Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          iUrNXyAeIlauJg0GvpPtrGNJLzPHdqvE7PfcQcay5Ww=
Subject key identifier:   47:30:8E:8C:AA:3D:1C:86:75:54:8A:0D:79:CD:8E:6B:5A:1B:76:15
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       4656A80EC08D60C921B4F6B4255D5A21EF2D58CE
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:30 +0000
ROA not before:           Thu 06 Mar 2025 08:15:30 +0000
ROA not after:            Thu 05 Mar 2026 08:20:30 +0000
asID:                     263146
IP address blocks:        2804:1778:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:56:a8:0e:c0:8d:60:c9:21:b4:f6:b4:25:5d:5a:21:ef:2d:58:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:30 2025 GMT
            Not After : Mar  5 08:20:30 2026 GMT
        Subject: CN=47308E8CAA3D1C8675548A0D79CD8E6B5A1B7615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:35:0a:6e:da:92:65:4f:e7:ea:f0:1b:77:
                    82:62:3f:e3:af:12:89:ad:91:5d:b5:3e:e8:88:3c:
                    68:1f:59:80:a4:f5:51:f7:7c:50:0f:55:6b:80:03:
                    43:eb:0d:69:2e:f9:f4:c2:f6:e5:32:e3:74:20:99:
                    a2:35:6e:1d:43:ee:c9:5e:d5:f9:dc:3e:85:1e:88:
                    6b:f5:b4:19:6d:c2:74:0f:d6:78:d9:74:4a:55:7b:
                    b9:2a:c2:82:e6:0b:cc:68:b7:3f:71:1b:ae:64:a9:
                    52:8f:4e:96:06:e3:67:ec:61:87:cc:bc:52:40:16:
                    ad:77:9e:a8:2e:8e:c0:62:2b:39:2f:3f:e6:6d:5b:
                    78:4f:ac:88:81:6d:89:6f:d3:df:be:9c:01:6c:5c:
                    cb:57:65:e8:28:4a:43:da:ff:48:f0:70:b0:a6:4e:
                    04:27:a9:e8:63:99:fa:5d:ce:18:0c:59:94:6b:d6:
                    5a:e8:8c:32:af:d4:98:91:e2:55:ba:04:fe:39:c6:
                    ae:c5:ec:c9:d9:4a:74:c5:73:a0:c6:08:75:0a:54:
                    c8:5e:5a:44:87:d5:9d:05:62:93:d0:70:68:b4:6f:
                    f1:bf:8a:4c:1d:97:a0:71:b8:02:5e:d9:f6:01:fb:
                    95:7d:4c:6f:b5:62:85:ed:1b:62:35:90:b8:48:39:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:30:8E:8C:AA:3D:1C:86:75:54:8A:0D:79:CD:8E:6B:5A:1B:76:15
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         26:be:85:4e:97:d7:74:b8:19:ef:6e:7f:01:84:79:8b:25:2e:
         9a:b2:43:77:c4:2f:c8:50:ee:30:33:dd:73:a4:41:1c:86:92:
         56:ba:11:f5:3b:0c:c3:f1:88:0c:9b:16:d1:62:94:79:8b:0b:
         28:33:c9:21:75:b3:e4:07:b5:b8:0a:e5:7a:ed:57:a2:03:b8:
         a4:a0:67:e3:11:3f:fd:08:ac:86:7c:f5:85:92:2f:30:36:2a:
         8b:5f:36:c7:03:4f:82:37:0b:2b:aa:05:f5:69:f7:2d:e3:f5:
         d8:f0:f8:af:66:17:66:38:3b:05:6a:59:a5:67:16:07:2b:00:
         5d:48:e2:f0:c6:aa:61:50:b2:25:c2:5d:ee:ff:81:46:58:36:
         a5:3f:aa:4f:7f:9f:ea:22:d5:a1:bc:8b:63:98:ff:2e:0f:48:
         ca:13:b2:f5:d3:e6:90:d5:06:50:97:86:da:b3:e6:07:bb:32:
         58:8c:3c:85:31:3f:86:28:52:27:90:00:ae:71:bf:5b:fc:72:
         85:79:32:38:83:44:b2:5d:43:5a:c9:1f:06:07:01:af:92:8a:
         7a:93:c9:63:8d:e5:8d:0c:f9:79:a7:13:43:1d:78:a7:47:38:
         d2:0c:c6:2b:dd:65:8b:f4:00:4a:a0:2a:e1:31:9a:03:17:65:
         ad:17:16:e6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURlaoDsCNYMkhtPa0JV1aIe8tWM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF
OUIzRjQ5MzAeFw0yNTAzMDYwODE1MzBaFw0yNjAzMDUwODIwMzBaMDMxMTAvBgNV
BAMTKDQ3MzA4RThDQUEzRDFDODY3NTU0OEEwRDc5Q0Q4RTZCNUExQjc2MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HDUKbtqSZU/n6vAbd4JiP+Ov
EomtkV21PuiIPGgfWYCk9VH3fFAPVWuAA0PrDWku+fTC9uUy43QgmaI1bh1D7sle
1fncPoUeiGv1tBltwnQP1njZdEpVe7kqwoLmC8xotz9xG65kqVKPTpYG42fsYYfM
vFJAFq13nqgujsBiKzkvP+ZtW3hPrIiBbYlv09++nAFsXMtXZegoSkPa/0jwcLCm
TgQnqehjmfpdzhgMWZRr1lrojDKv1JiR4lW6BP45xq7F7MnZSnTFc6DGCHUKVMhe
WkSH1Z0FYpPQcGi0b/G/ikwdl6BxuAJe2fYB+5V9TG+1YoXtG2I1kLhIOSzXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURzCOjKo9HIZ1VIoNec2Oa1obdhUwHwYDVR0j
BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG
NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv
MzIzODMwMzQzYTMxMzczNzM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEF3jAMA0GCSqGSIb3DQEBCwUA
A4IBAQAmvoVOl9d0uBnvbn8BhHmLJS6askN3xC/IUO4wM91zpEEchpJWuhH1OwzD
8YgMmxbRYpR5iwsoM8khdbPkB7W4CuV67VeiA7ikoGfjET/9CKyGfPWFki8wNiqL
XzbHA0+CNwsrqgX1afct4/XY8PivZhdmODsFalmlZxYHKwBdSOLwxqphULIlwl3u
/4FGWDalP6pPf5/qItWhvItjmP8uD0jKE7L10+aQ1QZQl4bas+YHuzJYjDyFMT+G
KFInkACucb9b/HKFeTI4g0SyXUNayR8GBwGvkop6k8ljjeWNDPl5pxNDHXinRzjS
DMYr3WWL9ABKoCrhMZoDF2WtFxbm
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:06:08 2025 by rpki-client