Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa
File:                     323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (raw, json)
Hash identifier:          sQDX4tHCaVbOfJNLvecye82n1Yp5a3DWaTywLJKojS0=
Subject key identifier:   7F:63:8C:42:07:F6:B1:B5:CF:A4:8F:E9:AB:19:78:06:8B:C3:A8:3A
Certificate issuer:       /CN=ACA778A2C607C1D75246F6843808768228994515
Certificate serial:       7644950C1D1F67969B1E5170C2E6C0A83241FF20
Authority key identifier: AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa
Signing time:             Wed 05 Mar 2025 23:36:15 +0000
ROA not before:           Wed 05 Mar 2025 23:31:15 +0000
ROA not after:            Wed 04 Mar 2026 23:36:15 +0000
asID:                     267332
IP address blocks:        2804:4bd8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl
                          rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:44:95:0c:1d:1f:67:96:9b:1e:51:70:c2:e6:c0:a8:32:41:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACA778A2C607C1D75246F6843808768228994515
        Validity
            Not Before: Mar  5 23:31:15 2025 GMT
            Not After : Mar  4 23:36:15 2026 GMT
        Subject: CN=7F638C4207F6B1B5CFA48FE9AB1978068BC3A83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:d0:8d:df:01:7e:fe:a4:ba:d9:24:b9:c2:
                    9f:02:72:e4:8e:d9:7e:ff:83:d6:b0:44:66:b4:51:
                    be:3f:47:c4:ab:6e:3f:bd:68:3c:9e:b4:4f:85:57:
                    03:f7:a6:04:8a:2e:3e:f5:e9:4d:49:58:dc:6a:b4:
                    81:f8:62:54:39:da:b4:69:f4:75:0a:e3:80:81:46:
                    8b:8e:48:4c:75:74:15:78:81:1b:1f:26:d1:cf:26:
                    d7:50:20:b5:df:5a:98:4e:c6:df:86:90:46:bc:ef:
                    4b:50:76:7b:1e:3a:83:5e:ea:21:48:60:ef:65:30:
                    e0:eb:0a:82:89:a5:3c:d8:ad:0d:68:09:2a:4b:f4:
                    98:4d:82:22:ff:f0:06:85:72:22:24:d4:0e:03:97:
                    a2:1c:8d:5f:57:35:3f:4d:97:55:cf:ed:02:a2:40:
                    42:72:40:65:44:43:81:d1:76:e8:5b:be:dd:28:b6:
                    c5:49:cf:2b:cf:0b:b7:8c:a5:db:c3:3c:ce:3e:fb:
                    75:e3:01:98:ec:e8:9b:d1:e0:cc:9e:4a:6a:1b:0a:
                    31:9f:96:ef:41:af:7e:bb:e1:f1:04:96:6c:41:af:
                    03:91:22:1f:12:57:7c:f8:d2:18:82:48:dd:f3:9c:
                    71:c6:d3:c1:9a:ba:aa:0c:0d:79:63:5b:96:f2:d5:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:8C:42:07:F6:B1:B5:CF:A4:8F:E9:AB:19:78:06:8B:C3:A8:3A
            X509v3 Authority Key Identifier:
                keyid:AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/323830343a346264383a3a2f33322d313238203d3e20323637333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:fd:89:88:f3:80:2c:06:3a:94:f6:fa:82:c3:c4:41:f9:
         2b:4e:43:86:2f:a8:41:9a:e2:85:6c:80:cf:ae:e9:4b:ad:ca:
         60:0e:88:c7:8f:8e:3e:af:e2:4c:ac:8c:4f:96:e9:0e:01:ea:
         bd:11:b5:12:a2:20:1b:a5:38:8d:77:44:c4:e4:dc:63:f1:15:
         06:73:2e:98:e5:9a:49:17:70:bd:bb:74:68:8f:51:50:ed:eb:
         f8:75:fa:f9:0e:40:11:80:0d:b5:81:fe:8d:02:c8:08:69:11:
         1e:df:cc:d4:1c:1f:31:1e:88:58:f6:b7:34:29:92:b2:47:aa:
         b5:c9:49:3c:57:e2:26:67:1e:ec:2b:cd:82:43:0c:3a:54:95:
         fe:82:a0:43:fe:88:68:a0:71:04:2f:14:31:06:df:6d:ef:44:
         5e:0b:eb:dd:e4:a0:38:bf:d3:e4:36:8d:b2:e8:5e:32:f8:34:
         e9:ad:ea:5c:20:a4:f1:b7:16:19:c4:cb:4d:cf:c8:4e:55:3d:
         bb:fc:44:11:d7:fe:55:e9:d5:11:84:29:68:a7:54:f9:0e:b4:
         a3:f0:96:91:cc:6a:1c:dc:2d:9d:11:31:ba:65:eb:54:ec:3a:
         ff:f1:e9:42:ed:43:60:ce:c6:86:25:d4:90:fd:2f:4f:0c:b7:
         99:2c:e0:15
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdkSVDB0fZ5abHlFwwubAqDJB/yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNBNzc4QTJDNjA3QzFENzUyNDZGNjg0MzgwODc2ODIy
ODk5NDUxNTAeFw0yNTAzMDUyMzMxMTVaFw0yNjAzMDQyMzM2MTVaMDMxMTAvBgNV
BAMTKDdGNjM4QzQyMDdGNkIxQjVDRkE0OEZFOUFCMTk3ODA2OEJDM0E4M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvdCN3wF+/qS62SS5wp8CcuSO
2X7/g9awRGa0Ub4/R8Srbj+9aDyetE+FVwP3pgSKLj716U1JWNxqtIH4YlQ52rRp
9HUK44CBRouOSEx1dBV4gRsfJtHPJtdQILXfWphOxt+GkEa870tQdnseOoNe6iFI
YO9lMODrCoKJpTzYrQ1oCSpL9JhNgiL/8AaFciIk1A4Dl6IcjV9XNT9Nl1XP7QKi
QEJyQGVEQ4HRduhbvt0otsVJzyvPC7eMpdvDPM4++3XjAZjs6JvR4MyeSmobCjGf
lu9Br3674fEElmxBrwORIh8SV3z40hiCSN3znHHG08GauqoMDXljW5by1YqZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUf2OMQgf2sbXPpI/pqxl4BovDqDowHwYDVR0j
BBgwFoAUrKd4osYHwddSRvaEOAh2giiZRRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdR
VlovMS9BQ0E3NzhBMkM2MDdDMUQ3NTI0NkY2ODQzODA4NzY4MjI4OTk0NTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQTc3OEEyQzYwN0MxRDc1
MjQ2RjY4NDM4MDg3NjgyMjg5OTQ1MTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvZlNySGNtbmNGbkdQUnNRN0RCeEFzTHpIeGpqclNEQTExaHladnFHUVZaLzEv
MzIzODMwMzQzYTM0NjI2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEvYMA0GCSqGSIb3DQEBCwUAA4IBAQBd8f2J
iPOALAY6lPb6gsPEQfkrTkOGL6hBmuKFbIDPrulLrcpgDojHj44+r+JMrIxPlukO
Aeq9EbUSoiAbpTiNd0TE5Nxj8RUGcy6Y5ZpJF3C9u3Roj1FQ7ev4dfr5DkARgA21
gf6NAsgIaREe38zUHB8xHohY9rc0KZKyR6q1yUk8V+ImZx7sK82CQww6VJX+gqBD
/ohooHEELxQxBt9t70ReC+vd5KA4v9PkNo2y6F4y+DTprepcIKTxtxYZxMtNz8hO
VT27/EQR1/5V6dURhClop1T5DrSj8JaRzGoc3C2dETG6ZetU7Dr/8elC7UNgzsaG
JdSQ/S9PDLeZLOAV
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:20:14 2025 by rpki-client