Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa
File:                     323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa (raw, json)
Hash identifier:          aLsDE2ba4RsKEoWngm+wOm9mDR1QuJLBhkzaj2DG+gc=
Subject key identifier:   FF:F0:77:99:54:11:9F:77:28:8E:7B:B2:2A:3F:3F:8A:E2:59:6D:2A
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       2FB9BD19E1EEBC579CC7B16DF9346F3495DE1499
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264509
IP address blocks:        2804:20b4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b9:bd:19:e1:ee:bc:57:9c:c7:b1:6d:f9:34:6f:34:95:de:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:f9:0a:6d:5a:97:e9:24:11:6b:58:7c:c9:
                    d9:09:97:83:54:75:87:54:93:2f:c6:e1:da:50:35:
                    c5:83:d6:20:63:24:bc:2c:b9:94:3a:a1:3b:f8:de:
                    f5:af:71:58:ae:bd:3c:db:cb:3b:e7:4b:00:2f:fe:
                    24:f0:bf:31:97:bf:1a:2c:64:d2:0a:3f:f3:20:05:
                    24:03:98:ba:99:15:8e:af:75:d8:ea:49:6b:a3:19:
                    e0:01:00:a5:a1:cc:f7:cb:45:6e:21:d6:04:bf:52:
                    94:2e:b5:e3:c5:c8:6a:25:6a:a7:f3:ee:9e:ac:25:
                    0f:97:66:42:16:05:41:91:00:78:b1:ef:2a:79:49:
                    25:de:c8:1c:43:3d:9b:64:e1:c2:f4:7d:a1:ba:27:
                    ec:19:1a:5c:73:ec:20:af:37:70:2c:2b:50:e3:48:
                    91:68:7e:d9:5a:c6:b4:a1:d5:df:16:e9:02:e0:7b:
                    79:80:dc:64:82:d8:0e:81:78:3a:0a:e5:46:3c:aa:
                    fa:1d:2d:f3:30:03:9a:45:68:87:e0:26:12:9c:6c:
                    db:ff:4f:b1:16:de:c8:34:a5:5a:60:04:90:d1:3c:
                    c5:2b:f1:7b:c2:bf:de:d2:34:b2:97:0d:5b:18:d0:
                    33:b3:53:da:d4:e4:70:ba:57:8c:28:d6:51:2f:b3:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F0:77:99:54:11:9F:77:28:8E:7B:B2:2A:3F:3F:8A:E2:59:6D:2A
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a633030303a3a2f33342d3334203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:23:3a:08:ff:b6:ae:fd:7f:02:fe:95:8a:d1:c7:d3:5e:b9:
         ef:b6:04:aa:4b:5d:74:b1:f8:a4:0c:fd:c4:3b:1c:8d:02:b8:
         ee:1d:1e:ed:43:2d:43:af:81:06:11:61:be:ae:d1:cb:ae:5c:
         ed:e2:da:a8:2b:07:03:aa:6f:a9:a7:78:e8:64:7b:30:42:b8:
         b8:8c:ed:66:9a:37:8c:39:15:ac:1d:35:9c:8f:3a:df:ab:6e:
         0b:fd:2a:6e:ee:5f:17:f0:04:43:6b:34:9e:65:89:78:07:37:
         61:41:c7:78:9b:9a:71:79:e7:82:d5:d7:7f:4f:04:19:26:7e:
         da:e9:7c:d0:94:dc:08:40:02:74:4b:d3:2d:6f:2e:7c:46:ae:
         82:cc:ef:ee:8d:bf:b5:ff:fd:54:ae:da:7e:f2:33:9b:1b:34:
         05:99:a7:85:db:56:95:5e:91:8e:dd:c6:6d:1e:af:a0:19:5a:
         ce:c7:46:41:92:3f:56:ef:29:25:64:f8:00:bf:9c:57:8d:99:
         1d:38:62:5e:83:5a:ec:b9:29:8e:ff:de:a5:75:e4:29:83:5d:
         bd:2f:c7:56:d9:01:61:75:36:9c:9c:21:d5:97:c6:c0:e1:8f:
         0f:d0:94:b9:ec:17:81:6f:20:4c:97:ee:1b:75:9c:ae:36:65:
         d5:1d:85:db
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUL7m9GeHuvFecx7Ft+TRvNJXeFJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RkMyNzY3OUM1QzU4RDFBMTkwNDg3NEUzNTAwMEI3
NEM3MUU3ODAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU0MEY5MEE2RDVBOTdFOTI0
MTE2QjU4N0NDOUQ5MDk5NzgzNTQ3NTg3NTQ5MzJGQzZFMURBNTAzNUM1ODNENjIw
NjMyNEJDMkNCOTk0M0FBMTNCRjhERUY1QUY3MTU4QUVCRDNDREJDQjNCRTc0QjAw
MkZGRTI0RjBCRjMxOTdCRjFBMkM2NEQyMEEzRkYzMjAwNTI0MDM5OEJBOTkxNThF
QUY3NUQ4RUE0OTZCQTMxOUUwMDEwMEE1QTFDQ0Y3Q0I0NTZFMjFENjA0QkY1Mjk0
MkVCNUUzQzVDODZBMjU2QUE3RjNFRTlFQUMyNTBGOTc2NjQyMTYwNTQxOTEwMDc4
QjFFRjJBNzk0OTI1REVDODFDNDMzRDlCNjRFMUMyRjQ3REExQkEyN0VDMTkxQTVD
NzNFQzIwQUYzNzcwMkMyQjUwRTM0ODkxNjg3RUQ5NUFDNkI0QTFENURGMTZFOTAy
RTA3Qjc5ODBEQzY0ODJEODBFODE3ODNBMEFFNTQ2M0NBQUZBMUQyREYzMzAwMzlB
NDU2ODg3RTAyNjEyOUM2Q0RCRkY0RkIxMTZERUM4MzRBNTVBNjAwNDkwRDEzQ0M1
MkJGMTdCQzJCRkRFRDIzNEIyOTcwRDVCMThEMDMzQjM1M0RBRDRFNDcwQkE1NzhD
MjhENjUxMkZCM0YxMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvkD5Cm1al+kkEWtYfMnZCZeDVHWHVJMvxuHaUDXFg9YgYyS8LLmU
OqE7+N71r3FYrr0828s750sAL/4k8L8xl78aLGTSCj/zIAUkA5i6mRWOr3XY6klr
oxngAQClocz3y0VuIdYEv1KULrXjxchqJWqn8+6erCUPl2ZCFgVBkQB4se8qeUkl
3sgcQz2bZOHC9H2huifsGRpcc+wgrzdwLCtQ40iRaH7ZWsa0odXfFukC4Ht5gNxk
gtgOgXg6CuVGPKr6HS3zMAOaRWiH4CYSnGzb/0+xFt7INKVaYASQ0TzFK/F7wr/e
0jSylw1bGNAzs1Pa1ORwuleMKNZRL7PxNQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FP/wd5lUEZ93KI57sio/P4riWW0qMB8GA1UdIwQYMBaAFMZ/wnZ5xcWNGhkEh041
AAt0xx54MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNHNGU1c1VzQnIyQUhT
dzd3Z05TaW5WeHdXeHFuUW9aQmo2Nnh4NGtCWW1DLzEvQzY3RkMyNzY3OUM1QzU4
RDFBMTkwNDg3NEUzNTAwMEI3NEM3MUU3OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DNjdGQzI3Njc5QzVDNThEMUExOTA0ODc0RTM1MDAwQjc0Qzcx
RTc4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRzRlNXNVc0JyMkFIU3c3d2dO
U2luVnh3V3hxblFvWkJqNjZ4eDRrQlltQy8xLzMyMzgzMDM0M2EzMjMwNjIzNDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBCC0wDANBgkqhkiG9w0BAQsFAAOCAQEACyM6CP+2rv1/Av6VitHH
016577YEqktddLH4pAz9xDscjQK47h0e7UMtQ6+BBhFhvq7Ry65c7eLaqCsHA6pv
qad46GR7MEK4uIztZpo3jDkVrB01nI8636tuC/0qbu5fF/AEQ2s0nmWJeAc3YUHH
eJuacXnngtXXf08EGSZ+2ul80JTcCEACdEvTLW8ufEaugszv7o2/tf/9VK7afvIz
mxs0BZmnhdtWlV6Rjt3GbR6voBlazsdGQZI/Vu8pJWT4AL+cV42ZHThiXoNa7Lkp
jv/epXXkKYNdvS/HVtkBYXU2nJwh1ZfGwOGPD9CUuewXgW8gTJfuG3WcrjZl1R2F
2w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:51 2025 by rpki-client