Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430343a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373430343a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          qI6LynwznA5dROmC6md2ktjilCgzS1O+i1z0IEKPWeQ=
Subject key identifier:   31:A7:D0:44:48:A4:E4:83:8F:B7:D0:63:F6:6F:B3:CC:05:4A:D6:A8
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       759D837F8E7E45AF1F8D92BD1243B642B11A5AA5
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430343a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:46:35 +0000
ROA not before:           Sat 01 Feb 2025 12:41:35 +0000
ROA not after:            Sat 31 Jan 2026 12:46:35 +0000
asID:                     61591
IP address blocks:        2804:231c:7404::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9d:83:7f:8e:7e:45:af:1f:8d:92:bd:12:43:b6:42:b1:1a:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:41:35 2025 GMT
            Not After : Jan 31 12:46:35 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:28:98:b4:f1:8b:f0:6b:b5:91:03:4e:fc:
                    29:c9:aa:0e:13:a9:dd:cb:31:ab:b5:a8:b1:ba:11:
                    57:97:24:9b:f2:be:1e:11:08:0d:08:1a:aa:8c:b0:
                    de:9a:32:58:ed:8a:19:c3:40:85:40:b2:25:5c:4d:
                    50:40:d1:10:d8:e0:86:b9:da:f1:fc:d3:08:f5:28:
                    e4:d4:95:40:70:5f:7f:36:c6:e4:7d:11:fa:b5:6d:
                    92:62:37:64:c2:c1:3b:2e:ee:b1:e6:f4:47:7d:ad:
                    75:35:ea:a5:53:32:3c:47:e9:e3:96:d4:91:23:e6:
                    e3:78:66:6e:c8:d1:d0:55:90:5b:7a:9e:6d:4d:d0:
                    e5:0c:2d:7f:56:09:0e:72:c0:75:84:b0:3a:39:20:
                    65:79:0c:e9:0f:88:d4:6b:67:d4:82:3c:e1:bf:e7:
                    e4:93:5d:94:5b:f5:43:99:c1:12:a5:2c:c7:fd:fa:
                    ec:c0:57:17:a8:3e:6c:6a:83:9d:e7:c0:98:8a:1e:
                    88:ac:32:82:ce:25:7a:1b:b9:80:90:ce:c2:06:72:
                    c3:9a:f1:3e:2a:10:01:28:7c:8e:e0:b4:53:59:0f:
                    74:fc:d5:b9:d1:63:49:31:f2:48:23:4b:90:36:17:
                    f4:d4:ec:22:b5:c9:64:fd:3e:ea:fe:a6:97:25:ad:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A7:D0:44:48:A4:E4:83:8F:B7:D0:63:F6:6F:B3:CC:05:4A:D6:A8
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373430343a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7404::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:92:13:9f:96:c4:d9:d8:ae:1a:88:1c:90:79:5b:86:9c:
         65:3a:09:04:e5:43:73:55:80:39:c7:da:b7:4b:a3:e5:b3:df:
         33:9f:27:a2:f0:e6:45:99:e6:cd:c1:ea:c2:9a:7e:29:5a:fb:
         eb:a7:9e:36:13:5d:23:17:38:86:c3:47:96:41:4a:4b:60:28:
         d7:d2:18:06:b5:1e:3b:55:29:1c:fe:f4:77:23:60:21:4e:65:
         0e:83:e9:76:93:a9:4a:57:1d:a0:89:41:39:a8:2a:93:b3:2c:
         bc:1b:e8:fe:68:32:93:71:c2:ba:fb:69:3f:5d:d6:d6:68:fa:
         7e:a7:03:2e:f0:57:15:f8:a7:df:ce:6c:72:ea:28:4f:72:57:
         e2:ac:60:ca:33:9a:93:a9:8a:fc:1b:d0:9f:27:f5:74:8b:4c:
         94:71:7b:90:2c:55:6b:36:42:cb:4a:4e:c6:28:79:2f:96:ea:
         8d:82:7f:1f:bb:cd:fa:f6:d3:14:ed:27:d5:c6:c8:60:12:7e:
         47:f0:58:61:bc:3b:c0:8d:d9:2a:29:42:49:2c:ff:b8:fc:d8:
         08:df:05:f0:46:c1:53:e8:96:4f:49:06:82:51:7d:69:f9:2c:
         27:40:79:91:14:d5:8c:59:2c:72:86:bf:4d:36:01:b6:05:62:
         2c:7e:01:6b
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUdZ2Df45+Ra8fjZK9EkO2QrEaWqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExMjQxMzVaFw0yNjAxMzExMjQ2MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkIyMDI4OThCNEYxOEJGMDZC
QjU5MTAzNEVGQzI5QzlBQTBFMTNBOUREQ0IzMUFCQjVBOEIxQkExMTU3OTcyNDlC
RjJCRTFFMTEwODBEMDgxQUFBOENCMERFOUEzMjU4RUQ4QTE5QzM0MDg1NDBCMjI1
NUM0RDUwNDBEMTEwRDhFMDg2QjlEQUYxRkNEMzA4RjUyOEU0RDQ5NTQwNzA1RjdG
MzZDNkU0N0QxMUZBQjU2RDkyNjIzNzY0QzJDMTNCMkVFRUIxRTZGNDQ3N0RBRDc1
MzVFQUE1NTMzMjNDNDdFOUUzOTZENDkxMjNFNkUzNzg2NjZFQzhEMUQwNTU5MDVC
N0E5RTZENEREMEU1MEMyRDdGNTYwOTBFNzJDMDc1ODRCMDNBMzkyMDY1NzkwQ0U5
MEY4OEQ0NkI2N0Q0ODIzQ0UxQkZFN0U0OTM1RDk0NUJGNTQzOTlDMTEyQTUyQ0M3
RkRGQUVDQzA1NzE3QTgzRTZDNkE4MzlERTdDMDk4OEExRTg4QUMzMjgyQ0UyNTdB
MUJCOTgwOTBDRUMyMDY3MkMzOUFGMTNFMkExMDAxMjg3QzhFRTBCNDUzNTkwRjc0
RkNENUI5RDE2MzQ5MzFGMjQ4MjM0QjkwMzYxN0Y0RDRFQzIyQjVDOTY0RkQzRUVB
RkVBNjk3MjVBREIxMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuyAomLTxi/BrtZEDTvwpyaoOE6ndyzGrtaixuhFXlySb8r4eEQgN
CBqqjLDemjJY7YoZw0CFQLIlXE1QQNEQ2OCGudrx/NMI9Sjk1JVAcF9/NsbkfRH6
tW2SYjdkwsE7Lu6x5vRHfa11NeqlUzI8R+njltSRI+bjeGZuyNHQVZBbep5tTdDl
DC1/VgkOcsB1hLA6OSBleQzpD4jUa2fUgjzhv+fkk12UW/VDmcESpSzH/frswFcX
qD5saoOd58CYih6IrDKCziV6G7mAkM7CBnLDmvE+KhABKHyO4LRTWQ90/NW50WNJ
MfJII0uQNhf01Owitclk/T7q/qaXJa2xIQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FDGn0ERIpOSDj7fQY/Zvs8wFStaoMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzczNDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHHQEMA0GCSqGSIb3DQEBCwUAA4IBAQCcm5ITn5bE2diuGogckHlb
hpxlOgkE5UNzVYA5x9q3S6Pls98znyei8OZFmebNwerCmn4pWvvrp542E10jFziG
w0eWQUpLYCjX0hgGtR47VSkc/vR3I2AhTmUOg+l2k6lKVx2giUE5qCqTsyy8G+j+
aDKTccK6+2k/XdbWaPp+pwMu8FcV+Kffzmxy6ihPclfirGDKM5qTqYr8G9CfJ/V0
i0yUcXuQLFVrNkLLSk7GKHkvluqNgn8fu8369tMU7SfVxshgEn5H8FhhvDvAjdkq
KUJJLP+4/NgI3wXwRsFT6JZPSQaCUX1p+SwnQHmRFNWMWSxyhr9NNgG2BWIsfgFr
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:18:29 2025 by rpki-client