Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830303a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373830303a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          fVbdK/H8xg8lFFdhmV9SVUd6fS4+FN3fmht5mg+xbIM=
Subject key identifier:   54:12:3C:48:82:A5:77:BF:0C:68:BF:09:13:E2:7D:A6:D6:A6:A4:14
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       5DA178C43A3BE88525F0D5698A53747BDEECFAC6
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830303a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:35:01 +0000
ROA not before:           Sat 01 Feb 2025 18:30:01 +0000
ROA not after:            Sat 31 Jan 2026 18:35:01 +0000
asID:                     61591
IP address blocks:        2804:231c:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a1:78:c4:3a:3b:e8:85:25:f0:d5:69:8a:53:74:7b:de:ec:fa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:30:01 2025 GMT
            Not After : Jan 31 18:35:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:c4:38:f8:57:5c:9e:10:9f:05:88:4c:d9:
                    29:44:66:b2:25:a3:39:5f:51:2a:9a:4a:45:4e:dd:
                    14:9e:1f:43:ea:88:f6:b9:25:e0:a5:bb:6a:b6:de:
                    65:21:cb:e7:c1:36:a3:ec:45:ab:65:35:c7:a1:b9:
                    ae:02:3f:28:92:db:03:96:d6:6c:d3:39:92:82:07:
                    d1:1f:16:3d:90:70:33:01:dc:88:6f:b9:be:41:1c:
                    2b:a0:06:2a:58:0b:d8:33:33:82:fd:fa:9f:58:21:
                    73:0a:e8:64:ba:d1:dc:4e:db:4b:8d:72:bf:e3:8e:
                    16:db:83:ee:28:0f:d2:0b:70:bb:49:0b:69:bd:ea:
                    75:85:18:cb:af:c2:dd:94:2b:70:f5:f9:1e:74:d5:
                    3e:5d:85:e7:03:5d:ba:74:63:d1:f4:fd:f3:51:f8:
                    cf:2a:00:3b:30:a0:0c:59:eb:7f:02:cf:ba:4f:7e:
                    ec:bf:c4:43:74:b3:70:b3:1c:b9:73:b5:ff:bb:57:
                    4c:68:e4:c9:fc:dd:3a:28:68:8b:5e:17:24:d4:fb:
                    83:5e:a8:d4:8f:93:0b:ff:25:45:9e:5c:09:cb:bc:
                    1e:95:16:39:56:e4:6f:02:84:9c:7f:25:5f:67:f0:
                    5f:19:07:94:46:d7:cf:7d:db:ed:58:f2:0b:23:d7:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:12:3C:48:82:A5:77:BF:0C:68:BF:09:13:E2:7D:A6:D6:A6:A4:14
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830303a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:8a:b7:6c:49:46:72:2a:0d:95:1c:1b:69:2e:8f:d2:d0:60:
         da:8c:1f:bc:d0:aa:bb:8e:9d:f4:f1:73:bc:e6:a6:04:ce:ca:
         5c:5e:3a:76:0b:2f:81:c2:57:98:05:c2:60:63:da:6b:e1:ad:
         36:b7:1f:32:93:7d:67:3a:22:89:90:47:f2:70:b2:5f:42:86:
         dc:0f:97:b3:e9:5d:09:2a:77:42:28:04:ca:01:67:19:e5:dd:
         ff:65:9c:46:68:04:56:42:3e:c4:03:b8:f2:f2:c6:54:f8:0f:
         3d:c8:9d:3b:1b:bb:56:1c:64:5f:21:8d:ab:6b:d0:f1:93:5e:
         7b:42:db:c9:36:7a:51:ae:5a:fa:08:01:c6:c7:e5:ce:e9:c8:
         9b:4a:93:f7:d0:84:62:c4:3e:03:15:54:73:48:c8:56:0c:78:
         fc:82:2f:86:df:f3:f1:93:4d:70:f6:59:ac:76:ae:31:6c:9f:
         f3:f2:fb:e8:11:af:51:05:2b:74:3c:4b:00:d9:02:70:86:db:
         e8:79:b2:31:ac:a7:75:ab:df:58:d7:97:0f:56:0b:42:79:30:
         55:4c:5a:51:bf:9b:d8:de:4f:55:cd:09:3c:9d:82:ac:e9:18:
         03:cd:b5:e5:02:d9:a4:cf:bb:7a:e8:d5:e2:3a:32:8f:66:77:
         27:3a:cb:9a
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUXaF4xDo76IUl8NVpilN0e97s+sYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExODMwMDFaFw0yNjAxMzExODM1MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc3Q0M0MzhGODU3NUM5RTEw
OUYwNTg4NENEOTI5NDQ2NkIyMjVBMzM5NUY1MTJBOUE0QTQ1NEVERDE0OUUxRjQz
RUE4OEY2QjkyNUUwQTVCQjZBQjZERTY1MjFDQkU3QzEzNkEzRUM0NUFCNjUzNUM3
QTFCOUFFMDIzRjI4OTJEQjAzOTZENjZDRDMzOTkyODIwN0QxMUYxNjNEOTA3MDMz
MDFEQzg4NkZCOUJFNDExQzJCQTAwNjJBNTgwQkQ4MzMzMzgyRkRGQTlGNTgyMTcz
MEFFODY0QkFEMURDNEVEQjRCOEQ3MkJGRTM4RTE2REI4M0VFMjgwRkQyMEI3MEJC
NDkwQjY5QkRFQTc1ODUxOENCQUZDMkREOTQyQjcwRjVGOTFFNzRENTNFNUQ4NUU3
MDM1REJBNzQ2M0QxRjRGREYzNTFGOENGMkEwMDNCMzBBMDBDNTlFQjdGMDJDRkJB
NEY3RUVDQkZDNDQzNzRCMzcwQjMxQ0I5NzNCNUZGQkI1NzRDNjhFNEM5RkNERDNB
Mjg2ODhCNUUxNzI0RDRGQjgzNUVBOEQ0OEY5MzBCRkYyNTQ1OUU1QzA5Q0JCQzFF
OTUxNjM5NTZFNDZGMDI4NDlDN0YyNTVGNjdGMDVGMTkwNzk0NDZEN0NGN0REQkVE
NThGMjBCMjNEN0REOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx3zEOPhXXJ4QnwWITNkpRGayJaM5X1EqmkpFTt0Unh9D6oj2uSXg
pbtqtt5lIcvnwTaj7EWrZTXHobmuAj8oktsDltZs0zmSggfRHxY9kHAzAdyIb7m+
QRwroAYqWAvYMzOC/fqfWCFzCuhkutHcTttLjXK/444W24PuKA/SC3C7SQtpvep1
hRjLr8LdlCtw9fkedNU+XYXnA126dGPR9P3zUfjPKgA7MKAMWet/As+6T37sv8RD
dLNwsxy5c7X/u1dMaOTJ/N06KGiLXhck1PuDXqjUj5ML/yVFnlwJy7welRY5VuRv
AoScfyVfZ/BfGQeURtfPfdvtWPILI9fdjwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FFQSPEiCpXe/DGi/CRPifabWpqQUMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
MzczODMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHHgAMA0GCSqGSIb3DQEBCwUAA4IBAQBwirdsSUZyKg2VHBtpLo/S
0GDajB+80Kq7jp308XO85qYEzspcXjp2Cy+BwleYBcJgY9pr4a02tx8yk31nOiKJ
kEfycLJfQobcD5ez6V0JKndCKATKAWcZ5d3/ZZxGaARWQj7EA7jy8sZU+A89yJ07
G7tWHGRfIY2ra9Dxk157QtvJNnpRrlr6CAHGx+XO6cibSpP30IRixD4DFVRzSMhW
DHj8gi+G3/Pxk01w9lmsdq4xbJ/z8vvoEa9RBSt0PEsA2QJwhtvoebIxrKd1q99Y
15cPVgtCeTBVTFpRv5vY3k9VzQk8nYKs6RgDzbXlAtmkz7t66NXiOjKPZncnOsua
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:42:54 2025 by rpki-client