Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa
File:                     323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (raw, json)
Hash identifier:          ZU6ILw0lAMoAwCMS6El2NuAxLqUW3seOIsbqFHJzTO8=
Subject key identifier:   C3:98:08:45:40:2A:FC:0C:0C:99:35:1F:69:F8:4E:5C:92:D2:2A:B6
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       26D3703C8F643FBD7EA606C591FCB5728290C9A4
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa
Signing time:             Thu 06 Mar 2025 17:50:22 +0000
ROA not before:           Thu 06 Mar 2025 17:45:22 +0000
ROA not after:            Thu 05 Mar 2026 17:50:22 +0000
asID:                     11097
IP address blocks:        2801:80:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:70:3c:8f:64:3f:bd:7e:a6:06:c5:91:fc:b5:72:82:90:c9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: Mar  6 17:45:22 2025 GMT
            Not After : Mar  5 17:50:22 2026 GMT
        Subject: CN=C3980845402AFC0C0C99351F69F84E5C92D22AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:e2:98:81:d9:2b:bc:09:ce:fc:85:42:76:
                    ed:34:e8:4f:81:61:13:90:05:dd:03:6c:87:ef:99:
                    bc:b0:28:f2:dc:8b:c0:92:ac:64:a2:a8:01:03:06:
                    75:06:11:ea:41:fc:fd:6e:17:37:0c:c2:d7:9a:f9:
                    ca:70:fc:7f:53:a4:32:ed:d0:df:b5:05:1f:36:02:
                    6a:93:a0:f0:79:3c:b9:fb:57:b1:7b:e8:fa:cc:65:
                    2d:f4:b1:0a:1f:a9:2b:5c:c2:a0:b1:e1:d4:aa:ef:
                    b2:11:b9:9f:65:fb:46:8f:30:38:db:99:62:9f:b4:
                    c1:8d:46:92:fb:1e:08:80:41:60:84:b1:80:4a:57:
                    f2:8c:bc:f5:84:ab:8a:8f:d2:9d:b5:f5:4b:c7:09:
                    f8:e8:bf:9f:6f:ee:a5:95:16:10:8f:c1:56:30:a4:
                    aa:50:ee:a1:e3:e8:9b:46:6a:8b:32:eb:0f:b1:cd:
                    ae:41:5d:3b:ab:51:9f:c7:55:ca:85:a4:f9:45:24:
                    1c:18:29:6f:6b:fa:4d:d3:77:13:d4:b6:c7:45:43:
                    30:ac:a2:30:26:a4:ce:ce:61:08:21:16:60:f5:7a:
                    06:ef:07:ca:38:a4:0f:fb:f0:bc:ba:b4:4c:c9:88:
                    f1:9f:df:de:cf:06:19:9e:43:66:15:fd:21:28:ee:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:08:45:40:2A:FC:0C:0C:99:35:1F:69:F8:4E:5C:92:D2:2A:B6
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:89:49:eb:4c:d6:ff:48:85:8a:63:91:0e:4f:09:47:fd:
         8f:e8:73:46:f1:ee:26:c3:d9:0d:c7:5f:29:8b:29:0e:c5:96:
         65:40:38:75:17:43:e3:2b:fb:61:f5:2f:d1:1f:ff:a4:0a:8b:
         f9:fb:d1:a5:d8:c4:7a:48:c2:70:5e:94:cb:7f:59:b7:33:f4:
         c9:e9:f1:e3:e1:6c:72:77:99:3d:ba:cd:72:ea:38:e9:7e:e6:
         33:8e:af:21:ca:01:f9:b8:5a:bd:c2:96:77:1c:ed:51:10:cd:
         23:05:90:c0:1e:55:a1:a3:b1:87:69:f0:64:ad:b2:c1:53:03:
         21:8e:03:8b:a1:f7:bf:01:1b:4a:fe:17:da:ae:61:8d:c0:fe:
         8a:a7:24:8f:15:36:e5:b7:89:b4:68:c5:77:bb:ef:9d:64:73:
         79:32:c7:d7:47:4e:ef:66:f8:13:66:01:40:73:00:7d:30:eb:
         3d:ad:e8:1c:14:8c:af:bf:cb:74:d0:bc:6e:7b:68:8c:e9:a7:
         c2:f2:32:a5:a6:2c:0d:6a:97:95:c1:99:fe:ac:cd:39:fe:d2:
         35:9f:9b:d6:cd:d1:21:9c:51:26:d0:c8:f7:0d:ed:39:99:8a:
         39:14:9e:5f:ba:af:ce:b9:30:2c:dc:bb:6e:25:49:75:17:a4:
         bd:49:da:04
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUJtNwPI9kP71+pgbFkfy1coKQyaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFQTY0NTZDOEIzNUVCNzVGQkM2QTQyREE3RjI2MDM1
ODYzNEYyRjAeFw0yNTAzMDYxNzQ1MjJaFw0yNjAzMDUxNzUwMjJaMDMxMTAvBgNV
BAMTKEMzOTgwODQ1NDAyQUZDMEMwQzk5MzUxRjY5Rjg0RTVDOTJEMjJBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0eKYgdkrvAnO/IVCdu006E+B
YROQBd0DbIfvmbywKPLci8CSrGSiqAEDBnUGEepB/P1uFzcMwtea+cpw/H9TpDLt
0N+1BR82AmqToPB5PLn7V7F76PrMZS30sQofqStcwqCx4dSq77IRuZ9l+0aPMDjb
mWKftMGNRpL7HgiAQWCEsYBKV/KMvPWEq4qP0p219UvHCfjov59v7qWVFhCPwVYw
pKpQ7qHj6JtGaosy6w+xza5BXTurUZ/HVcqFpPlFJBwYKW9r+k3TdxPUtsdFQzCs
ojAmpM7OYQghFmD1egbvB8o4pA/78Ly6tEzJiPGf397PBhmeQ2YV/SEo7tZhAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUw5gIRUAq/AwMmTUfafhOXJLSKrYwHwYDVR0j
BBgwFoAUOOpkVsizXrdfvGpC2n8mA1hjTy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFoybm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBp
ZWUvMC8zOEVBNjQ1NkM4QjM1RUI3NUZCQzZBNDJEQTdGMjYwMzU4NjM0RjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RUE2NDU2QzhCMzVFQjc1
RkJDNkE0MkRBN0YyNjAzNTg2MzRGMkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaMm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzQzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIw
MzEzMTMwMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgBAIAUMA0GCSqGSIb3DQEBCwUAA4IBAQAH
+YlJ60zW/0iFimORDk8JR/2P6HNG8e4mw9kNx18piykOxZZlQDh1F0PjK/th9S/R
H/+kCov5+9Gl2MR6SMJwXpTLf1m3M/TJ6fHj4Wxyd5k9us1y6jjpfuYzjq8hygH5
uFq9wpZ3HO1REM0jBZDAHlWho7GHafBkrbLBUwMhjgOLofe/ARtK/hfarmGNwP6K
pySPFTblt4m0aMV3u++dZHN5MsfXR07vZvgTZgFAcwB9MOs9regcFIyvv8t00Lxu
e2iM6afC8jKlpiwNapeVwZn+rM05/tI1n5vWzdEhnFEm0Mj3De05mYo5FJ5fuq/O
uTAs3LtuJUl1F6S9SdoE
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:17:01 2025 by rpki-client