Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa
File:                     323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa (raw, json)
Hash identifier:          yzLfWdB3blrDDpzxEgZrK5itBpkpxsW4XpzQ9k0J8h0=
Subject key identifier:   29:B8:DE:CD:40:7B:E7:96:40:F9:8C:E8:B7:75:DD:EE:9E:90:07:0F
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       7B9603BA4D25EBB163E8EB9D75A221FE88EF0995
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:43 +0000
ROA not before:           Wed 16 Apr 2025 14:20:43 +0000
ROA not after:            Wed 15 Apr 2026 14:25:43 +0000
asID:                     262424
IP address blocks:        2804:6164:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:96:03:ba:4d:25:eb:b1:63:e8:eb:9d:75:a2:21:fe:88:ef:09:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:43 2025 GMT
            Not After : Apr 15 14:25:43 2026 GMT
        Subject: CN=29B8DECD407BE79640F98CE8B775DDEE9E90070F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:37:c9:c9:14:d8:92:d4:87:c3:d8:3b:3a:
                    04:e4:59:65:99:61:d5:89:54:9e:c9:30:88:7f:9f:
                    a2:a1:62:f0:e2:65:86:5d:53:0d:00:af:e0:e3:c5:
                    52:cf:4c:86:d6:11:be:8e:46:d2:d9:9a:08:25:ab:
                    5c:ad:41:98:c9:ca:ae:d4:d5:b9:38:44:87:00:c2:
                    2c:af:f0:34:64:3e:1e:39:5c:f5:0e:20:34:f8:0b:
                    ce:3d:a2:28:d3:1a:7a:fc:2f:b3:c6:53:5c:ee:fd:
                    b5:1d:73:c1:5b:e9:3c:53:cc:3e:8d:5a:e4:9e:88:
                    87:df:92:5e:f6:7e:43:d6:ce:b2:ab:ec:2f:66:98:
                    54:2e:06:a1:9b:b6:84:b9:1b:99:cf:90:69:c3:13:
                    c1:60:3a:84:83:5e:ba:f5:c2:ea:78:a8:22:1c:4d:
                    a8:7f:d3:58:17:fd:db:92:0f:e3:5c:29:9d:68:a6:
                    4c:e2:76:14:8d:99:52:79:f1:7b:b2:69:22:4f:6d:
                    4e:5a:db:ca:15:3f:16:e6:0c:b7:8d:44:9d:bf:c5:
                    17:04:13:00:d1:93:e4:d5:dc:3c:e4:d2:91:5a:f0:
                    d0:b5:51:5c:51:d4:64:f4:b3:98:0c:63:08:1a:52:
                    07:4e:e2:6f:fb:1e:8a:ee:63:c5:44:3b:86:27:51:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B8:DE:CD:40:7B:E7:96:40:F9:8C:E8:B7:75:DD:EE:9E:90:07:0F
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f33352d3335203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         76:af:84:ee:e1:f2:46:62:60:aa:9c:81:10:f5:09:87:80:c8:
         5f:b5:26:fb:45:41:a4:97:ad:32:68:7c:98:72:1b:33:12:a1:
         92:6b:df:0c:0d:89:57:66:3f:b7:db:f1:21:41:7c:d4:6d:b7:
         2b:26:2a:8f:ee:b8:ad:bc:bd:f1:27:24:0a:2d:53:dd:10:fe:
         fb:40:b1:6d:a5:99:49:c2:59:6f:19:14:b4:9e:1c:2e:bd:77:
         d5:b7:84:5f:9b:56:55:6a:ea:d9:48:05:2a:e3:85:41:3a:d5:
         f8:16:ab:0e:70:4a:8b:fc:de:c7:14:0f:82:47:37:60:ef:30:
         ac:38:b3:85:a7:09:e2:a0:8c:44:2f:88:c2:37:de:81:df:ac:
         ff:fb:34:e8:e3:b1:3f:4a:d6:19:32:87:d1:2d:65:ab:92:41:
         81:28:0c:70:bd:93:bb:70:f6:5f:53:3e:bd:ad:7d:de:e3:0d:
         95:7b:ab:18:8b:b7:11:32:89:f8:50:46:80:8a:e9:20:91:e3:
         da:40:7f:9a:62:d7:a0:b7:cb:12:d5:f4:dc:d4:1e:28:77:95:
         cd:0b:bd:50:4e:ac:1f:23:35:a1:20:71:29:90:a5:39:37:5c:
         0e:1c:a1:ac:1d:7c:c5:00:2b:81:45:03:81:e2:50:81:fc:1e:
         a0:44:e6:f6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUe5YDuk0l67Fj6OuddaIh/ojvCZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU5RUM1MzA5N0U3MjQ4QzQwOEMzRDFBNjQyMkRCODVC
QjQ0NzBBMzAeFw0yNTA0MTYxNDIwNDNaFw0yNjA0MTUxNDI1NDNaMDMxMTAvBgNV
BAMTKDI5QjhERUNENDA3QkU3OTY0MEY5OENFOEI3NzVEREVFOUU5MDA3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9jfJyRTYktSHw9g7OgTkWWWZ
YdWJVJ7JMIh/n6KhYvDiZYZdUw0Ar+DjxVLPTIbWEb6ORtLZmgglq1ytQZjJyq7U
1bk4RIcAwiyv8DRkPh45XPUOIDT4C849oijTGnr8L7PGU1zu/bUdc8Fb6TxTzD6N
WuSeiIffkl72fkPWzrKr7C9mmFQuBqGbtoS5G5nPkGnDE8FgOoSDXrr1wup4qCIc
Tah/01gX/duSD+NcKZ1opkzidhSNmVJ58XuyaSJPbU5a28oVPxbmDLeNRJ2/xRcE
EwDRk+TV3Dzk0pFa8NC1UVxR1GT0s5gMYwgaUgdO4m/7HoruY8VEO4YnUQ8LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKbjezUB755ZA+Yzot3Xd7p6QBw8wHwYDVR0j
BBgwFoAUdZ7FMJfnJIxAjD0aZCLbhbtEcKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC83NTlFQzUzMDk3RTcyNDhDNDA4QzNEMUE2NDIyREI4NUJCNDQ3MEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1OUVDNTMwOTdFNzI0OEM0
MDhDM0QxQTY0MjJEQjg1QkI0NDcwQTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzIzODMwMzQzYTM2MzEzNjM0M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMjM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEYWSAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2r4Tu4fJGYmCqnIEQ9QmHgMhftSb7RUGkl60yaHyYchszEqGSa98MDYlX
Zj+32/EhQXzUbbcrJiqP7ritvL3xJyQKLVPdEP77QLFtpZlJwllvGRS0nhwuvXfV
t4Rfm1ZVaurZSAUq44VBOtX4FqsOcEqL/N7HFA+CRzdg7zCsOLOFpwnioIxEL4jC
N96B36z/+zTo47E/StYZMofRLWWrkkGBKAxwvZO7cPZfUz69rX3e4w2Ve6sYi7cR
Mon4UEaAiukgkePaQH+aYtegt8sS1fTc1B4od5XNC71QTqwfIzWhIHEpkKU5N1wO
HKGsHXzFACuBRQOB4lCB/B6gROb2
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:31:53 2025 by rpki-client