Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa
File:                     323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa (raw, json)
Hash identifier:          pf/yO7z3g5mvrGa61U+NDMdoT5GxUbMQ76duUJoVubc=
Subject key identifier:   86:F7:13:AE:58:63:D4:5A:66:6C:DF:27:6B:22:23:BE:34:7C:BE:FD
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       57333D55E1E81D79DE6A96BFA84F412E9D974941
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa
Signing time:             Sun 22 Dec 2024 12:36:49 +0000
ROA not before:           Sun 22 Dec 2024 12:31:49 +0000
ROA not after:            Sun 21 Dec 2025 12:36:49 +0000
asID:                     273556
IP address blocks:        2804:9080:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:33:3d:55:e1:e8:1d:79:de:6a:96:bf:a8:4f:41:2e:9d:97:49:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Dec 22 12:31:49 2024 GMT
            Not After : Dec 21 12:36:49 2025 GMT
        Subject: CN=86F713AE5863D45A666CDF276B2223BE347CBEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:12:76:1e:f7:16:d1:af:0f:55:d4:8e:81:
                    dc:7a:3a:ce:53:ae:b4:ef:72:2c:ea:2b:e2:be:60:
                    8e:dc:7b:23:7a:a3:c4:24:63:34:ec:92:9b:9d:38:
                    f8:30:d7:ae:7f:94:88:5e:0a:42:e5:9a:3e:c3:95:
                    47:cf:9c:dd:b9:c3:4b:5f:7f:be:2f:7e:95:e4:f4:
                    49:64:b2:33:ac:06:d5:55:b1:59:b5:e8:0c:4d:ad:
                    47:71:3a:3a:77:5f:fd:b8:8a:aa:2f:76:86:1f:1f:
                    a5:03:4b:fa:bf:b4:70:75:7d:01:e8:e8:ad:61:50:
                    07:3d:e0:e4:63:4c:ec:e5:9f:46:59:4a:b0:a0:67:
                    af:be:c3:27:a7:69:d9:3d:40:eb:f2:92:90:7e:ec:
                    92:21:d0:06:c5:78:00:59:fd:dd:64:ce:43:dc:9e:
                    f8:90:3b:0f:52:aa:23:32:05:87:81:a7:a8:24:1e:
                    6d:df:a7:dd:09:6d:f5:98:72:62:3c:8f:03:2f:ce:
                    f8:9f:3c:7c:53:f7:38:58:b5:03:34:80:74:3d:e9:
                    de:a7:bb:18:ed:6b:4c:b7:f3:01:02:48:a8:01:73:
                    26:c4:55:8b:6c:29:60:b9:83:1d:89:f9:57:43:25:
                    92:95:32:3c:99:7a:83:a0:a0:6c:b9:fb:17:3c:c5:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:13:AE:58:63:D4:5A:66:6C:DF:27:6B:22:23:BE:34:7C:BE:FD
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33332d3333203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d1:00:4f:63:a5:98:c0:24:9d:87:11:55:97:5e:ce:7b:cf:2a:
         f5:d6:07:1c:f0:4f:4c:a9:1c:97:fb:af:d0:05:b9:79:8c:7f:
         29:d8:64:d9:91:fd:a4:ee:aa:ca:bf:2e:de:60:cd:6c:95:05:
         16:90:30:d4:7a:50:10:3a:e0:3e:e1:de:ff:f5:02:be:b0:97:
         83:75:b7:20:31:ea:62:55:ce:96:75:d8:a7:e3:d8:c3:a7:33:
         67:76:59:65:f9:5e:ae:43:79:56:ad:31:63:2e:bb:3c:b9:6e:
         63:ef:ec:1a:2a:38:ea:55:50:ec:72:d4:a1:24:b0:58:03:65:
         75:7e:8f:14:45:ec:06:8f:24:e1:20:bc:67:a6:76:6f:6a:fe:
         0e:4a:82:b4:0a:b8:67:63:07:5f:88:f5:c8:7c:c3:66:d1:9d:
         8c:8e:01:c0:96:3e:15:e0:7b:19:4b:db:a6:42:16:a2:e5:c0:
         ca:a3:25:20:b9:8c:20:6a:68:b5:61:2e:94:d1:a3:8d:f0:d5:
         b0:a3:e5:26:40:9b:4b:7b:3b:7c:ba:42:26:0e:11:a1:da:f0:
         f7:f6:d7:5e:4b:db:3c:32:37:67:e9:de:c9:2f:32:ff:e9:9c:
         a2:a8:32:a3:ba:8a:f3:df:dd:18:f9:85:66:fa:6d:7c:b2:bd:
         37:5c:af:f9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVzM9VeHoHXneapa/qE9BLp2XSUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5MDU5QTZDRkM2RDhENDc4NEJENDY5OTkwNkRBNjZD
MjI3MUNEOTAeFw0yNDEyMjIxMjMxNDlaFw0yNTEyMjExMjM2NDlaMDMxMTAvBgNV
BAMTKDg2RjcxM0FFNTg2M0Q0NUE2NjZDREYyNzZCMjIyM0JFMzQ3Q0JFRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0xJ2HvcW0a8PVdSOgdx6Os5T
rrTvcizqK+K+YI7ceyN6o8QkYzTskpudOPgw165/lIheCkLlmj7DlUfPnN25w0tf
f74vfpXk9ElksjOsBtVVsVm16AxNrUdxOjp3X/24iqovdoYfH6UDS/q/tHB1fQHo
6K1hUAc94ORjTOzln0ZZSrCgZ6++wyenadk9QOvykpB+7JIh0AbFeABZ/d1kzkPc
nviQOw9SqiMyBYeBp6gkHm3fp90JbfWYcmI8jwMvzvifPHxT9zhYtQM0gHQ96d6n
uxjta0y38wECSKgBcybEVYtsKWC5gx2J+VdDJZKVMjyZeoOgoGy5+xc8xbPpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUhvcTrlhj1FpmbN8nayIjvjR8vv0wHwYDVR0j
BBgwFoAUlJBZps/G2NR4S9RpmQbaZsInHNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBaTVdYQ2tFWjduTFJIbkpNbWEza1I4VHdXOXlLYVQ0Y1Ryb0JoRG1E
ZzUvMC85NDkwNTlBNkNGQzZEOEQ0Nzg0QkQ0Njk5OTA2REE2NkMyMjcxQ0Q5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0OTA1OUE2Q0ZDNkQ4RDQ3
ODRCRDQ2OTk5MDZEQTY2QzIyNzFDRDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwWk1XWENrRVo3bkxSSG5KTW1hM2tSOFR3Vzl5S2FUNGNUcm9CaERtRGc1LzAv
MzIzODMwMzQzYTM5MzAzODMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEkICAMA0GCSqGSIb3DQEBCwUA
A4IBAQDRAE9jpZjAJJ2HEVWXXs57zyr11gcc8E9MqRyX+6/QBbl5jH8p2GTZkf2k
7qrKvy7eYM1slQUWkDDUelAQOuA+4d7/9QK+sJeDdbcgMepiVc6Wddin49jDpzNn
dlll+V6uQ3lWrTFjLrs8uW5j7+waKjjqVVDsctShJLBYA2V1fo8URewGjyThILxn
pnZvav4OSoK0CrhnYwdfiPXIfMNm0Z2MjgHAlj4V4HsZS9umQhai5cDKoyUguYwg
ami1YS6U0aON8NWwo+UmQJtLezt8ukImDhGh2vD39tdeS9s8Mjdn6d7JLzL/6Zyi
qDKjuorz390Y+YVm+m18sr03XK/5
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:45:56 2025 by rpki-client