Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/323830343a383739633a3a2f33322d3333203d3e20323732373230.roa
File:                     323830343a383739633a3a2f33322d3333203d3e20323732373230.roa (raw, json)
Hash identifier:          UIFYaXICVinmcyN/GiMBixZu8B6KaPa5illfAdp2QM0=
Subject key identifier:   B9:9A:A7:29:15:CC:36:4E:34:0D:6B:F0:5D:9C:22:C3:16:EB:80:CC
Certificate issuer:       /CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
Certificate serial:       76A430FE2E2533D330B74590A59198718CB29B0F
Authority key identifier: 5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/323830343a383739633a3a2f33322d3333203d3e20323732373230.roa
Signing time:             Wed 26 Mar 2025 17:44:39 +0000
ROA not before:           Wed 26 Mar 2025 17:39:39 +0000
ROA not after:            Wed 25 Mar 2026 17:44:39 +0000
asID:                     272720
IP address blocks:        2804:879c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl
                          rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a4:30:fe:2e:25:33:d3:30:b7:45:90:a5:91:98:71:8c:b2:9b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
        Validity
            Not Before: Mar 26 17:39:39 2025 GMT
            Not After : Mar 25 17:44:39 2026 GMT
        Subject: CN=B99AA72915CC364E340D6BF05D9C22C316EB80CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:a5:ec:90:26:36:fc:4e:5a:46:68:f6:ff:
                    eb:89:19:54:ef:c8:b7:40:b7:63:95:f8:49:10:37:
                    a5:f8:d4:e3:53:28:39:94:0a:e1:33:90:e6:bc:65:
                    de:c4:d4:23:b8:7a:d1:bb:24:2a:df:42:3a:2d:cc:
                    b6:4a:07:cc:c7:b8:7c:26:bc:c6:88:cf:08:c0:fe:
                    e5:fb:d9:d4:60:6f:fc:ee:6c:dd:27:25:52:60:8b:
                    81:d2:de:8a:da:72:de:60:5a:7a:82:c8:eb:9a:c2:
                    75:70:88:61:b8:6e:a7:eb:97:9a:cd:2b:30:03:3d:
                    9a:50:85:3d:7b:27:31:36:31:45:10:2f:5f:2c:28:
                    de:47:15:cf:dd:57:16:c2:f4:b8:03:b3:f1:0e:55:
                    f8:11:3b:d1:08:0b:f8:db:87:9e:09:c6:ae:92:2f:
                    90:30:54:6d:a8:82:30:e6:96:25:cb:5c:c6:1a:4a:
                    b5:e4:ec:78:ba:3e:79:10:c9:1a:27:4b:0a:43:6c:
                    55:81:3c:5f:40:09:01:07:f2:b4:b1:a3:9a:ae:b4:
                    a2:e7:cc:02:20:19:66:39:63:60:5c:1f:9f:39:eb:
                    df:5b:2c:c9:36:7f:22:c7:47:32:a8:f9:48:2b:81:
                    d1:30:46:5d:1f:49:db:a5:74:05:45:13:b6:86:28:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:A7:29:15:CC:36:4E:34:0D:6B:F0:5D:9C:22:C3:16:EB:80:CC
            X509v3 Authority Key Identifier:
                keyid:5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/323830343a383739633a3a2f33322d3333203d3e20323732373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:879c::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:24:00:23:f5:99:69:de:62:b1:71:87:4f:79:1c:2e:8b:0f:
         3c:ed:48:d2:6c:16:b4:81:d6:e4:81:05:0e:56:5f:a9:5b:79:
         0f:66:f1:07:04:d1:8d:1b:5d:50:e7:3b:02:e6:db:3e:2f:99:
         46:93:99:26:8e:bc:7e:55:44:a1:b8:0e:92:aa:f2:00:3d:ca:
         ad:6f:f1:03:44:6c:86:d9:bf:18:62:09:9a:b3:f8:38:9f:04:
         a3:b9:77:c2:4e:06:76:4d:7a:6f:62:5b:0b:19:c8:b8:6d:18:
         38:84:1f:84:f6:54:48:88:43:9a:38:b3:21:28:b6:97:36:09:
         fa:01:9d:00:31:b9:de:cc:dd:9d:15:37:5c:bb:d9:c8:93:f3:
         c6:72:1f:ea:3e:5c:dd:56:6c:8b:84:ed:3c:8c:15:47:d6:c0:
         c2:aa:b4:43:0c:59:30:7c:d3:e7:5b:a3:90:9c:eb:53:c9:70:
         65:ec:90:b0:c6:4b:2f:9f:31:57:2d:6c:43:6d:ed:20:be:3e:
         c2:30:fd:8c:24:cf:3c:c6:cb:74:5e:eb:a4:fc:43:29:33:5e:
         31:b0:65:21:02:ca:ae:26:67:49:be:cc:b6:4e:16:cc:2b:2c:
         7a:50:a7:25:31:a4:53:42:ba:7a:24:e8:db:f7:fa:8b:10:89:
         98:97:61:aa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdqQw/i4lM9Mwt0WQpZGYcYyymw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCOUQxMTEyQkUyOTc5QjY1OTAyM0ZGMTAxM0IxODkx
REYwQkMyRjAeFw0yNTAzMjYxNzM5MzlaFw0yNjAzMjUxNzQ0MzlaMDMxMTAvBgNV
BAMTKEI5OUFBNzI5MTVDQzM2NEUzNDBENkJGMDVEOUMyMkMzMTZFQjgwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5qXskCY2/E5aRmj2/+uJGVTv
yLdAt2OV+EkQN6X41ONTKDmUCuEzkOa8Zd7E1CO4etG7JCrfQjotzLZKB8zHuHwm
vMaIzwjA/uX72dRgb/zubN0nJVJgi4HS3oract5gWnqCyOuawnVwiGG4bqfrl5rN
KzADPZpQhT17JzE2MUUQL18sKN5HFc/dVxbC9LgDs/EOVfgRO9EIC/jbh54Jxq6S
L5AwVG2ogjDmliXLXMYaSrXk7Hi6PnkQyRonSwpDbFWBPF9ACQEH8rSxo5qutKLn
zAIgGWY5Y2BcH585699bLMk2fyLHRzKo+UgrgdEwRl0fSduldAVFE7aGKIkbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuZqnKRXMNk40DWvwXZwiwxbrgMwwHwYDVR0j
BBgwFoAUXbnRESvil5tlkCP/EBOxiR3wvC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkV3RFdEVFR2N2pTeWJFU1pXdlZzeVpndVZGbXd2VlRCSGVuVXdhd2lG
NXovMC81REI5RDExMTJCRTI5NzlCNjU5MDIzRkYxMDEzQjE4OTFERjBCQzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQjlEMTExMkJFMjk3OUI2
NTkwMjNGRjEwMTNCMTg5MURGMEJDMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFd0RXRFRUdjdqU3liRVNaV3ZWc3laZ3VWRm13dlZUQkhlblV3YXdpRjV6LzAv
MzIzODMwMzQzYTM4MzczOTYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMy
MzczMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASHnDANBgkqhkiG9w0BAQsFAAOCAQEAdiQAI/WZ
ad5isXGHT3kcLosPPO1I0mwWtIHW5IEFDlZfqVt5D2bxBwTRjRtdUOc7AubbPi+Z
RpOZJo68flVEobgOkqryAD3KrW/xA0Rshtm/GGIJmrP4OJ8Eo7l3wk4Gdk16b2Jb
CxnIuG0YOIQfhPZUSIhDmjizISi2lzYJ+gGdADG53szdnRU3XLvZyJPzxnIf6j5c
3VZsi4TtPIwVR9bAwqq0QwxZMHzT51ujkJzrU8lwZeyQsMZLL58xVy1sQ23tIL4+
wjD9jCTPPMbLdF7rpPxDKTNeMbBlIQLKriZnSb7Mtk4WzCsselCnJTGkU0K6eiTo
2/f6ixCJmJdhqg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:54:34 2025 by rpki-client