Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa
File:                     323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa (raw, json)
Hash identifier:          Su6x0rf17mdOWaYT1+U9xfsMAIRKcAbPOZYEIieQ5Bw=
Subject key identifier:   56:0F:B3:68:A4:78:E9:6B:CA:E5:4F:E4:F0:3A:89:1B:E3:C5:EB:2C
Certificate issuer:       /CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
Certificate serial:       529B3A28C06E18770D2140C7780534D6629CBE99
Authority key identifier: 93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa
Signing time:             Mon 14 Apr 2025 18:42:05 +0000
ROA not before:           Mon 14 Apr 2025 18:37:05 +0000
ROA not after:            Mon 13 Apr 2026 18:42:05 +0000
asID:                     267256
IP address blocks:        2804:4aac:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9b:3a:28:c0:6e:18:77:0d:21:40:c7:78:05:34:d6:62:9c:be:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B81388D9F01BB3ADD678C7DD82C64A03F69013
        Validity
            Not Before: Apr 14 18:37:05 2025 GMT
            Not After : Apr 13 18:42:05 2026 GMT
        Subject: CN=560FB368A478E96BCAE54FE4F03A891BE3C5EB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:75:f2:db:73:0c:fd:70:2e:6e:af:7c:47:
                    a4:31:cd:08:b9:52:97:3e:97:c2:00:0b:bc:bd:93:
                    d0:a6:91:02:92:2f:c8:50:53:e0:d0:41:66:0a:31:
                    10:78:f4:4f:97:7d:75:c5:41:c9:fd:e4:ab:50:6d:
                    5f:73:1f:af:22:1c:82:cc:99:91:ab:bb:a1:c8:2d:
                    8d:74:bb:e3:42:be:a4:90:20:74:e2:06:e0:a7:7a:
                    fd:10:f2:31:77:44:8c:59:79:58:0a:c1:a8:f3:6b:
                    f1:8e:43:20:da:4a:c2:55:5f:24:c5:dc:b1:7b:c5:
                    4a:95:b3:a2:51:67:be:0e:e8:cb:f9:3f:53:61:29:
                    b6:ee:ce:8e:f2:50:a9:8e:e2:c9:aa:e7:cf:03:e2:
                    31:03:f3:8d:01:5e:02:20:db:b3:f2:9d:29:fb:ee:
                    3c:8d:7d:18:8c:c0:70:0d:ae:77:8f:b3:1a:96:de:
                    77:68:84:33:9f:bf:7d:e0:18:8d:8d:42:29:c3:21:
                    3d:87:12:da:b7:fe:b1:c1:8d:50:cc:76:00:cb:c5:
                    fa:80:20:4a:02:60:43:e3:e9:13:41:8d:f9:5e:5e:
                    2b:bf:6e:1e:d6:e0:0c:15:c2:a9:0b:20:da:2a:ec:
                    7e:97:f8:5c:f1:46:f0:95:b2:7f:8e:79:63:46:9e:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:B3:68:A4:78:E9:6B:CA:E5:4F:E4:F0:3A:89:1B:E3:C5:EB:2C
            X509v3 Authority Key Identifier:
                keyid:93:B8:13:88:D9:F0:1B:B3:AD:D6:78:C7:DD:82:C6:4A:03:F6:90:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/93B81388D9F01BB3ADD678C7DD82C64A03F69013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93B81388D9F01BB3ADD678C7DD82C64A03F69013.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:64:b4:3b:c3:78:84:31:29:3e:93:94:51:02:81:41:af:
         6a:3b:7b:7e:07:8b:6e:0d:69:ae:e4:06:45:40:e5:d4:f2:03:
         43:a4:8a:b6:63:49:fe:75:0f:0c:4b:3b:af:56:49:98:c0:43:
         38:bc:8b:53:e6:08:ea:9b:ff:eb:fe:47:45:0d:08:24:e0:67:
         bd:8e:28:62:b2:69:53:f0:0b:62:dc:8f:59:af:3e:cf:d4:b6:
         dd:db:1e:03:03:7d:a0:53:13:60:69:76:e1:b5:42:00:ca:59:
         b4:0e:4e:f8:b0:28:29:e0:c8:3e:0c:e1:2f:a2:30:30:cf:5b:
         dc:26:b7:dc:2c:21:bb:be:c7:9f:c5:f7:23:5a:ec:5e:e2:22:
         76:64:c6:28:b3:22:32:a8:85:8f:01:fc:09:74:f0:c8:77:d6:
         b1:88:90:45:00:47:3d:92:ac:52:da:64:bf:b8:cb:a5:34:df:
         0c:b9:2b:58:f5:3f:c2:11:4e:8c:58:9a:d6:8b:44:97:bb:e3:
         66:29:db:c1:41:02:10:a2:82:e8:3f:02:eb:55:e9:f6:26:9f:
         86:3d:ef:70:ef:12:41:3c:94:5e:74:23:10:a7:48:4e:25:42:
         cb:e0:96:bb:ea:21:1d:f5:57:b7:fe:58:a0:14:80:b8:31:f5:
         1d:24:df:5e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUps6KMBuGHcNIUDHeAU01mKcvpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCODEzODhEOUYwMUJCM0FERDY3OEM3REQ4MkM2NEEw
M0Y2OTAxMzAeFw0yNTA0MTQxODM3MDVaFw0yNjA0MTMxODQyMDVaMDMxMTAvBgNV
BAMTKDU2MEZCMzY4QTQ3OEU5NkJDQUU1NEZFNEYwM0E4OTFCRTNDNUVCMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgS3Xy23MM/XAubq98R6QxzQi5
Upc+l8IAC7y9k9CmkQKSL8hQU+DQQWYKMRB49E+XfXXFQcn95KtQbV9zH68iHILM
mZGru6HILY10u+NCvqSQIHTiBuCnev0Q8jF3RIxZeVgKwajza/GOQyDaSsJVXyTF
3LF7xUqVs6JRZ74O6Mv5P1NhKbbuzo7yUKmO4smq588D4jED840BXgIg27PynSn7
7jyNfRiMwHANrnePsxqW3ndohDOfv33gGI2NQinDIT2HEtq3/rHBjVDMdgDLxfqA
IEoCYEPj6RNBjfleXiu/bh7W4AwVwqkLINoq7H6X+FzxRvCVsn+OeWNGnht5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVg+zaKR46WvK5U/k8DqJG+PF6ywwHwYDVR0j
BBgwFoAUk7gTiNnwG7Ot1njH3YLGSgP2kBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC85M0I4MTM4OEQ5RjAxQkIzQURENjc4QzdERDgyQzY0QTAzRjY5MDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQjgxMzg4RDlGMDFCQjNB
REQ2NzhDN0REODJDNjRBMDNGNjkwMTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzIzODMwMzQzYTM0NjE2MTYzM2EzMTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigESqwQMA0GCSqGSIb3DQEBCwUA
A4IBAQBznWS0O8N4hDEpPpOUUQKBQa9qO3t+B4tuDWmu5AZFQOXU8gNDpIq2Y0n+
dQ8MSzuvVkmYwEM4vItT5gjqm//r/kdFDQgk4Ge9jihismlT8Ati3I9Zrz7P1Lbd
2x4DA32gUxNgaXbhtUIAylm0Dk74sCgp4Mg+DOEvojAwz1vcJrfcLCG7vsefxfcj
Wuxe4iJ2ZMYosyIyqIWPAfwJdPDId9axiJBFAEc9kqxS2mS/uMulNN8MuStY9T/C
EU6MWJrWi0SXu+NmKdvBQQIQooLoPwLrVen2Jp+GPe9w7xJBPJRedCMQp0hOJULL
4Ja76iEd9Ve3/ligFIC4MfUdJN9e
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:37:26 2025 by rpki-client