Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa
File:                     323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa (raw, json)
Hash identifier:          MvGBtcOz9yCOojCc6zvFzhdvBEoojjEihRtO/BQUSik=
Subject key identifier:   F4:B5:AF:03:16:DA:A0:C4:3A:CD:EB:1C:5B:3C:BD:DA:D8:38:AB:31
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       2BA33933DA8C1BBDD2D6180233C104B725DD1375
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:57 +0000
ROA not before:           Thu 06 Mar 2025 03:44:57 +0000
ROA not after:            Thu 05 Mar 2026 03:49:57 +0000
asID:                     262642
IP address blocks:        2804:2ea8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:39:33:da:8c:1b:bd:d2:d6:18:02:33:c1:04:b7:25:dd:13:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:57 2025 GMT
            Not After : Mar  5 03:49:57 2026 GMT
        Subject: CN=F4B5AF0316DAA0C43ACDEB1C5B3CBDDAD838AB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:37:10:08:96:61:3f:96:cb:e7:93:f9:d9:55:
                    6c:a5:d5:b0:b9:22:0b:48:46:f1:54:21:ba:ca:6d:
                    0e:e8:d9:5f:09:35:1a:52:ee:aa:f8:ae:79:cc:f8:
                    1d:ad:d8:b5:80:89:97:bd:4c:0c:b3:3c:94:8e:d1:
                    9e:6d:7b:da:95:ef:b2:36:e5:79:5a:11:f1:b3:76:
                    46:9b:b8:e7:96:43:16:38:d3:52:51:d6:4d:e5:f5:
                    ba:09:36:22:c0:26:45:88:e8:cd:5d:6c:ed:67:df:
                    e7:ab:8e:02:9c:39:28:ab:23:59:81:5a:57:08:d6:
                    e5:36:5a:05:bd:57:d7:6a:60:c9:4c:98:9f:f5:52:
                    96:6c:2f:74:00:b7:a3:37:37:e0:eb:2d:56:fc:85:
                    30:92:3e:02:ee:11:db:e0:28:b2:be:5b:36:99:6e:
                    95:41:6f:50:fd:6f:c5:60:d3:63:4d:b5:75:ba:6f:
                    0f:f9:20:e0:48:55:d6:b2:af:d3:3f:2c:d5:49:1b:
                    fb:97:37:06:b5:c9:8a:58:c4:38:39:b8:e0:c0:76:
                    f2:00:a3:91:05:77:86:36:b4:4e:db:69:d3:d4:82:
                    f6:ae:e7:c2:38:ba:63:01:91:43:b7:ee:c0:9d:c8:
                    c4:fa:04:82:56:71:6b:88:2a:0e:00:4a:ae:b9:ce:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:AF:03:16:DA:A0:C4:3A:CD:EB:1C:5B:3C:BD:DA:D8:38:AB:31
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a343030303a3a2f33342d3334203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:25:19:40:25:e7:f2:c1:ce:4e:8a:fe:30:03:46:d0:fe:24:
         b6:af:e5:18:86:c5:ee:b6:56:b3:48:97:a2:2e:c5:fe:56:3a:
         c6:ea:a5:ee:76:b3:e1:17:3b:cf:66:73:0a:2c:2c:30:ca:c4:
         7a:d4:2c:71:58:ed:34:f6:b2:6b:ce:89:9a:e3:5b:ce:59:53:
         81:34:7b:2f:63:86:4b:1d:90:7a:2e:9e:f9:e3:74:4f:f0:7b:
         ef:85:0d:41:87:d6:61:3c:60:17:b0:03:b5:10:a6:84:10:5d:
         19:7c:13:81:81:68:b4:b9:97:0b:2b:3f:5f:d9:d0:18:38:ac:
         5e:8c:78:2b:f1:30:ae:03:77:32:33:cd:53:7c:0a:ae:91:f3:
         54:1a:6c:e7:c0:aa:f3:85:6d:a3:20:c5:00:c2:39:2f:25:2f:
         84:6c:9f:46:fb:b4:b9:c4:52:5b:5b:d6:b7:eb:1a:8c:b4:44:
         6a:9f:1b:a3:b6:1a:87:8d:c8:24:bc:be:97:43:7d:02:29:5d:
         7d:60:c6:82:29:95:9c:df:57:89:c3:db:d6:c6:e9:40:61:de:
         85:5d:8a:6b:88:5f:6e:22:61:71:00:0b:40:c6:c7:05:05:ee:
         4b:25:90:87:03:5a:6c:74:39:3f:fa:1a:9f:2a:ec:da:76:4a:
         8c:43:71:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK6M5M9qMG73S1hgCM8EEtyXdE3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNTAzMDYwMzQ0NTdaFw0yNjAzMDUwMzQ5NTdaMDMxMTAvBgNV
BAMTKEY0QjVBRjAzMTZEQUEwQzQzQUNERUIxQzVCM0NCRERBRDgzOEFCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0NxAIlmE/lsvnk/nZVWyl1bC5
IgtIRvFUIbrKbQ7o2V8JNRpS7qr4rnnM+B2t2LWAiZe9TAyzPJSO0Z5te9qV77I2
5XlaEfGzdkabuOeWQxY401JR1k3l9boJNiLAJkWI6M1dbO1n3+erjgKcOSirI1mB
WlcI1uU2WgW9V9dqYMlMmJ/1UpZsL3QAt6M3N+DrLVb8hTCSPgLuEdvgKLK+WzaZ
bpVBb1D9b8Vg02NNtXW6bw/5IOBIVdayr9M/LNVJG/uXNwa1yYpYxDg5uODAdvIA
o5EFd4Y2tE7badPUgvau58I4umMBkUO37sCdyMT6BIJWcWuIKg4ASq65zpPpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU9LWvAxbaoMQ6zescWzy92tg4qzEwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzIzODMwMzQzYTMyNjU2MTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMjM2MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigELqhAMA0GCSqGSIb3DQEBCwUA
A4IBAQB9JRlAJefywc5Oiv4wA0bQ/iS2r+UYhsXutlazSJeiLsX+VjrG6qXudrPh
FzvPZnMKLCwwysR61CxxWO009rJrzoma41vOWVOBNHsvY4ZLHZB6Lp7543RP8Hvv
hQ1Bh9ZhPGAXsAO1EKaEEF0ZfBOBgWi0uZcLKz9f2dAYOKxejHgr8TCuA3cyM81T
fAqukfNUGmznwKrzhW2jIMUAwjkvJS+EbJ9G+7S5xFJbW9a36xqMtERqnxujthqH
jcgkvL6XQ30CKV19YMaCKZWc31eJw9vWxulAYd6FXYpriF9uImFxAAtAxscFBe5L
JZCHA1psdDk/+hqfKuzadkqMQ3Hy
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:21 2025 by rpki-client