Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3332203d3e20323632333133.roa
File:                     323830343a383536343a3a2f33322d3332203d3e20323632333133.roa (raw, json)
Hash identifier:          FHGUSePcOYPu3QgYh89gG/z58TjlBbZD3MYqxGWt98w=
Subject key identifier:   8F:62:43:A8:7C:A8:9C:9C:B4:19:6A:8B:2E:B4:DF:F1:0A:CB:A7:20
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       2629B09E6B386BD66435F14119DB066B001CFF54
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3332203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:28 +0000
ROA not before:           Wed 05 Mar 2025 21:55:28 +0000
ROA not after:            Wed 04 Mar 2026 22:00:28 +0000
asID:                     262313
IP address blocks:        2804:8564::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:b0:9e:6b:38:6b:d6:64:35:f1:41:19:db:06:6b:00:1c:ff:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:28 2025 GMT
            Not After : Mar  4 22:00:28 2026 GMT
        Subject: CN=8F6243A87CA89C9CB4196A8B2EB4DFF10ACBA720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:a3:ba:8b:05:5e:8e:35:77:0a:d1:9f:0d:
                    bf:51:95:f4:43:c1:e9:6e:6c:66:b9:a8:1f:e7:22:
                    68:f4:2a:c0:55:da:1b:fb:e0:af:12:fd:13:3f:ff:
                    11:a0:70:6d:ef:9e:1a:ba:be:61:72:8e:fc:fe:3e:
                    21:17:8d:00:b2:e5:df:26:7c:b1:5f:15:01:47:95:
                    d7:cf:21:76:7a:56:63:5e:bd:b5:b9:4a:e0:15:71:
                    26:51:b7:29:8d:e3:52:41:25:0b:8f:58:5c:45:03:
                    d2:86:1f:6d:45:ce:21:8a:6f:fb:73:8b:ef:a2:c9:
                    e7:48:f8:eb:c6:04:61:54:b4:6f:3f:85:a6:59:03:
                    45:7e:ee:62:2c:2e:c3:e5:cc:ec:e2:18:45:4a:6d:
                    e5:ef:fb:5d:54:dd:4a:e3:a2:fe:9c:5c:a2:fc:5b:
                    76:77:4d:c8:22:d0:d3:e7:27:f0:59:d6:af:74:ea:
                    ed:ee:62:bf:8d:2c:4a:84:6b:63:53:41:9d:6f:9e:
                    bc:50:95:f9:b2:7b:36:db:d5:c7:94:02:56:87:21:
                    da:8e:40:19:10:90:f0:15:d9:02:93:63:85:03:6c:
                    e3:07:02:ac:04:37:b0:19:c3:87:c1:57:03:72:a5:
                    10:75:11:63:47:62:77:a0:1c:3f:a7:5b:8b:00:7b:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:62:43:A8:7C:A8:9C:9C:B4:19:6A:8B:2E:B4:DF:F1:0A:CB:A7:20
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3332203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8564::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:45:a8:ad:f2:f6:ca:bb:98:9c:e3:ee:bf:ba:0c:c6:78:7a:
         40:7f:7e:79:fb:dd:ad:37:0a:19:ec:7a:d6:b7:48:e1:5f:ad:
         c3:7a:be:72:66:00:95:f3:c2:2f:c0:75:19:aa:8b:38:e0:72:
         ff:d3:d1:96:ae:48:f4:71:89:86:8e:40:e3:c0:28:91:8c:00:
         ee:f5:96:44:5f:bf:6b:3d:0f:f9:87:87:dc:a3:ee:7e:3f:5f:
         40:1b:c0:c1:b5:2c:8a:a8:bc:16:36:25:b1:32:1f:38:86:75:
         93:0e:4a:6d:4d:02:95:bc:7e:75:34:26:87:17:69:74:c7:1f:
         23:fd:81:34:9e:3e:59:19:bc:7b:fe:46:a1:d4:6d:87:62:4c:
         2c:53:42:f0:6f:9b:ca:48:13:4e:7b:ce:e0:00:c1:d8:d7:a8:
         18:75:7e:b9:56:04:b8:c4:ab:bb:d4:6f:d9:a1:4f:fd:f7:e1:
         20:6f:ef:38:cc:4a:e0:e0:08:fa:49:68:31:f3:aa:29:9e:78:
         75:33:ea:4b:1f:7c:e6:38:cf:b7:0c:94:74:64:98:fe:c1:f4:
         3f:02:70:89:9d:ac:83:1f:f7:5a:ad:0a:61:2b:fd:ce:aa:19:
         ab:48:0c:3d:e6:ac:08:e6:99:ca:81:51:2e:05:d5:66:e9:38:
         5e:50:69:d8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJimwnms4a9ZkNfFBGdsGawAc/1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNTAzMDUyMTU1MjhaFw0yNjAzMDQyMjAwMjhaMDMxMTAvBgNV
BAMTKDhGNjI0M0E4N0NBODlDOUNCNDE5NkE4QjJFQjRERkYxMEFDQkE3MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUqO6iwVejjV3CtGfDb9RlfRD
welubGa5qB/nImj0KsBV2hv74K8S/RM//xGgcG3vnhq6vmFyjvz+PiEXjQCy5d8m
fLFfFQFHldfPIXZ6VmNevbW5SuAVcSZRtymN41JBJQuPWFxFA9KGH21FziGKb/tz
i++iyedI+OvGBGFUtG8/haZZA0V+7mIsLsPlzOziGEVKbeXv+11U3Urjov6cXKL8
W3Z3Tcgi0NPnJ/BZ1q906u3uYr+NLEqEa2NTQZ1vnrxQlfmyezbb1ceUAlaHIdqO
QBkQkPAV2QKTY4UDbOMHAqwEN7AZw4fBVwNypRB1EWNHYnegHD+nW4sAezZrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUj2JDqHyonJy0GWqLLrTf8QrLpyAwHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKM0xVc0R4VktURWZneThtY0NIZXNxck54THNra0t6cWhFcGdRQ1Y2cFpzLzEv
MzIzODMwMzQzYTM4MzUzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzMzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASFZDANBgkqhkiG9w0BAQsFAAOCAQEAZkWorfL2
yruYnOPuv7oMxnh6QH9+efvdrTcKGex61rdI4V+tw3q+cmYAlfPCL8B1GaqLOOBy
/9PRlq5I9HGJho5A48AokYwA7vWWRF+/az0P+YeH3KPufj9fQBvAwbUsiqi8FjYl
sTIfOIZ1kw5KbU0Clbx+dTQmhxdpdMcfI/2BNJ4+WRm8e/5GodRth2JMLFNC8G+b
ykgTTnvO4ADB2NeoGHV+uVYEuMSru9Rv2aFP/ffhIG/vOMxK4OAI+kloMfOqKZ54
dTPqSx985jjPtwyUdGSY/sH0PwJwiZ2sgx/3Wq0KYSv9zqoZq0gMPeasCOaZyoFR
LgXVZuk4XlBp2A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:59 2025 by rpki-client