Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          hoAxX3AlnZN/SsEu3gaxSKCNidGoci4+A3zARy3oZ5Y=
Subject key identifier:   19:35:2A:CE:2C:BE:13:8E:55:9F:34:9D:2D:AF:59:30:6D:56:B2:D6
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       35224369806E37B32AA32698344E482D7E51E2FC
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:46:20 +0000
ROA not before:           Sat 01 Feb 2025 12:41:20 +0000
ROA not after:            Sat 31 Jan 2026 12:46:20 +0000
asID:                     61591
IP address blocks:        2804:231c:7403::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:22:43:69:80:6e:37:b3:2a:a3:26:98:34:4e:48:2d:7e:51:e2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:41:20 2025 GMT
            Not After : Jan 31 12:46:20 2026 GMT
        Subject: CN=3082010A0282010100C9201C5FFC82F3CA7F30A444E49F21E30C86A78076F074CFE857B3C2E6535EC151FBE232519DBC55AC17719FA32D12B41E48C7A2B48D245C798CF0285D48FF36CE86C123DCB4E516DE22BF4914B6CCEE2BCCCC3FE1662FCBC8860C3AB1366D2E01DB046198E3AB060D63E20FF12F15C41B61B27BBB05D97A8010646DE9357670D3762FEE81FE455AD7A7D7C20CF4723DD68789C538FD19E2A30A590E1AD9087AB17C828A8513CC13ABA03831692DC1ADA6B45D37AD0554E5F25D968764F2FFFA4EBCAD954E8719211FCC9B1E4AF9DE64A523155AFC383C45D4180F58EAD2BD97043C721D7D903A810B496F84C0D15B83A7A1387A2EBAEE93A639023DD55FB6430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:1c:5f:fc:82:f3:ca:7f:30:a4:44:e4:9f:
                    21:e3:0c:86:a7:80:76:f0:74:cf:e8:57:b3:c2:e6:
                    53:5e:c1:51:fb:e2:32:51:9d:bc:55:ac:17:71:9f:
                    a3:2d:12:b4:1e:48:c7:a2:b4:8d:24:5c:79:8c:f0:
                    28:5d:48:ff:36:ce:86:c1:23:dc:b4:e5:16:de:22:
                    bf:49:14:b6:cc:ee:2b:cc:cc:3f:e1:66:2f:cb:c8:
                    86:0c:3a:b1:36:6d:2e:01:db:04:61:98:e3:ab:06:
                    0d:63:e2:0f:f1:2f:15:c4:1b:61:b2:7b:bb:05:d9:
                    7a:80:10:64:6d:e9:35:76:70:d3:76:2f:ee:81:fe:
                    45:5a:d7:a7:d7:c2:0c:f4:72:3d:d6:87:89:c5:38:
                    fd:19:e2:a3:0a:59:0e:1a:d9:08:7a:b1:7c:82:8a:
                    85:13:cc:13:ab:a0:38:31:69:2d:c1:ad:a6:b4:5d:
                    37:ad:05:54:e5:f2:5d:96:87:64:f2:ff:fa:4e:bc:
                    ad:95:4e:87:19:21:1f:cc:9b:1e:4a:f9:de:64:a5:
                    23:15:5a:fc:38:3c:45:d4:18:0f:58:ea:d2:bd:97:
                    04:3c:72:1d:7d:90:3a:81:0b:49:6f:84:c0:d1:5b:
                    83:a7:a1:38:7a:2e:ba:ee:93:a6:39:02:3d:d5:5f:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:35:2A:CE:2C:BE:13:8E:55:9F:34:9D:2D:AF:59:30:6D:56:B2:D6
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430333a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7403::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d1:52:ed:da:5d:4b:88:d5:94:bc:cc:9d:f5:3e:b2:96:f3:
         88:be:14:66:47:0d:fc:19:16:eb:da:71:4c:0d:ed:26:0b:ac:
         8a:1f:05:97:2c:b4:56:cf:6c:bd:55:b9:68:ca:4a:ea:c4:81:
         ca:f7:8b:20:17:ad:2c:4c:dd:07:51:fd:76:9a:d3:90:9c:18:
         2e:0e:f0:e5:0e:27:a4:a3:14:c1:db:81:6c:1f:08:31:59:38:
         de:bd:cd:5e:0c:87:80:8e:b7:bb:41:f1:85:9b:66:1e:b5:f1:
         6b:c1:83:8c:d9:fa:8c:84:8b:bb:ef:db:bc:ec:f6:e4:a0:5e:
         21:66:ed:39:f0:77:57:82:7c:f6:cf:be:4f:3d:8a:9f:c5:25:
         48:9a:ef:48:7a:e6:2f:e6:b1:09:8c:e3:6f:2c:aa:68:c2:27:
         53:f1:f7:44:20:5d:5b:6a:46:11:de:fa:1c:9a:11:f2:fe:d0:
         61:58:0e:c7:72:9e:8f:3f:d1:fa:10:5b:c2:e1:72:0d:db:69:
         3c:25:ec:82:16:78:26:04:cc:71:08:d8:1c:8d:40:09:97:38:
         03:8d:89:9f:14:5b:32:ba:5b:79:f5:d7:ce:00:84:3e:aa:17:
         ae:85:d2:ff:e0:62:91:ea:e6:68:b7:29:49:0b:be:ac:4d:50:
         08:fc:27:37
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUNSJDaYBuN7MqoyaYNE5ILX5R4vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExMjQxMjBaFw0yNjAxMzExMjQ2MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkyMDFDNUZGQzgyRjNDQTdG
MzBBNDQ0RTQ5RjIxRTMwQzg2QTc4MDc2RjA3NENGRTg1N0IzQzJFNjUzNUVDMTUx
RkJFMjMyNTE5REJDNTVBQzE3NzE5RkEzMkQxMkI0MUU0OEM3QTJCNDhEMjQ1Qzc5
OENGMDI4NUQ0OEZGMzZDRTg2QzEyM0RDQjRFNTE2REUyMkJGNDkxNEI2Q0NFRTJC
Q0NDQzNGRTE2NjJGQ0JDODg2MEMzQUIxMzY2RDJFMDFEQjA0NjE5OEUzQUIwNjBE
NjNFMjBGRjEyRjE1QzQxQjYxQjI3QkJCMDVEOTdBODAxMDY0NkRFOTM1NzY3MEQz
NzYyRkVFODFGRTQ1NUFEN0E3RDdDMjBDRjQ3MjNERDY4Nzg5QzUzOEZEMTlFMkEz
MEE1OTBFMUFEOTA4N0FCMTdDODI4QTg1MTNDQzEzQUJBMDM4MzE2OTJEQzFBREE2
QjQ1RDM3QUQwNTU0RTVGMjVEOTY4NzY0RjJGRkZBNEVCQ0FEOTU0RTg3MTkyMTFG
Q0M5QjFFNEFGOURFNjRBNTIzMTU1QUZDMzgzQzQ1RDQxODBGNThFQUQyQkQ5NzA0
M0M3MjFEN0Q5MDNBODEwQjQ5NkY4NEMwRDE1QjgzQTdBMTM4N0EyRUJBRUU5M0E2
MzkwMjNERDU1RkI2NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAySAcX/yC88p/MKRE5J8h4wyGp4B28HTP6FezwuZTXsFR++IyUZ28
VawXcZ+jLRK0HkjHorSNJFx5jPAoXUj/Ns6GwSPctOUW3iK/SRS2zO4rzMw/4WYv
y8iGDDqxNm0uAdsEYZjjqwYNY+IP8S8VxBthsnu7Bdl6gBBkbek1dnDTdi/ugf5F
Wten18IM9HI91oeJxTj9GeKjClkOGtkIerF8goqFE8wTq6A4MWktwa2mtF03rQVU
5fJdlodk8v/6TrytlU6HGSEfzJseSvneZKUjFVr8ODxF1BgPWOrSvZcEPHIdfZA6
gQtJb4TA0VuDp6E4ei667pOmOQI91V+2QwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FBk1Ks4svhOOVZ80nS2vWTBtVrLWMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzczNDMwMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHHQDMA0GCSqGSIb3DQEBCwUAA4IBAQB40VLt2l1LiNWUvMyd9T6y
lvOIvhRmRw38GRbr2nFMDe0mC6yKHwWXLLRWz2y9VbloykrqxIHK94sgF60sTN0H
Uf12mtOQnBguDvDlDiekoxTB24FsHwgxWTjevc1eDIeAjre7QfGFm2YetfFrwYOM
2fqMhIu779u87PbkoF4hZu058HdXgnz2z75PPYqfxSVImu9IeuYv5rEJjONvLKpo
widT8fdEIF1bakYR3vocmhHy/tBhWA7Hcp6PP9H6EFvC4XIN22k8JeyCFngmBMxx
CNgcjUAJlzgDjYmfFFsyult59dfOAIQ+qheuhdL/4GKR6uZotylJC76sTVAI/Cc3
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:19:04 2025 by rpki-client