Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
File:                     323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa (raw, json)
Hash identifier:          oe3ruNUsfDd2s3+AA0koysjl80JKGwECzZS/5oRG19I=
Subject key identifier:   73:2A:5A:4F:22:B7:C7:15:BD:10:B8:4A:83:D1:40:57:20:DE:27:BF
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       7F2946CB57FD9A49FF9C044B1EE6BE5B3F7B91B6
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:43 +0000
ROA not before:           Thu 06 Mar 2025 02:47:43 +0000
ROA not after:            Thu 05 Mar 2026 02:52:43 +0000
asID:                     266635
IP address blocks:        2804:3f08:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:29:46:cb:57:fd:9a:49:ff:9c:04:4b:1e:e6:be:5b:3f:7b:91:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:43 2025 GMT
            Not After : Mar  5 02:52:43 2026 GMT
        Subject: CN=732A5A4F22B7C715BD10B84A83D1405720DE27BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:26:d9:c0:d1:df:e7:7a:a6:83:d4:d8:cf:
                    42:c8:93:e5:df:30:f6:5f:cf:55:ae:e9:4d:14:04:
                    ee:b3:46:57:ed:cd:d3:7e:15:7e:0a:84:b1:f8:1b:
                    4b:b6:cd:e3:f5:a0:93:00:c0:53:75:57:f8:e2:6b:
                    2c:28:6f:8f:fa:44:93:85:cc:18:b1:bb:42:d4:be:
                    fb:7f:2c:08:37:71:39:3c:79:78:9c:a7:39:a9:ca:
                    3b:17:cb:7e:93:f3:ab:18:1c:23:7e:b4:19:c2:77:
                    ee:f8:ce:75:e5:11:7e:54:7d:a6:92:51:36:7e:ce:
                    22:51:5c:e6:c4:2b:c2:6a:3f:e4:4e:42:c7:4f:3f:
                    f7:3a:78:67:65:23:4c:0a:87:3d:68:75:42:d6:1f:
                    32:80:8d:a9:66:11:bf:5f:0a:c2:c2:a6:3a:7b:b3:
                    87:66:d2:bc:4a:fa:ab:f6:18:5b:a2:7e:db:be:b2:
                    e8:bd:c2:b3:32:b4:07:43:7f:d0:3d:cd:f8:a2:4e:
                    08:11:94:73:3b:b3:7c:dd:33:6f:c4:de:f4:a6:ad:
                    de:64:5d:3b:ca:60:ac:69:be:95:c6:9a:51:4f:60:
                    35:c6:c4:c5:d3:ee:b2:b7:18:c4:18:46:bd:bb:cf:
                    5a:61:85:53:33:d1:24:69:27:88:e3:53:fa:88:0d:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:5A:4F:22:B7:C7:15:BD:10:B8:4A:83:D1:40:57:20:DE:27:BF
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:66:08:67:94:91:5d:74:24:7f:de:72:7c:78:28:4b:58:
         39:a5:87:6b:04:8d:f7:08:50:2f:9d:12:39:16:f6:4c:a6:7e:
         33:b3:7f:f0:7c:bb:4d:d6:54:b0:7b:a3:c0:a3:08:25:d6:25:
         58:54:59:a8:a0:f3:ec:ec:db:9a:c0:80:2a:e3:09:79:d3:e0:
         b6:09:67:d0:e0:4e:68:95:0d:67:26:60:0c:ab:a0:c1:52:1c:
         85:94:4f:01:8f:b4:23:77:35:6a:eb:a8:9a:1d:44:75:8b:48:
         7a:39:2d:d7:17:49:c1:a3:e3:f3:d5:c4:37:92:b7:ba:93:dd:
         a6:0b:10:6a:ac:76:39:f6:b1:93:0b:55:3c:e6:c7:50:cd:08:
         60:49:4d:f5:06:17:17:62:5e:69:01:c6:d4:a2:10:33:b8:f3:
         d7:40:e7:9e:70:ce:94:b2:cb:54:c6:32:57:8f:bc:73:6b:88:
         e1:ef:ed:2c:0b:95:e6:a6:a3:ca:20:e3:53:cb:23:14:18:16:
         2c:fb:2a:48:4f:f1:47:1b:2a:36:18:a5:24:cb:aa:8a:c4:33:
         50:92:33:70:48:e6:49:fe:31:ab:17:ed:fc:ba:c7:a0:df:91:
         d4:32:a5:fa:b0:b9:48:ab:b3:f4:26:af:5c:46:aa:46:7d:b1:
         9c:2b:6d:12
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfylGy1f9mkn/nARLHua+Wz97kbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNTAzMDYwMjQ3NDNaFw0yNjAzMDUwMjUyNDNaMDMxMTAvBgNV
BAMTKDczMkE1QTRGMjJCN0M3MTVCRDEwQjg0QTgzRDE0MDU3MjBERTI3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JybZwNHf53qmg9TYz0LIk+Xf
MPZfz1Wu6U0UBO6zRlftzdN+FX4KhLH4G0u2zeP1oJMAwFN1V/jiaywob4/6RJOF
zBixu0LUvvt/LAg3cTk8eXicpzmpyjsXy36T86sYHCN+tBnCd+74znXlEX5UfaaS
UTZ+ziJRXObEK8JqP+ROQsdPP/c6eGdlI0wKhz1odULWHzKAjalmEb9fCsLCpjp7
s4dm0rxK+qv2GFuiftu+sui9wrMytAdDf9A9zfiiTggRlHM7s3zdM2/E3vSmrd5k
XTvKYKxpvpXGmlFPYDXGxMXT7rK3GMQYRr27z1phhVMz0SRpJ4jjU/qIDR7zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcypaTyK3xxW9ELhKg9FAVyDeJ78wHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzIzODMwMzQzYTMzNjYzMDM4M2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEPwjAMA0GCSqGSIb3DQEBCwUA
A4IBAQClrWYIZ5SRXXQkf95yfHgoS1g5pYdrBI33CFAvnRI5FvZMpn4zs3/wfLtN
1lSwe6PAowgl1iVYVFmooPPs7NuawIAq4wl50+C2CWfQ4E5olQ1nJmAMq6DBUhyF
lE8Bj7QjdzVq66iaHUR1i0h6OS3XF0nBo+Pz1cQ3kre6k92mCxBqrHY59rGTC1U8
5sdQzQhgSU31BhcXYl5pAcbUohAzuPPXQOeecM6UsstUxjJXj7xza4jh7+0sC5Xm
pqPKIONTyyMUGBYs+ypIT/FHGyo2GKUky6qKxDNQkjNwSOZJ/jGrF+38useg35HU
MqX6sLlIq7P0Jq9cRqpGfbGcK20S
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:04 2025 by rpki-client