Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa
File:                     323830343a353862303a3a2f33322d3334203d3e20323638313434.roa (raw, json)
Hash identifier:          wBBUE9h2wPpFYLVUut6Gg93hpoKmz78+ep00hhLRDjo=
Subject key identifier:   45:F2:6B:17:2C:FD:F7:CF:B3:31:4C:CF:9F:F1:41:F3:1A:15:5E:59
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       038E297BA8B1277EF284C9B29C948E871F9216CB
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:58:48 +0000
ROA not before:           Mon 13 Jan 2025 12:53:48 +0000
ROA not after:            Mon 12 Jan 2026 12:58:48 +0000
asID:                     268144
IP address blocks:        2804:58b0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8e:29:7b:a8:b1:27:7e:f2:84:c9:b2:9c:94:8e:87:1f:92:16:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:53:48 2025 GMT
            Not After : Jan 12 12:58:48 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:0f:91:8a:bd:21:52:9b:52:e8:03:92:29:
                    c8:2a:3a:4c:c9:6a:53:05:70:0e:55:2d:7f:49:cf:
                    a5:3c:3a:59:d4:3b:d7:78:0a:d8:30:da:fd:39:7b:
                    3b:b2:7c:a7:a7:a3:2f:38:d7:3c:e0:d7:c7:55:b8:
                    7d:c1:00:28:17:a7:a9:94:9e:78:ec:5c:42:61:75:
                    34:af:d1:fb:84:8e:33:15:ad:b6:53:59:57:51:18:
                    72:58:c8:a6:d9:77:5d:28:3d:cd:68:51:1c:f1:73:
                    cd:88:c0:1f:2b:f1:e3:e3:a7:d1:90:f4:d8:63:89:
                    fc:03:62:cf:b3:7e:8a:ad:77:ca:5d:aa:52:61:37:
                    8f:fc:18:36:0f:d7:62:ad:3c:16:39:78:0a:28:e5:
                    7e:6d:f6:7b:2f:66:e8:60:1a:fc:9b:d9:e1:70:f8:
                    60:75:8d:da:31:10:14:b4:35:77:8a:c6:58:d5:0a:
                    1f:1f:93:93:ca:e3:24:b4:60:2a:47:7e:68:5e:de:
                    33:9d:48:7e:2f:13:6f:73:c1:7d:ba:f0:a7:38:c1:
                    89:4b:9b:37:4e:e8:25:e9:44:1a:41:c3:6b:f4:13:
                    f0:e2:0b:90:1f:81:0e:d8:81:45:6e:35:91:07:cb:
                    dd:f5:c5:f7:b6:f3:f5:4a:b6:6a:27:5e:a0:da:0d:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:6B:17:2C:FD:F7:CF:B3:31:4C:CF:9F:F1:41:F3:1A:15:5E:59
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/323830343a353862303a3a2f33322d3334203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:25:8e:94:da:8e:99:f6:13:9e:e4:43:2e:55:38:5d:54:a8:
         1a:df:16:9a:66:e0:e3:32:6b:98:b9:91:ff:4c:9d:d8:75:a3:
         68:90:07:0f:52:26:66:c6:6f:c7:23:5e:94:b5:9a:f0:2e:64:
         d2:b8:90:c7:15:41:f5:cb:79:cb:e0:43:b2:0f:f3:bc:c6:85:
         aa:f3:74:aa:2e:d0:43:fd:bd:37:2a:89:f0:70:3b:0b:bb:68:
         e2:e6:4f:fc:79:73:bb:49:82:99:c5:51:93:05:3f:b3:0c:22:
         12:f0:0e:c6:9e:d5:4f:d8:6b:31:82:99:9f:29:5f:a7:cd:01:
         43:cb:fc:44:18:8e:ed:42:19:8e:85:69:60:87:12:ee:6b:07:
         ec:b0:39:d7:d3:78:85:0f:6e:69:d9:41:2b:26:ab:7a:07:66:
         19:ca:e0:82:9f:46:5e:66:b6:ee:0a:e3:20:51:5f:59:3f:11:
         79:82:b1:43:4c:2f:15:6e:a0:a0:cf:b1:44:9b:8c:13:c0:73:
         c6:90:ad:d3:11:a0:6d:fc:35:27:21:9d:c3:1f:ca:76:d3:1f:
         94:bf:cc:d1:23:f7:5d:2b:4c:35:e7:2a:a1:de:ee:46:82:5d:
         30:bf:b9:c9:de:4c:92:62:99:65:54:ae:e4:bd:91:ab:66:47:
         01:15:bd:44
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUA44pe6ixJ37yhMmynJSOhx+SFsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTAxMTMxMjUzNDhaFw0yNjAxMTIxMjU4NDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ4NDBGOTE4QUJEMjE1MjlC
NTJFODAzOTIyOUM4MkEzQTRDQzk2QTUzMDU3MDBFNTUyRDdGNDlDRkE1M0MzQTU5
RDQzQkQ3NzgwQUQ4MzBEQUZEMzk3QjNCQjI3Q0E3QTdBMzJGMzhENzNDRTBEN0M3
NTVCODdEQzEwMDI4MTdBN0E5OTQ5RTc4RUM1QzQyNjE3NTM0QUZEMUZCODQ4RTMz
MTVBREI2NTM1OTU3NTExODcyNThDOEE2RDk3NzVEMjgzRENENjg1MTFDRjE3M0NE
ODhDMDFGMkJGMUUzRTNBN0QxOTBGNEQ4NjM4OUZDMDM2MkNGQjM3RThBQUQ3N0NB
NURBQTUyNjEzNzhGRkMxODM2MEZENzYyQUQzQzE2Mzk3ODBBMjhFNTdFNkRGNjdC
MkY2NkU4NjAxQUZDOUJEOUUxNzBGODYwNzU4RERBMzExMDE0QjQzNTc3OEFDNjU4
RDUwQTFGMUY5MzkzQ0FFMzI0QjQ2MDJBNDc3RTY4NUVERTMzOUQ0ODdFMkYxMzZG
NzNDMTdEQkFGMEE3MzhDMTg5NEI5QjM3NEVFODI1RTk0NDFBNDFDMzZCRjQxM0Yw
RTIwQjkwMUY4MTBFRDg4MTQ1NkUzNTkxMDdDQkRERjVDNUY3QjZGM0Y1NEFCNjZB
Mjc1RUEwREEwRDc5NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApIQPkYq9IVKbUugDkinIKjpMyWpTBXAOVS1/Sc+lPDpZ1DvXeArY
MNr9OXs7snynp6MvONc84NfHVbh9wQAoF6eplJ547FxCYXU0r9H7hI4zFa22U1lX
URhyWMim2XddKD3NaFEc8XPNiMAfK/Hj46fRkPTYY4n8A2LPs36KrXfKXapSYTeP
/Bg2D9dirTwWOXgKKOV+bfZ7L2boYBr8m9nhcPhgdY3aMRAUtDV3isZY1QofH5OT
yuMktGAqR35oXt4znUh+LxNvc8F9uvCnOMGJS5s3Tugl6UQaQcNr9BPw4guQH4EO
2IFFbjWRB8vd9cX3tvP1SrZqJ16g2g15YwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FEXyaxcs/ffPszFMz5/xQfMaFV5ZMB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzMyMzgzMDM0M2EzNTM4NjIzMDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzODMxMzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
WLAwDQYJKoZIhvcNAQELBQADggEBAJUljpTajpn2E57kQy5VOF1UqBrfFppm4OMy
a5i5kf9Mndh1o2iQBw9SJmbGb8cjXpS1mvAuZNK4kMcVQfXLecvgQ7IP87zGharz
dKou0EP9vTcqifBwOwu7aOLmT/x5c7tJgpnFUZMFP7MMIhLwDsae1U/YazGCmZ8p
X6fNAUPL/EQYju1CGY6FaWCHEu5rB+ywOdfTeIUPbmnZQSsmq3oHZhnK4IKfRl5m
tu4K4yBRX1k/EXmCsUNMLxVuoKDPsUSbjBPAc8aQrdMRoG38NSchncMfynbTH5S/
zNEj910rTDXnKqHe7kaCXTC/ucneTJJimWVUruS9katmRwEVvUQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:00 2025 by rpki-client