Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa
File:                     323830343a313839383a3a2f33322d3430203d3e203631393432.roa (raw, json)
Hash identifier:          /8UP2mvLRwt8Etr1Lfb8CWcz60KdHvt3HdqSTBA4hEs=
Subject key identifier:   3D:CB:6F:B5:BD:BB:02:19:A3:03:76:00:9D:CA:E0:45:A9:B7:C6:42
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       740CE63559E4E4ADBECA43D4996EDD63F0F449A1
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa
Signing time:             Mon 24 Mar 2025 15:02:32 +0000
ROA not before:           Mon 24 Mar 2025 14:57:32 +0000
ROA not after:            Mon 23 Mar 2026 15:02:32 +0000
asID:                     61942
IP address blocks:        2804:1898::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0c:e6:35:59:e4:e4:ad:be:ca:43:d4:99:6e:dd:63:f0:f4:49:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar 24 14:57:32 2025 GMT
            Not After : Mar 23 15:02:32 2026 GMT
        Subject: CN=3DCB6FB5BDBB0219A30376009DCAE045A9B7C642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:52:e1:d4:42:8f:3a:a8:c2:9d:4d:57:9b:
                    b3:49:6e:ad:7b:e1:79:97:c3:60:65:3a:41:6d:0d:
                    25:1e:6c:2a:56:28:c8:b0:d0:cd:31:a0:03:6c:f6:
                    46:cb:03:00:16:22:04:ea:de:a7:df:54:6f:e6:92:
                    62:ec:3e:fb:e9:50:22:13:52:1c:66:ed:b8:4a:b6:
                    cc:96:b6:e3:a1:f7:ce:48:49:54:4b:17:3c:ef:40:
                    e7:f0:f0:90:99:28:8f:c6:8a:5a:d1:f3:f5:05:ed:
                    3e:7e:6e:e3:87:f6:66:b6:ce:78:4a:10:c5:b1:b5:
                    74:39:ae:51:ff:c0:20:f6:5f:9c:fe:b6:c5:61:30:
                    4b:25:39:75:8c:02:18:67:1b:8f:1e:68:a1:93:cf:
                    29:fb:4b:2c:ef:3b:01:96:0f:14:27:b1:e8:7c:50:
                    76:bf:c2:7e:22:a4:df:0d:78:aa:0e:ed:13:b2:68:
                    45:49:c2:ac:1c:39:85:4d:02:a0:14:73:72:4e:cc:
                    05:28:9e:24:a6:ce:ad:ba:92:1e:65:c6:83:89:98:
                    27:99:db:5e:26:6d:93:f4:47:2e:6b:37:80:2b:20:
                    0c:34:fb:27:5b:d8:93:66:bc:25:79:9a:fa:2d:02:
                    5c:eb:b1:04:1d:84:c3:8f:12:94:d9:6c:47:f1:cd:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:6F:B5:BD:BB:02:19:A3:03:76:00:9D:CA:E0:45:A9:B7:C6:42
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/323830343a313839383a3a2f33322d3430203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1898::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:32:f4:aa:54:d9:a6:37:6d:a7:88:0c:49:97:b5:ad:c6:
         3a:c2:0a:1c:71:b5:f1:3e:13:b8:34:39:9a:5a:2a:2e:2e:0d:
         e0:78:4f:6f:bb:fa:05:dd:70:1c:e5:6a:b2:90:44:92:58:6f:
         91:c1:14:52:e9:90:c2:ee:f2:1b:82:d9:9b:e6:20:12:42:71:
         95:0c:5d:26:0d:41:6c:92:47:ea:f8:5d:ff:e8:b1:36:c3:b5:
         20:f5:99:72:62:f8:2c:59:20:c8:a6:0a:df:7d:d9:85:f5:f4:
         11:9b:c2:87:f5:67:1f:82:c0:d0:ad:cf:83:20:19:8e:2a:25:
         3d:df:cc:cd:5b:ef:50:33:8b:b0:dd:63:61:9d:0b:bf:89:5e:
         77:65:8e:81:87:47:68:14:5b:ab:65:aa:c1:f3:bb:6a:be:bd:
         55:f1:24:e7:7c:b1:6c:c8:d7:a4:51:7e:66:67:ab:b4:e6:ba:
         7f:b5:e8:b6:9c:8c:ba:4a:f6:cf:3e:3a:cb:cb:3d:b1:54:1e:
         bd:11:a1:03:a8:9a:ab:76:6f:58:03:51:81:86:8e:a8:13:c0:
         47:04:1d:b1:13:53:f2:1b:7b:ea:56:ae:f5:57:10:26:b6:d7:
         cd:df:8f:7c:e0:28:e9:b3:e8:f2:ba:c3:23:91:02:66:20:a1:
         07:4b:84:6d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdAzmNVnk5K2+ykPUmW7dY/D0SaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDOEVBQzdGMUY1QTIxNjgyNEIzNzExODY5Nzc0ODgy
NUYzMTREOTAeFw0yNTAzMjQxNDU3MzJaFw0yNjAzMjMxNTAyMzJaMDMxMTAvBgNV
BAMTKDNEQ0I2RkI1QkRCQjAyMTlBMzAzNzYwMDlEQ0FFMDQ1QTlCN0M2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfFLh1EKPOqjCnU1Xm7NJbq17
4XmXw2BlOkFtDSUebCpWKMiw0M0xoANs9kbLAwAWIgTq3qffVG/mkmLsPvvpUCIT
Uhxm7bhKtsyWtuOh985ISVRLFzzvQOfw8JCZKI/GilrR8/UF7T5+buOH9ma2znhK
EMWxtXQ5rlH/wCD2X5z+tsVhMEslOXWMAhhnG48eaKGTzyn7SyzvOwGWDxQnseh8
UHa/wn4ipN8NeKoO7ROyaEVJwqwcOYVNAqAUc3JOzAUoniSmzq26kh5lxoOJmCeZ
214mbZP0Ry5rN4ArIAw0+ydb2JNmvCV5mvotAlzrsQQdhMOPEpTZbEfxzWcxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUPctvtb27AhmjA3YAncrgRam3xkIwHwYDVR0j
BBgwFoAUDsjqx/H1ohaCSzcRhpd0iCXzFNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC8wRUM4RUFDN0YxRjVBMjE2ODI0QjM3MTE4Njk3NzQ4ODI1RjMxNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzhFQUM3RjFGNUEyMTY4
MjRCMzcxMTg2OTc3NDg4MjVGMzE0RDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzIzODMwMzQzYTMxMzgzOTM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzYzMTM5
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGJgwDQYJKoZIhvcNAQELBQADggEBAG2MMvSqVNmm
N22niAxJl7WtxjrCChxxtfE+E7g0OZpaKi4uDeB4T2+7+gXdcBzlarKQRJJYb5HB
FFLpkMLu8huC2ZvmIBJCcZUMXSYNQWySR+r4Xf/osTbDtSD1mXJi+CxZIMimCt99
2YX19BGbwof1Zx+CwNCtz4MgGY4qJT3fzM1b71Azi7DdY2GdC7+JXndljoGHR2gU
W6tlqsHzu2q+vVXxJOd8sWzI16RRfmZnq7Tmun+16LacjLpK9s8+OsvLPbFUHr0R
oQOomqt2b1gDUYGGjqgTwEcEHbETU/Ibe+pWrvVXECa2183fj3zgKOmz6PK6wyOR
AmYgoQdLhG0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:10:28 2025 by rpki-client