Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653439393a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a653439393a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          w8ddEwJ6+A4xEPrVKlWMcSR2bX3DK/4XAGrQsWkbhTs=
Subject key identifier:   C7:0F:2C:54:83:5B:47:13:4C:89:B6:4A:25:77:C9:9D:B2:C0:6B:47
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       789F9C37C5F1C6A6D6134C5C504764EF021A4259
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653439393a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:48:50 +0000
ROA not before:           Sat 01 Feb 2025 18:43:50 +0000
ROA not after:            Sat 31 Jan 2026 18:48:50 +0000
asID:                     61591
IP address blocks:        2804:231c:e499::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9f:9c:37:c5:f1:c6:a6:d6:13:4c:5c:50:47:64:ef:02:1a:42:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:43:50 2025 GMT
            Not After : Jan 31 18:48:50 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:66:1c:37:3a:da:68:f7:f2:8d:37:f7:9a:
                    bc:ac:4e:40:19:f4:4e:eb:de:61:1c:86:84:ce:83:
                    c2:f5:fd:ab:40:ad:b3:68:6d:bd:e4:91:c9:c2:23:
                    97:c1:72:61:96:96:37:ca:f9:26:8f:18:9b:ff:3b:
                    60:d8:19:e6:25:da:c5:03:d7:6e:75:bd:b0:2c:5c:
                    88:61:08:2d:48:4b:26:cc:07:47:a9:db:73:64:4e:
                    ff:6d:70:a9:46:9c:16:71:7e:9f:5c:0b:c2:55:9f:
                    4b:a6:27:fa:be:15:65:17:fa:e0:ee:f0:87:f8:50:
                    f5:71:f4:bf:f6:db:49:ee:5a:49:16:cb:f9:91:ec:
                    43:92:2b:07:27:80:f5:d1:23:6b:ec:18:59:c9:16:
                    89:5c:c5:5d:6f:d9:37:86:a4:3d:9b:2e:ce:88:25:
                    a4:76:0b:9c:d5:d2:eb:fc:45:aa:23:0d:5e:d3:cb:
                    c5:1b:97:ce:78:9f:7e:42:b7:37:6c:fc:54:74:46:
                    da:15:2f:77:17:00:95:2d:6c:31:0f:04:0c:8f:66:
                    be:56:69:50:35:1b:93:db:69:30:98:e6:50:96:9e:
                    f4:80:b4:2b:02:a9:3d:5b:db:47:a4:42:9e:78:82:
                    c8:d2:bb:c4:25:3c:16:29:07:3d:f7:81:d6:52:bc:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:2C:54:83:5B:47:13:4C:89:B6:4A:25:77:C9:9D:B2:C0:6B:47
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653439393a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:e499::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:db:77:0f:20:4e:fd:25:b1:03:d4:8f:f3:31:2d:e3:98:
         ad:89:73:9b:d4:7a:ce:3f:3a:30:09:10:d9:12:aa:8d:87:9f:
         fd:f4:f3:28:33:c4:f9:60:86:a8:73:ca:82:e9:8f:57:5d:59:
         46:a9:b4:5c:5a:2d:22:24:bb:88:8f:72:5d:26:c9:07:3e:a5:
         14:c6:f0:92:91:8f:d3:84:85:f2:3e:dd:74:09:61:20:83:06:
         fd:87:23:05:54:01:0b:cd:b9:f5:44:c5:da:66:c1:fc:50:d5:
         0b:fe:0d:4b:35:de:46:ea:f4:23:5e:33:d2:30:95:89:07:51:
         12:a6:45:ac:fd:73:74:11:23:30:98:fa:65:a4:11:3d:82:c3:
         b8:99:b6:06:78:8f:7c:6b:64:a0:6b:c5:2a:dd:f7:9f:d4:f9:
         fb:db:78:77:c8:ce:9e:63:2d:68:db:76:fe:1f:59:fb:51:8c:
         00:e2:b4:b8:3a:1e:38:96:60:a7:e7:b6:a6:0c:b4:0f:21:ab:
         f7:53:d6:17:21:06:f3:37:fc:d2:5c:3a:87:f0:14:0b:0b:ba:
         e2:01:a5:98:bb:49:7f:90:d8:e5:24:a1:74:24:a6:c2:58:76:
         8a:f5:64:23:2e:33:b0:50:f8:05:01:d9:3a:1e:d0:bc:d8:75:
         c0:18:2b:06
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUeJ+cN8XxxqbWE0xcUEdk7wIaQlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ0OTBGRDU5MTkzMjc3NkYyRjVGNkNGQjNDNTQzMTU1
MEEwNEY2MjAeFw0yNTAyMDExODQzNTBaFw0yNjAxMzExODQ4NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI0NjY2MUMzNzNBREE2OEY3
RjI4RDM3Rjc5QUJDQUM0RTQwMTlGNDRFRUJERTYxMUM4Njg0Q0U4M0MyRjVGREFC
NDBBREIzNjg2REJERTQ5MUM5QzIyMzk3QzE3MjYxOTY5NjM3Q0FGOTI2OEYxODlC
RkYzQjYwRDgxOUU2MjVEQUM1MDNENzZFNzVCREIwMkM1Qzg4NjEwODJENDg0QjI2
Q0MwNzQ3QTlEQjczNjQ0RUZGNkQ3MEE5NDY5QzE2NzE3RTlGNUMwQkMyNTU5RjRC
QTYyN0ZBQkUxNTY1MTdGQUUwRUVGMDg3Rjg1MEY1NzFGNEJGRjZEQjQ5RUU1QTQ5
MTZDQkY5OTFFQzQzOTIyQjA3Mjc4MEY1RDEyMzZCRUMxODU5QzkxNjg5NUNDNTVE
NkZEOTM3ODZBNDNEOUIyRUNFODgyNUE0NzYwQjlDRDVEMkVCRkM0NUFBMjMwRDVF
RDNDQkM1MUI5N0NFNzg5RjdFNDJCNzM3NkNGQzU0NzQ0NkRBMTUyRjc3MTcwMDk1
MkQ2QzMxMEYwNDBDOEY2NkJFNTY2OTUwMzUxQjkzREI2OTMwOThFNjUwOTY5RUY0
ODBCNDJCMDJBOTNENUJEQjQ3QTQ0MjlFNzg4MkM4RDJCQkM0MjUzQzE2MjkwNzNE
Rjc4MUQ2NTJCQzgzNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAskZmHDc62mj38o0395q8rE5AGfRO695hHIaEzoPC9f2rQK2zaG29
5JHJwiOXwXJhlpY3yvkmjxib/ztg2BnmJdrFA9dudb2wLFyIYQgtSEsmzAdHqdtz
ZE7/bXCpRpwWcX6fXAvCVZ9Lpif6vhVlF/rg7vCH+FD1cfS/9ttJ7lpJFsv5kexD
kisHJ4D10SNr7BhZyRaJXMVdb9k3hqQ9my7OiCWkdguc1dLr/EWqIw1e08vFG5fO
eJ9+Qrc3bPxUdEbaFS93FwCVLWwxDwQMj2a+VmlQNRuT22kwmOZQlp70gLQrAqk9
W9tHpEKeeILI0rvEJTwWKQc994HWUryDSwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FMcPLFSDW0cTTIm2SiV3yZ2ywGtHMB8GA1UdIwQYMBaAFBRJD9WRkyd28vX2z7PF
QxVQoE9iMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzEvMTQ0OTBGRDU5MTkzMjc3
NkYyRjVGNkNGQjNDNTQzMTU1MEEwNEY2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDQ5MEZENTkxOTMyNzc2RjJGNUY2Q0ZCM0M1NDMxNTUwQTA0
RjYyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8xLzMyMzgzMDM0M2EzMjMzMzE2MzNh
NjUzNDM5MzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMxMzUzOTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQjHOSZMA0GCSqGSIb3DQEBCwUAA4IBAQAbJ9t3DyBO/SWxA9SP8zEt
45itiXOb1HrOPzowCRDZEqqNh5/99PMoM8T5YIaoc8qC6Y9XXVlGqbRcWi0iJLuI
j3JdJskHPqUUxvCSkY/ThIXyPt10CWEggwb9hyMFVAELzbn1RMXaZsH8UNUL/g1L
Nd5G6vQjXjPSMJWJB1ESpkWs/XN0ESMwmPplpBE9gsO4mbYGeI98a2Sga8Uq3fef
1Pn723h3yM6eYy1o23b+H1n7UYwA4rS4Oh44lmCn57amDLQPIav3U9YXIQbzN/zS
XDqH8BQLC7riAaWYu0l/kNjlJKF0JKbCWHaK9WQjLjOwUPgFAdk6HtC82HXAGCsG
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:54 2025 by rpki-client