Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa
File:                     323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (raw, json)
Hash identifier:          mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=
Subject key identifier:   16:DC:6E:24:54:61:10:3B:38:96:46:6F:DF:A1:5D:E9:12:92:C2:BB
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       2512A1B1963F0DB834E7DF2EB62AE35E49FB9037
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa
Signing time:             Wed 08 Jan 2025 18:05:36 +0000
ROA not before:           Wed 08 Jan 2025 18:00:36 +0000
ROA not after:            Wed 07 Jan 2026 18:05:36 +0000
asID:                     262953
IP address blocks:        2804:e68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
                          rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:12:a1:b1:96:3f:0d:b8:34:e7:df:2e:b6:2a:e3:5e:49:fb:90:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Jan  8 18:00:36 2025 GMT
            Not After : Jan  7 18:05:36 2026 GMT
        Subject: CN=16DC6E245461103B3896466FDFA15DE91292C2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:f5:72:c5:b6:77:3a:e6:b0:7d:af:c4:81:
                    19:8f:64:bc:87:6f:ab:1a:6d:8d:aa:c0:ad:c9:ff:
                    48:57:4c:a3:04:ac:f6:17:62:1e:11:91:38:8b:3f:
                    fe:f3:94:0e:91:73:3a:d8:6d:a3:06:ad:b7:87:3e:
                    bd:09:05:a7:bf:86:2e:a2:1e:57:a3:a2:2e:06:d3:
                    c9:05:58:53:c0:77:02:aa:5b:ff:4c:78:b5:8e:9a:
                    41:bd:08:85:d0:4d:cb:05:bc:ef:13:02:3b:81:3e:
                    b9:b9:fa:79:db:09:b7:a9:cf:9e:24:da:c0:3e:51:
                    54:c0:3e:eb:d6:75:23:b6:2c:96:dd:63:3b:4e:b1:
                    e3:5d:7d:d1:f3:ec:87:16:92:eb:54:5c:54:d9:42:
                    43:ec:30:00:a6:2c:87:7d:64:00:cd:35:6c:6f:bf:
                    4a:48:2e:4b:5e:ec:94:d1:a5:e7:de:a0:d9:8e:c2:
                    f0:35:1b:fe:73:23:8e:85:e2:2e:29:65:1c:25:4c:
                    e0:c1:a1:25:74:69:1b:35:4f:68:f2:38:03:05:6d:
                    d8:64:ae:b1:92:c2:db:9c:12:00:e1:69:f2:8d:15:
                    4e:2e:06:ab:01:69:95:20:df:d0:c3:74:13:10:bc:
                    e4:82:29:26:b3:e1:e5:9d:1e:b7:30:31:8d:bb:64:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:6E:24:54:61:10:3B:38:96:46:6F:DF:A1:5D:E9:12:92:C2:BB
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/323830343a6536383a3a2f33322d3438203d3e20323632393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:d9:25:ed:ce:74:46:2c:64:71:ef:5b:db:7c:bb:70:a9:
         5e:ad:d7:69:09:eb:50:8f:a5:f9:7a:c2:97:3d:0e:74:a8:5b:
         95:fc:dd:87:a1:97:d9:d4:5b:c9:22:d7:1a:5d:79:d2:a6:48:
         bc:08:a2:45:36:57:40:42:5d:f2:08:f7:5f:51:df:9b:78:31:
         7e:df:5e:28:84:5b:b7:5c:d6:9e:9e:66:57:01:f6:8e:6e:97:
         a9:fd:17:13:aa:7e:c8:ed:33:01:aa:ee:42:44:8f:24:46:03:
         e2:e0:97:f3:c0:60:b3:80:37:09:56:bf:ce:a3:59:39:90:70:
         f1:40:0a:6d:9b:64:29:ae:59:05:bc:7b:58:7e:b1:e5:6f:82:
         cd:32:26:71:db:fb:7b:7a:cd:e8:0f:1c:92:71:27:5a:af:98:
         30:fd:ff:68:16:db:61:6f:98:4a:12:66:4e:42:60:84:32:8c:
         24:0e:0d:7a:aa:16:70:77:52:9d:35:7d:f0:16:3b:74:74:e1:
         f9:f9:1d:cb:7c:ea:1f:f5:ac:fa:93:b7:7e:a3:8b:88:cb:f1:
         6a:a4:a2:00:29:15:a0:49:54:b2:92:70:26:cd:7e:bf:92:dc:
         e9:b8:57:f4:4f:53:39:f1:0e:cc:e8:30:da:15:1f:7b:29:20:
         8f:d8:88:25
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJRKhsZY/Dbg0598utirjXkn7kDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U1ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQz
NjBDRUI5RDAeFw0yNTAxMDgxODAwMzZaFw0yNjAxMDcxODA1MzZaMDMxMTAvBgNV
BAMTKDE2REM2RTI0NTQ2MTEwM0IzODk2NDY2RkRGQTE1REU5MTI5MkMyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5d/VyxbZ3Ouawfa/EgRmPZLyH
b6sabY2qwK3J/0hXTKMErPYXYh4RkTiLP/7zlA6RczrYbaMGrbeHPr0JBae/hi6i
Hlejoi4G08kFWFPAdwKqW/9MeLWOmkG9CIXQTcsFvO8TAjuBPrm5+nnbCbepz54k
2sA+UVTAPuvWdSO2LJbdYztOseNdfdHz7IcWkutUXFTZQkPsMACmLId9ZADNNWxv
v0pILkte7JTRpefeoNmOwvA1G/5zI46F4i4pZRwlTODBoSV0aRs1T2jyOAMFbdhk
rrGSwtucEgDhafKNFU4uBqsBaZUg39DDdBMQvOSCKSaz4eWdHrcwMY27ZF7rAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFtxuJFRhEDs4lkZv36Fd6RKSwrswHwYDVR0j
BBgwFoAUPlhvmYlJJFp7qH1UxI22xDYM650wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZ
WGQvMC8zRTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNTg2Rjk5ODk0OTI0NUE3
QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNyOXh5dGtrdHBCZTFRNUJ0TlJ3UExYekRiMVV0OGE5bnVlYmtzZjNYWVhkLzAv
MzIzODMwMzQzYTY1MzYzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM5
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDmgwDQYJKoZIhvcNAQELBQADggEBADJq2SXtznRG
LGRx71vbfLtwqV6t12kJ61CPpfl6wpc9DnSoW5X83Yehl9nUW8ki1xpdedKmSLwI
okU2V0BCXfII919R35t4MX7fXiiEW7dc1p6eZlcB9o5ul6n9FxOqfsjtMwGq7kJE
jyRGA+Lgl/PAYLOANwlWv86jWTmQcPFACm2bZCmuWQW8e1h+seVvgs0yJnHb+3t6
zegPHJJxJ1qvmDD9/2gW22FvmEoSZk5CYIQyjCQODXqqFnB3Up01ffAWO3R04fn5
Hct86h/1rPqTt36ji4jL8WqkogApFaBJVLKScCbNfr+S3Om4V/RPUznxDszoMNoV
H3spII/YiCU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:32 2025 by rpki-client