Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          ipeWZ+NL2kVcSha4uBb9XO01z6zCvFnqypE7yibg/hQ=
Subject key identifier:   B0:A1:E9:3E:83:7D:1A:27:D8:67:DB:A2:D3:6B:F3:B6:6F:52:1C:A0
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7738677E59BC2707509A9C7F9183D0432B271B58
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 19:08:11 +0000
ROA not before:           Mon 13 Jan 2025 19:03:11 +0000
ROA not after:            Mon 12 Jan 2026 19:08:11 +0000
asID:                     268144
IP address blocks:        2804:58b0:12c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:38:67:7e:59:bc:27:07:50:9a:9c:7f:91:83:d0:43:2b:27:1b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 19:03:11 2025 GMT
            Not After : Jan 12 19:08:11 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:3e:46:5a:9d:cb:0b:3b:50:9b:9d:de:d0:
                    b6:8d:29:ab:0a:af:d9:0c:60:ec:97:d1:17:c5:3f:
                    bb:a9:40:92:10:0b:2a:bf:3a:d2:fd:d6:a6:18:6e:
                    d4:53:e5:a3:87:2e:bc:d0:22:ae:ee:c6:20:8a:79:
                    78:e9:b5:1e:1e:45:33:ef:d9:d0:9a:84:6c:7e:c3:
                    54:ae:da:d4:6f:31:e0:05:9f:d8:e9:b5:ef:37:a2:
                    31:64:ad:c4:3a:13:81:9d:45:ad:1d:36:b0:95:dc:
                    ac:dd:94:ed:3f:bf:d6:b9:95:ef:b8:99:07:4e:5f:
                    b9:24:b4:63:09:81:c9:92:18:07:54:cf:64:37:dc:
                    00:14:08:c9:d7:de:76:19:c8:b8:31:73:19:83:fb:
                    d0:eb:c6:e5:87:11:8e:23:e7:87:66:0b:b8:0d:8d:
                    8d:b4:51:39:92:24:f7:9e:f7:6f:f5:55:25:dd:7d:
                    08:07:df:1b:16:65:1b:db:6b:55:00:57:cb:31:ac:
                    d2:60:d4:f9:20:5d:73:7b:f9:ed:03:b6:ce:88:05:
                    4e:6f:17:8b:30:ff:c4:97:c6:01:fa:31:25:2d:20:
                    0a:a1:01:7f:7a:ea:c6:90:02:b9:ee:ec:cb:74:a5:
                    c2:a6:5e:fe:b4:2b:db:da:ff:ef:4c:82:1d:18:19:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A1:E9:3E:83:7D:1A:27:D8:67:DB:A2:D3:6B:F3:B6:6F:52:1C:A0
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3132633a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:12c::/46

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:29:04:53:c4:f5:44:13:f6:91:76:6a:26:e6:3c:92:97:
         cb:b3:6f:e3:6a:d0:64:0b:a6:04:71:99:6b:9d:13:37:9d:60:
         bc:4b:29:82:29:a5:33:43:6a:1f:5e:1a:77:32:65:6a:a9:75:
         b0:da:f6:70:ac:60:16:62:0a:2c:b1:11:5f:41:2f:61:c5:e4:
         92:0f:77:86:81:8f:d3:2c:1c:a0:d7:cf:69:ec:89:bd:90:0d:
         65:49:47:66:8e:37:6f:80:42:4b:bd:94:9b:25:38:7c:0c:da:
         4f:ee:22:69:41:49:fc:61:c2:7d:ea:fb:e5:6f:3c:be:6c:fb:
         83:48:e3:a7:f8:40:df:2e:df:68:f0:a4:a4:ea:56:00:37:0e:
         9b:4c:4b:91:33:99:9b:73:64:ee:20:68:80:5e:84:c9:c8:4a:
         c7:22:e0:33:c4:e9:98:ee:0f:45:1d:a4:46:56:59:a0:76:ce:
         ed:34:ce:7c:eb:3d:a8:da:d5:c3:13:7c:1e:98:7b:08:e1:de:
         8f:fb:df:fe:88:1b:85:1f:6e:f6:ed:2a:4c:21:57:12:6c:48:
         d4:ec:4a:89:8f:a9:89:8e:aa:c5:c7:7d:0e:fa:49:da:86:16:
         91:96:d4:8a:3d:ce:96:8b:a6:92:9d:1e:32:3b:57:71:5f:64:
         74:81:8c:ef
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUdzhnflm8JwdQmpx/kYPQQysnG1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTAxMTMxOTAzMTFaFw0yNjAxMTIxOTA4MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOURCNjNFNDY1QTlEQ0IwQjNC
NTA5QjlEREVEMEI2OEQyOUFCMEFBRkQ5MEM2MEVDOTdEMTE3QzUzRkJCQTk0MDky
MTAwQjJBQkYzQUQyRkRENkE2MTg2RUQ0NTNFNUEzODcyRUJDRDAyMkFFRUVDNjIw
OEE3OTc4RTlCNTFFMUU0NTMzRUZEOUQwOUE4NDZDN0VDMzU0QUVEQUQ0NkYzMUUw
MDU5RkQ4RTlCNUVGMzdBMjMxNjRBREM0M0ExMzgxOUQ0NUFEMUQzNkIwOTVEQ0FD
REQ5NEVEM0ZCRkQ2Qjk5NUVGQjg5OTA3NEU1RkI5MjRCNDYzMDk4MUM5OTIxODA3
NTRDRjY0MzdEQzAwMTQwOEM5RDdERTc2MTlDOEI4MzE3MzE5ODNGQkQwRUJDNkU1
ODcxMThFMjNFNzg3NjYwQkI4MEQ4RDhEQjQ1MTM5OTIyNEY3OUVGNzZGRjU1NTI1
REQ3RDA4MDdERjFCMTY2NTFCREI2QjU1MDA1N0NCMzFBQ0QyNjBENEY5MjA1RDcz
N0JGOUVEMDNCNkNFODgwNTRFNkYxNzhCMzBGRkM0OTdDNjAxRkEzMTI1MkQyMDBB
QTEwMTdGN0FFQUM2OTAwMkI5RUVFQ0NCNzRBNUMyQTY1RUZFQjQyQkRCREFGRkVG
NEM4MjFEMTgxOTE5MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnbY+Rlqdyws7UJud3tC2jSmrCq/ZDGDsl9EXxT+7qUCSEAsqvzrS
/damGG7UU+Wjhy680CKu7sYginl46bUeHkUz79nQmoRsfsNUrtrUbzHgBZ/Y6bXv
N6IxZK3EOhOBnUWtHTawldys3ZTtP7/WuZXvuJkHTl+5JLRjCYHJkhgHVM9kN9wA
FAjJ1952Gci4MXMZg/vQ68blhxGOI+eHZgu4DY2NtFE5kiT3nvdv9VUl3X0IB98b
FmUb22tVAFfLMazSYNT5IF1ze/ntA7bOiAVObxeLMP/El8YB+jElLSAKoQF/eurG
kAK57uzLdKXCpl7+tCvb2v/vTIIdGBkZOQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FLCh6T6DfRon2GfbotNr87ZvUhygMB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzMyMzgzMDM0M2EzNTM4NjIzMDNh
MzEzMjYzM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIwMzIzNjM4MzEzNDM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcCKARYsAEsMA0GCSqGSIb3DQEBCwUAA4IBAQBLqSkEU8T1RBP2kXZqJuY8
kpfLs2/jatBkC6YEcZlrnRM3nWC8SymCKaUzQ2ofXhp3MmVqqXWw2vZwrGAWYgos
sRFfQS9hxeSSD3eGgY/TLByg189p7Im9kA1lSUdmjjdvgEJLvZSbJTh8DNpP7iJp
QUn8YcJ96vvlbzy+bPuDSOOn+EDfLt9o8KSk6lYANw6bTEuRM5mbc2TuIGiAXoTJ
yErHIuAzxOmY7g9FHaRGVlmgds7tNM586z2o2tXDE3wemHsI4d6P+9/+iBuFH272
7SpMIVcSbEjU7EqJj6mJjqrFx30O+knahhaRltSKPc6Wi6aSnR4yO1dxX2R0gYzv
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:54 2025 by rpki-client