Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a343130333a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a343130333a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          7YEyExI6gTyYjc/0ueJiFYi1qLaQTOLKhgkIYF3lIPU=
Subject key identifier:   BC:99:49:B8:F5:C3:C5:68:A9:3C:2B:7B:E8:B4:1F:92:0C:EC:AD:B3
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       0C2DC9275EDE370E02E82E6840F3AA371EB1B220
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a343130333a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:44:22 +0000
ROA not before:           Sat 01 Feb 2025 12:39:22 +0000
ROA not after:            Sat 31 Jan 2026 12:44:22 +0000
asID:                     61591
IP address blocks:        2804:231c:4103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:c9:27:5e:de:37:0e:02:e8:2e:68:40:f3:aa:37:1e:b1:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:39:22 2025 GMT
            Not After : Jan 31 12:44:22 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fc:00:08:3e:92:fa:0a:b5:be:33:46:c4:a4:
                    2b:eb:8b:f3:d2:3e:20:cb:9a:dc:e3:ad:e9:a3:21:
                    41:ec:58:a7:df:4a:6f:2f:63:91:06:8b:bc:ff:c2:
                    e9:1c:1e:e9:9c:8b:2d:22:45:b8:bc:45:ee:37:e4:
                    db:14:7b:bf:c8:d4:55:3c:dc:28:82:d3:f6:cf:e0:
                    bc:c0:c6:59:13:c6:75:7c:ab:bd:ac:ad:24:15:f4:
                    5e:99:8a:40:85:64:da:f9:8a:6e:d0:78:2e:55:f0:
                    7f:1b:03:5a:1a:06:d1:05:79:2e:bd:6f:04:db:b7:
                    99:93:90:b5:b8:08:9f:76:66:fa:3b:c7:00:63:93:
                    ff:86:ca:32:33:1a:87:c4:62:78:a1:be:56:58:70:
                    20:fe:46:d2:00:63:3d:7f:01:ae:dd:49:1b:b0:45:
                    51:e9:a3:2c:72:19:ee:3e:7b:51:da:64:f5:f8:4e:
                    65:18:0f:de:89:3f:3f:38:5e:38:86:f1:d0:a3:20:
                    f3:f6:d0:a1:9c:19:c5:1f:78:fd:67:7f:36:dc:11:
                    9e:67:2d:34:39:64:c7:84:0b:8e:f7:dd:d6:e2:d4:
                    87:fe:ac:f1:b3:ee:98:08:65:e6:8a:e9:47:3c:67:
                    1b:21:e4:00:ab:af:30:6e:84:ef:bd:56:db:87:f1:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:49:B8:F5:C3:C5:68:A9:3C:2B:7B:E8:B4:1F:92:0C:EC:AD:B3
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a343130333a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:4103::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:d4:9e:b0:24:e4:cd:33:44:aa:d4:12:c0:9c:16:74:63:
         fe:55:1a:f0:d3:6e:7e:f8:4c:e5:cf:a9:f0:fa:14:6d:6d:bb:
         32:b6:a5:a3:ce:f6:81:39:c5:d2:99:7e:ab:24:cc:b0:f6:ae:
         54:01:ce:f0:b4:a0:ab:a5:73:fd:6d:dc:b0:c7:14:ce:c6:01:
         b5:ed:e2:59:ec:17:5d:39:ca:0f:0b:60:73:7a:d6:9b:25:f2:
         7d:7b:4c:88:20:2f:9b:c9:b9:6d:0c:7c:cd:22:9c:62:b9:6b:
         92:8b:9c:6f:e5:4f:b6:16:9b:73:0b:5c:77:59:29:aa:23:62:
         4b:be:b9:40:ec:7d:50:45:35:e8:8c:42:6f:93:f6:77:ad:31:
         6d:a3:0d:ad:0b:85:9e:e0:c0:c4:6c:2c:90:e1:38:45:1f:5b:
         9e:0b:1c:fb:67:9f:e5:7a:fd:80:87:7c:89:b7:22:15:fd:6e:
         f3:06:ff:78:3d:e4:0e:ac:1c:8d:89:bc:32:84:a8:4a:31:02:
         bd:ac:39:23:1b:d6:44:b1:34:21:8b:51:a1:4d:cd:de:99:a8:
         19:46:76:af:69:0e:d1:88:6c:98:74:5a:f8:e5:90:67:af:1a:
         50:ee:9f:ca:ab:e6:39:49:b3:3f:02:c9:45:10:a2:ea:55:e5:
         3c:a2:a4:2a
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUDC3JJ17eNw4C6C5oQPOqNx6xsiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExMjM5MjJaFw0yNjAxMzExMjQ0MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRURGQzAwMDgzRTkyRkEwQUI1
QkUzMzQ2QzRBNDJCRUI4QkYzRDIzRTIwQ0I5QURDRTNBREU5QTMyMTQxRUM1OEE3
REY0QTZGMkY2MzkxMDY4QkJDRkZDMkU5MUMxRUU5OUM4QjJEMjI0NUI4QkM0NUVF
MzdFNERCMTQ3QkJGQzhENDU1M0NEQzI4ODJEM0Y2Q0ZFMEJDQzBDNjU5MTNDNjc1
N0NBQkJEQUNBRDI0MTVGNDVFOTk4QTQwODU2NERBRjk4QTZFRDA3ODJFNTVGMDdG
MUIwMzVBMUEwNkQxMDU3OTJFQkQ2RjA0REJCNzk5OTM5MEI1QjgwODlGNzY2NkZB
M0JDNzAwNjM5M0ZGODZDQTMyMzMxQTg3QzQ2Mjc4QTFCRTU2NTg3MDIwRkU0NkQy
MDA2MzNEN0YwMUFFREQ0OTFCQjA0NTUxRTlBMzJDNzIxOUVFM0U3QjUxREE2NEY1
Rjg0RTY1MTgwRkRFODkzRjNGMzg1RTM4ODZGMUQwQTMyMEYzRjZEMEExOUMxOUM1
MUY3OEZENjc3RjM2REMxMTlFNjcyRDM0Mzk2NEM3ODQwQjhFRjdEREQ2RTJENDg3
RkVBQ0YxQjNFRTk4MDg2NUU2OEFFOTQ3M0M2NzFCMjFFNDAwQUJBRjMwNkU4NEVG
QkQ1NkRCODdGMTQyQUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7fwACD6S+gq1vjNGxKQr64vz0j4gy5rc463poyFB7Fin30pvL2OR
Bou8/8LpHB7pnIstIkW4vEXuN+TbFHu/yNRVPNwogtP2z+C8wMZZE8Z1fKu9rK0k
FfRemYpAhWTa+Ypu0HguVfB/GwNaGgbRBXkuvW8E27eZk5C1uAifdmb6O8cAY5P/
hsoyMxqHxGJ4ob5WWHAg/kbSAGM9fwGu3UkbsEVR6aMschnuPntR2mT1+E5lGA/e
iT8/OF44hvHQoyDz9tChnBnFH3j9Z3823BGeZy00OWTHhAuO993W4tSH/qzxs+6Y
CGXmiulHPGcbIeQAq68wboTvvVbbh/FCqwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FLyZSbj1w8VoqTwre+i0H5IM7K2zMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzQzMTMwMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHEEDMA0GCSqGSIb3DQEBCwUAA4IBAQAy4NSesCTkzTNEqtQSwJwW
dGP+VRrw025++Ezlz6nw+hRtbbsytqWjzvaBOcXSmX6rJMyw9q5UAc7wtKCrpXP9
bdywxxTOxgG17eJZ7BddOcoPC2BzetabJfJ9e0yIIC+bybltDHzNIpxiuWuSi5xv
5U+2FptzC1x3WSmqI2JLvrlA7H1QRTXojEJvk/Z3rTFtow2tC4We4MDEbCyQ4ThF
H1ueCxz7Z5/lev2Ah3yJtyIV/W7zBv94PeQOrByNibwyhKhKMQK9rDkjG9ZEsTQh
i1GhTc3emagZRnavaQ7RiGyYdFr45ZBnrxpQ7p/Kq+Y5SbM/AslFEKLqVeU8oqQq
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:16:50 2025 by rpki-client