Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa
File:                     323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier:          +Ri7qaE/SiZgZVqhxQW6vcybkkfuZQa/J6WtTb1rX1g=
Subject key identifier:   7D:B4:E1:68:5A:5E:83:D5:18:A6:50:B3:2C:12:5C:DC:1C:8E:5F:2D
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       774642F45F6CD455861A9709C5F82F541A3392D1
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa
Signing time:             Fri 16 May 2025 22:21:53 +0000
ROA not before:           Fri 16 May 2025 22:16:53 +0000
ROA not after:            Fri 15 May 2026 22:21:53 +0000
asID:                     272218
IP address blocks:        2804:83c4:bd80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 15:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:46:42:f4:5f:6c:d4:55:86:1a:97:09:c5:f8:2f:54:1a:33:92:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: May 16 22:16:53 2025 GMT
            Not After : May 15 22:21:53 2026 GMT
        Subject: CN=7DB4E1685A5E83D518A650B32C125CDC1C8E5F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:7f:b3:28:85:cb:4c:16:4d:bd:67:51:b5:
                    05:10:58:e2:48:ed:d3:85:5c:ca:3b:c2:21:52:86:
                    db:ed:9e:fb:0e:83:5d:32:f2:c3:02:f4:ed:5b:f8:
                    06:3d:d9:ce:85:85:40:8a:41:68:3b:55:71:93:58:
                    e0:c9:bd:b7:0a:46:b0:b9:a3:ba:f1:aa:45:26:16:
                    d8:19:5c:94:1b:77:0d:8c:6d:fc:5e:c6:e9:ca:d3:
                    17:82:02:af:3f:5a:26:ce:0f:3e:f9:56:95:3e:72:
                    fc:83:d3:4f:c8:3c:ea:ab:33:c6:7d:ab:89:ec:42:
                    76:94:70:40:63:8f:6f:28:4a:79:c6:3f:f0:75:7e:
                    69:5c:e2:82:2f:62:61:66:ed:96:e9:b1:e2:15:6a:
                    57:ac:ed:08:da:d3:dc:7a:8d:25:c2:64:5f:9f:b6:
                    a8:55:80:16:02:09:1e:89:d4:43:e0:00:9f:d7:ca:
                    82:c4:64:a7:28:c1:ce:46:f2:bb:28:44:49:d4:34:
                    8b:fe:a1:52:e9:3e:15:1b:58:2a:99:f9:38:67:b6:
                    15:6b:9d:27:54:bb:df:ec:51:0e:c8:7c:5c:0a:d3:
                    56:90:2a:b5:84:cd:09:12:e9:4e:65:93:84:16:2c:
                    e5:a4:48:5e:50:f0:bc:82:25:3a:0a:70:53:e5:dc:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:E1:68:5A:5E:83:D5:18:A6:50:B3:2C:12:5C:DC:1C:8E:5F:2D
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626438303a3a2f34312d3431203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:bd80::/41

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:2b:77:a5:84:30:52:82:40:0d:a2:77:fa:ee:49:17:23:
         31:b0:5a:8b:85:d2:9a:23:61:81:04:d7:4a:bf:c5:53:98:66:
         11:de:64:52:11:aa:46:6c:02:20:82:79:8e:c1:53:f1:e9:ae:
         ca:a0:22:9b:e8:2a:51:a1:36:d2:c5:c6:ca:60:e0:9c:c5:e9:
         c9:d4:b9:91:f0:3a:3d:b1:98:7c:63:d9:6d:d0:05:04:68:0e:
         67:54:40:09:c6:4b:8d:91:e0:50:72:b6:bc:83:b5:24:0a:44:
         6e:b3:cb:eb:8f:69:95:bb:6c:b2:7e:81:23:13:00:2c:28:7b:
         cf:94:db:73:58:3f:53:e5:ab:bb:7a:b6:a0:61:b1:22:d5:28:
         3a:cc:b2:05:8f:c3:ff:74:59:95:6a:cb:35:ff:2d:e7:1b:0b:
         61:f6:91:db:53:d6:a7:71:e1:a9:32:bc:48:9e:01:28:18:a4:
         1e:0d:47:cf:ca:d2:1c:c0:2b:4f:10:13:a2:45:28:dc:47:66:
         04:72:54:2f:c7:e3:95:7f:b3:e2:e0:66:b2:5b:04:cc:a8:17:
         cc:5f:4d:6a:6c:77:51:78:84:a1:2d:62:ae:0d:63:a6:f9:e8:
         3c:3e:a3:0f:ca:13:df:4b:7c:f4:ed:4a:a3:be:52:bb:be:05:
         99:eb:9f:3c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUd0ZC9F9s1FWGGpcJxfgvVBozktEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNTA1MTYyMjE2NTNaFw0yNjA1MTUyMjIxNTNaMDMxMTAvBgNV
BAMTKDdEQjRFMTY4NUE1RTgzRDUxOEE2NTBCMzJDMTI1Q0RDMUM4RTVGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsX+zKIXLTBZNvWdRtQUQWOJI
7dOFXMo7wiFShtvtnvsOg10y8sMC9O1b+AY92c6FhUCKQWg7VXGTWODJvbcKRrC5
o7rxqkUmFtgZXJQbdw2MbfxexunK0xeCAq8/WibODz75VpU+cvyD00/IPOqrM8Z9
q4nsQnaUcEBjj28oSnnGP/B1fmlc4oIvYmFm7ZbpseIVales7Qja09x6jSXCZF+f
tqhVgBYCCR6J1EPgAJ/XyoLEZKcowc5G8rsoREnUNIv+oVLpPhUbWCqZ+ThnthVr
nSdUu9/sUQ7IfFwK01aQKrWEzQkS6U5lk4QWLOWkSF5Q8LyCJToKcFPl3L+rAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUfbThaFpeg9UYplCzLBJc3ByOXy0wHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2E2MjY0MzgzMDNhM2EyZjM0MzEyZDM0MzEyMDNk
M2UyMDMyMzczMjMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygEg8S9gDANBgkqhkiG9w0BAQsF
AAOCAQEAetcrd6WEMFKCQA2id/ruSRcjMbBai4XSmiNhgQTXSr/FU5hmEd5kUhGq
RmwCIIJ5jsFT8emuyqAim+gqUaE20sXGymDgnMXpydS5kfA6PbGYfGPZbdAFBGgO
Z1RACcZLjZHgUHK2vIO1JApEbrPL649plbtssn6BIxMALCh7z5Tbc1g/U+Wru3q2
oGGxItUoOsyyBY/D/3RZlWrLNf8t5xsLYfaR21PWp3HhqTK8SJ4BKBikHg1Hz8rS
HMArTxATokUo3EdmBHJUL8fjlX+z4uBmslsEzKgXzF9Namx3UXiEoS1irg1jpvno
PD6jD8oT30t89O1Ko75Su74FmeufPA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 08:07:41 2025 by rpki-client