Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa
File:                     323830343a383632343a3a2f33332d3333203d3e20323732363234.roa (raw, json)
Hash identifier:          sBSN+HUK3GGarNrSTOHymxXFFrp9vU2d2m6GgTuDx80=
Subject key identifier:   1A:53:0D:8E:4B:E5:F6:52:BA:B8:29:55:7D:6F:1C:E5:DE:0D:25:E6
Certificate issuer:       /CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
Certificate serial:       23CDA357035303C72661C0B8F21FD5DF55F0367D
Authority key identifier: 40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa
Signing time:             Thu 03 Apr 2025 11:31:24 +0000
ROA not before:           Thu 03 Apr 2025 11:26:24 +0000
ROA not after:            Thu 02 Apr 2026 11:31:24 +0000
asID:                     272624
IP address blocks:        2804:8624::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl
                          rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cd:a3:57:03:53:03:c7:26:61:c0:b8:f2:1f:d5:df:55:f0:36:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C2FF62F032F24C2FABB19B4D4F5EFB49181526
        Validity
            Not Before: Apr  3 11:26:24 2025 GMT
            Not After : Apr  2 11:31:24 2026 GMT
        Subject: CN=1A530D8E4BE5F652BAB829557D6F1CE5DE0D25E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:ae:10:c0:b9:05:53:40:3d:0b:93:15:7f:
                    83:7c:92:e2:79:cf:3d:01:9e:68:d3:cc:49:b3:ec:
                    4a:05:aa:5e:a1:4f:d3:17:98:2a:81:c8:f3:ae:04:
                    de:f6:be:3c:3d:76:96:7b:e3:51:77:69:fc:c4:81:
                    fe:b7:9c:d8:5f:2f:1a:dd:7d:1d:e2:11:ef:8a:2e:
                    78:bd:f1:4c:ef:7b:ee:c8:16:9d:3a:60:1f:3e:ed:
                    9c:7e:68:15:9a:c8:4e:0e:50:0e:b5:6b:a2:41:79:
                    84:8d:8b:68:d2:29:8f:b6:60:62:b6:ba:d4:c0:b6:
                    36:ad:fe:61:75:76:7f:69:f3:bc:dd:52:95:ab:14:
                    fd:f4:ef:f8:d3:bc:c5:c6:80:90:35:5e:b2:53:4e:
                    d2:f7:d1:a0:1d:16:73:e6:11:42:59:3f:27:cd:d5:
                    b2:01:44:54:ae:44:e4:a6:76:a3:4d:42:eb:fe:55:
                    a9:d8:0b:b4:13:b2:2d:ec:df:b5:63:96:1e:ea:c3:
                    b9:17:ac:92:0a:54:07:ca:a5:c3:d6:6b:ea:9d:14:
                    57:d1:d1:c7:fc:e5:fe:40:34:e7:80:e1:a0:f7:a7:
                    92:e5:e9:9e:03:4f:d6:57:6b:c9:98:8d:23:1a:98:
                    77:d1:87:64:19:3c:bb:70:84:70:20:25:19:56:fc:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:53:0D:8E:4B:E5:F6:52:BA:B8:29:55:7D:6F:1C:E5:DE:0D:25:E6
            X509v3 Authority Key Identifier:
                keyid:40:C2:FF:62:F0:32:F2:4C:2F:AB:B1:9B:4D:4F:5E:FB:49:18:15:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C2FF62F032F24C2FABB19B4D4F5EFB49181526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Thu8oTXQfktGRdAWJUTHxn9T29knWwR73mDBy1zFvAL/0/323830343a383632343a3a2f33332d3333203d3e20323732363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8624::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:5c:05:3d:09:b0:2b:c3:96:58:96:89:2c:17:6b:d2:52:
         80:d4:59:15:7e:28:18:a9:c5:51:1b:d4:45:93:44:68:71:a1:
         1c:1d:cf:3f:69:69:ea:81:9a:1f:c1:cd:b9:c1:92:0b:f1:9d:
         70:40:4a:8e:a1:bb:97:cb:35:9e:8f:05:64:c5:3e:81:50:c9:
         77:ed:5b:32:1f:ee:e3:36:26:6d:51:e4:4a:35:07:42:31:55:
         21:52:3e:2d:0e:e4:6b:64:9c:70:41:30:98:90:24:c8:38:a2:
         83:39:47:63:1b:e3:66:d2:22:bb:f3:fe:b7:f7:1e:69:b1:1c:
         92:7c:75:da:88:b9:14:bf:d3:ab:fe:cd:86:05:f0:28:05:52:
         eb:b5:9b:6f:06:2e:ce:50:72:8f:dd:ed:28:59:72:aa:46:b7:
         8d:69:df:7b:3f:f8:82:b7:d4:1b:92:5f:fb:88:0c:cf:68:01:
         29:08:22:8e:7b:4f:cc:8d:df:c2:b9:9b:56:32:db:e3:e4:c4:
         be:a8:f0:60:a5:64:e8:ec:9e:46:2c:62:d7:38:75:fd:a5:a0:
         82:a3:91:ba:a9:94:da:2f:2f:a1:25:16:48:37:92:32:58:ce:
         f3:7f:6e:c2:ea:12:b7:f9:6a:53:83:f0:d9:29:a0:d7:22:31:
         00:2e:5b:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI82jVwNTA8cmYcC48h/V31XwNn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMkZGNjJGMDMyRjI0QzJGQUJCMTlCNEQ0RjVFRkI0
OTE4MTUyNjAeFw0yNTA0MDMxMTI2MjRaFw0yNjA0MDIxMTMxMjRaMDMxMTAvBgNV
BAMTKDFBNTMwRDhFNEJFNUY2NTJCQUI4Mjk1NTdENkYxQ0U1REUwRDI1RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLq4QwLkFU0A9C5MVf4N8kuJ5
zz0BnmjTzEmz7EoFql6hT9MXmCqByPOuBN72vjw9dpZ741F3afzEgf63nNhfLxrd
fR3iEe+KLni98Uzve+7IFp06YB8+7Zx+aBWayE4OUA61a6JBeYSNi2jSKY+2YGK2
utTAtjat/mF1dn9p87zdUpWrFP307/jTvMXGgJA1XrJTTtL30aAdFnPmEUJZPyfN
1bIBRFSuROSmdqNNQuv+VanYC7QTsi3s37Vjlh7qw7kXrJIKVAfKpcPWa+qdFFfR
0cf85f5ANOeA4aD3p5Ll6Z4DT9ZXa8mYjSMamHfRh2QZPLtwhHAgJRlW/JrlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGlMNjkvl9lK6uClVfW8c5d4NJeYwHwYDVR0j
BBgwFoAUQML/YvAy8kwvq7GbTU9e+0kYFSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlRodThvVFhRZmt0R1JkQVdKVVRIeG45VDI5a25Xd1I3M21EQnkxekZ2
QUwvMC80MEMyRkY2MkYwMzJGMjRDMkZBQkIxOUI0RDRGNUVGQjQ5MTgxNTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQzJGRjYyRjAzMkYyNEMy
RkFCQjE5QjRENEY1RUZCNDkxODE1MjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZUaHU4b1RYUWZrdEdSZEFXSlVUSHhuOVQyOWtuV3dSNzNtREJ5MXpGdkFMLzAv
MzIzODMwMzQzYTM4MzYzMjM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMy
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASGJAAwDQYJKoZIhvcNAQELBQADggEBAJW/XAU9
CbArw5ZYloksF2vSUoDUWRV+KBipxVEb1EWTRGhxoRwdzz9paeqBmh/BzbnBkgvx
nXBASo6hu5fLNZ6PBWTFPoFQyXftWzIf7uM2Jm1R5Eo1B0IxVSFSPi0O5GtknHBB
MJiQJMg4ooM5R2Mb42bSIrvz/rf3HmmxHJJ8ddqIuRS/06v+zYYF8CgFUuu1m28G
Ls5Qco/d7ShZcqpGt41p33s/+IK31BuSX/uIDM9oASkIIo57T8yN38K5m1Yy2+Pk
xL6o8GClZOjsnkYsYtc4df2loIKjkbqplNovL6ElFkg3kjJYzvN/bsLqErf5alOD
8NkpoNciMQAuW44=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:48:44 2025 by rpki-client