:fd:d2:7b:42:fe:a6:10:c3:10:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1
        Validity
            Not Before: Dec 13 01:10:30 2024 GMT
            Not After : Dec 13 01:15:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:40:d8:ec:a8:07:fd:60:1c:64:fc:e6:6a:
                    7d:74:61:4b:b7:52:2b:fd:8c:b0:46:a5:3b:b4:3f:
                    96:b6:14:43:42:26:2c:c5:20:4b:5c:94:fe:6f:11:
                    5c:31:be:82:5c:09:bf:40:de:69:9e:a4:76:2b:46:
                    78:49:e2:20:15:8a:89:27:08:1b:ce:df:19:e1:75:
                    81:af:1c:e3:77:18:a5:07:aa:a7:1d:5d:b2:b1:01:
                    d2:4b:c3:2e:5a:05:62:2b:62:b9:a9:9f:cd:65:4e:
                    72:68:46:50:ca:d1:df:2c:48:2d:98:0c:b0:c9:e5:
                    2c:4e:dc:57:0b:da:68:27:6a:d6:7b:52:af:43:65:
                    1e:8e:c6:1a:ea:a5:83:90:bf:a8:a3:25:2f:c2:b4:
                    56:43:97:22:69:b2:2f:06:e5:f7:4a:84:fd:ae:94:
                    55:e8:4b:7c:69:82:60:0a:1e:c3:2c:2a:4f:39:75:
                    66:ec:0e:63:dd:2e:af:3d:65:79:f9:d8:d7:5f:7b:
                    dd:3b:d5:5a:de:a6:81:41:45:3a:c1:64:d1:9a:ac:
                    b5:a3:a0:99:0f:06:32:4d:e5:92:3c:71:7c:e9:f6:
                    7e:33:47:7c:23:c8:bc:99:91:57:95:11:69:f5:b3:
                    33:c6:5c:e6:a3:40:98:dc:2f:44:ae:b9:6b:69:e4:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:75:68:1C:06:10:FF:F8:41:AB:1E:2E:30:36:D7:AA:42:BE:B4
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:4C:1F:29:58:0F:CD:F8:C9:BA:D5:14:8B:88:85:DA:03:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DD5494C1F29580FCDF8C9BAD5148B8885DA03F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/1/323830343a353739383a3a2f33322d313238203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5798::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:25:dc:b8:d7:e6:bd:c8:07:47:8d:80:23:9d:bb:53:e7:
         cb:36:5c:9d:12:81:b3:8e:58:f6:cc:2f:9f:80:0f:ef:dc:f7:
         7e:6d:53:14:bb:01:ed:1b:22:c8:5c:fc:43:49:79:38:1f:4d:
         d4:9c:74:e3:fd:7c:3f:43:22:d9:5c:f2:b1:02:33:a1:1c:5a:
         72:be:5a:47:0f:c2:23:eb:5a:3b:11:d9:08:5a:9b:18:ff:84:
         39:9f:39:f0:19:ca:41:07:b1:c1:72:dc:7f:c3:07:52:fa:c3:
         ec:f2:55:a5:a2:a9:2e:db:5e:3d:cf:78:46:f7:4a:12:02:9d:
         2c:4b:34:27:b6:da:db:d8:d1:91:87:d0:4f:41:fb:26:b7:fb:
         2d:60:e3:24:03:8b:71:74:9a:39:10:05:90:ca:c9:7b:ab:7e:
         f2:4f:36:ff:7b:e1:87:2b:8f:86:3e:f6:d7:37:fb:b2:72:51:
         6e:51:8d:72:69:65:fb:58:74:9e:09:e5:3e:75:5d:ac:29:cd:
         fd:e1:10:31:c2:59:da:87:60:f2:1c:0f:fc:c7:3d:91:61:f2:
         2e:41:f0:09:b0:42:a4:ed:a6:db:b6:52:1c:3f:0f:57:41:d8:
         2f:1a:ca:2e:3b:c5:aa:61:4a:92:3c:24:6f:cb:a6:1d:20:e7:
         9e:52:82:6b
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUXtZ4gKuyYemeaP3Se0L+phDDEPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RENTQ5NEMxRjI5NTgwRkNERjhDOUJBRDUxNDhCODg4
NURBMDNGMTAeFw0yNDEyMTMwMTEwMzBaFw0yNTEyMTMwMTE1MzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdBRDQwRDhFQ0E4MDdGRDYw
MUM2NEZDRTY2QTdENzQ2MTRCQjc1MjJCRkQ4Q0IwNDZBNTNCQjQzRjk2QjYxNDQz
NDIyNjJDQzUyMDRCNUM5NEZFNkYxMTVDMzFCRTgyNUMwOUJGNDBERTY5OUVBNDc2
MkI0Njc4NDlFMjIwMTU4QTg5MjcwODFCQ0VERjE5RTE3NTgxQUYxQ0UzNzcxOEE1
MDdBQUE3MUQ1REIyQjEwMUQyNEJDMzJFNUEwNTYyMkI2MkI5QTk5RkNENjU0RTcy
Njg0NjUwQ0FEMURGMkM0ODJEOTgwQ0IwQzlFNTJDNEVEQzU3MEJEQTY4Mjc2QUQ2
N0I1MkFGNDM2NTFFOEVDNjFBRUFBNTgzOTBCRkE4QTMyNTJGQzJCNDU2NDM5NzIy
NjlCMjJGMDZFNUY3NEE4NEZEQUU5NDU1RTg0QjdDNjk4MjYwMEExRUMzMkMyQTRG
Mzk3NTY2RUMwRTYzREQyRUFGM0Q2NTc5RjlEOEQ3NUY3QkREM0JENTVBREVBNjgx
NDE0NTNBQzE2NEQxOUFBQ0I1QTNBMDk5MEYwNjMyNERFNTkyM0M3MTdDRTlGNjdF
MzM0NzdDMjNDOEJDOTk5MTU3OTUxMTY5RjVCMzMzQzY1Q0U2QTM0MDk4REMyRjQ0
QUVCOTZCNjlFNEUxODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp61A2OyoB/1gHGT85mp9dGFLt1Ir/YywRqU7tD+WthRDQiYsxSBL
XJT+bxFcMb6CXAm/QN5pnqR2K0Z4SeIgFYqJJwgbzt8Z4XWBrxzjdxilB6qnHV2y
sQHSS8MuWgViK2K5qZ/NZU5yaEZQytHfLEgtmAywyeUsTtxXC9poJ2rWe1KvQ2Ue
jsYa6qWDkL+ooyUvwrRWQ5ciabIvBuX3SoT9rpRV6Et8aYJgCh7DLCpPOXVm7A5j
3S6vPWV5+djXX3vdO9Va3qaBQUU6wWTRmqy1o6CZDwYyTeWSPHF86fZ+M0d8I8i8
mZFXlRFp9bMzxlzmo0CY3C9ErrlraeThhwIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FJe1dWgcBhD/+EGrHi4wNteqQr60MB8GA1UdIwQYMBaAFD3VSUwfKVgPzfjJutUU
i4iF2gPxMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI2ZmpZVU5ZRXVReW8x
M0tqN1Fid1h5TWJOUXZING9LZHFkRzJUSkd5SkZ1LzEvM0RENTQ5NEMxRjI5NTgw
RkNERjhDOUJBRDUxNDhCODg4NURBMDNGMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zREQ1NDk0QzFGMjk1ODBGQ0RGOEM5QkFENTE0OEI4ODg1REEw
M0YxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yNmZqWVVOWUV1UXlvMTNLajdR
YndYeU1iTlF2SDRvS2RxZEcyVEpHeUpGdS8xLzMyMzgzMDM0M2EzNTM3MzkzODNh
M2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjM4MzAzNzM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KARXmDANBgkqhkiG9w0BAQsFAAOCAQEACe0l3LjX5r3IB0eNgCOdu1PnyzZcnRKB
s45Y9swvn4AP79z3fm1TFLsB7RsiyFz8Q0l5OB9N1Jx04/18P0Mi2VzysQIzoRxa
cr5aRw/CI+taOxHZCFqbGP+EOZ858BnKQQexwXLcf8MHUvrD7PJVpaKpLttePc94
RvdKEgKdLEs0J7ba29jRkYfQT0H7Jrf7LWDjJAOLcXSaORAFkMrJe6t+8k82/3vh
hyuPhj721zf7snJRblGNcmll+1h0ngnlPnVdrCnN/eEQMcJZ2odg8hwP/Mc9kWHy
LkHwCbBCpO2m27ZSHD8PV0HYLxrKLjvFqmFKkjwkb8umHSDnnlKCaw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:52:28 2025 by rpki-client