Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3333203d3e203631373734.roa
File:                     323830343a313932343a3a2f33322d3333203d3e203631373734.roa (raw, json)
Hash identifier:          yJN7SZv7dvcggG8ojMq5/1lb5P6lZ5fbbzdE1Z3g4ec=
Subject key identifier:   15:3A:2B:81:58:71:AF:59:32:D3:3D:38:AF:07:91:B4:8E:79:C4:32
Certificate issuer:       /CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
Certificate serial:       4CD6072B4B1DC46D8B059F709F47C403D089AFF2
Authority key identifier: 0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3333203d3e203631373734.roa
Signing time:             Wed 05 Feb 2025 01:25:37 +0000
ROA not before:           Wed 05 Feb 2025 01:20:37 +0000
ROA not after:            Wed 04 Feb 2026 01:25:37 +0000
asID:                     61774
IP address blocks:        2804:1924::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d6:07:2b:4b:1d:c4:6d:8b:05:9f:70:9f:47:c4:03:d0:89:af:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
        Validity
            Not Before: Feb  5 01:20:37 2025 GMT
            Not After : Feb  4 01:25:37 2026 GMT
        Subject: CN=153A2B815871AF5932D33D38AF0791B48E79C432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:ea:44:1a:e2:cd:20:97:ce:4d:2c:85:89:
                    2f:bc:9f:75:ba:bb:e3:b5:d8:2e:e7:a3:bd:ea:dc:
                    e1:02:a9:76:77:25:30:2e:d0:ed:68:a2:db:b7:d4:
                    2d:58:3b:e4:10:a7:4e:81:2e:89:02:9c:0e:05:31:
                    ca:43:c1:c6:d0:12:61:c6:b5:ea:d4:4b:dc:86:ef:
                    fe:16:9e:33:90:66:63:8d:84:f0:f8:80:b0:21:14:
                    c5:7b:74:e2:61:1d:34:c4:0c:7c:d8:db:b1:d0:d5:
                    d1:df:c2:9d:fe:71:4c:39:9a:ee:d1:84:61:5e:db:
                    87:90:81:ac:28:01:21:28:6b:8b:fa:57:bb:95:96:
                    65:eb:a4:60:6c:b2:25:2b:e1:a4:24:f3:73:9e:4e:
                    e1:44:92:5c:38:72:49:8a:cf:f4:96:df:ee:b1:8f:
                    d5:97:23:86:82:00:d5:2e:af:e3:6e:e7:31:20:f9:
                    cb:cd:51:40:b7:8e:95:29:30:1a:5b:8b:fa:38:73:
                    01:13:64:dd:30:16:d6:cc:65:f4:24:11:8d:83:ef:
                    15:83:b7:5f:60:d2:a2:45:96:64:ed:38:21:f1:d3:
                    e5:cc:f0:6c:3a:fb:d2:cb:77:51:87:6e:9a:91:46:
                    77:fb:49:bb:7d:e6:69:1b:fe:1f:a3:5d:ad:2d:6e:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3A:2B:81:58:71:AF:59:32:D3:3D:38:AF:07:91:B4:8E:79:C4:32
            X509v3 Authority Key Identifier:
                keyid:0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a3a2f33322d3333203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:3a:14:8a:5c:ad:95:ba:35:48:a8:07:29:f4:75:59:b4:
         8d:8f:4c:f4:0c:d5:2b:83:43:8d:b6:f7:71:64:c3:c4:2f:e3:
         30:c9:f6:1b:df:90:df:6b:7b:3d:3e:94:ad:b6:89:7d:71:27:
         39:99:80:94:b0:1d:08:fa:82:b3:4d:d0:6b:09:71:8e:e6:ad:
         48:ee:8f:7b:41:78:d2:1e:ee:87:e5:7e:f6:d3:43:b5:38:2d:
         0d:4e:87:4c:ed:77:b2:65:d3:bf:df:d8:f1:f8:1d:63:b9:0e:
         83:9d:c5:cc:94:25:33:e6:40:cd:01:04:51:2e:5b:8b:4a:c4:
         99:83:06:7f:97:ee:89:f9:28:92:32:5f:9b:93:fe:a2:a1:16:
         1d:7c:76:4f:f4:c5:6e:0c:35:29:4c:23:92:b6:41:d6:e0:34:
         c5:ac:a9:71:25:e0:33:a9:76:3b:b3:7a:0b:31:d3:1f:b9:20:
         88:63:0d:83:16:2a:1d:07:40:0e:7c:9d:9b:04:98:2f:1b:87:
         5c:06:a7:e6:45:03:1b:6b:e0:5d:a4:a4:f3:61:21:13:7f:04:
         15:f2:ed:65:16:56:f0:40:fb:cb:2b:29:ae:5d:e0:66:14:02:
         b2:82:63:d9:e7:36:10:b3:79:d8:0a:34:78:b7:97:41:66:ba:
         57:cf:03:64
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTNYHK0sdxG2LBZ9wn0fEA9CJr/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM2QkY4QTNCMTU0QTM1NzlEQTAyMkNDRTQyQTBFNzMx
MUYxMzMyODAeFw0yNTAyMDUwMTIwMzdaFw0yNjAyMDQwMTI1MzdaMDMxMTAvBgNV
BAMTKDE1M0EyQjgxNTg3MUFGNTkzMkQzM0QzOEFGMDc5MUI0OEU3OUM0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU+pEGuLNIJfOTSyFiS+8n3W6
u+O12C7no73q3OECqXZ3JTAu0O1ootu31C1YO+QQp06BLokCnA4FMcpDwcbQEmHG
terUS9yG7/4WnjOQZmONhPD4gLAhFMV7dOJhHTTEDHzY27HQ1dHfwp3+cUw5mu7R
hGFe24eQgawoASEoa4v6V7uVlmXrpGBssiUr4aQk83OeTuFEklw4ckmKz/SW3+6x
j9WXI4aCANUur+Nu5zEg+cvNUUC3jpUpMBpbi/o4cwETZN0wFtbMZfQkEY2D7xWD
t19g0qJFlmTtOCHx0+XM8Gw6+9LLd1GHbpqRRnf7Sbt95mkb/h+jXa0tbqtFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFTorgVhxr1ky0z04rweRtI55xDIwHwYDVR0j
BBgwFoAUDGv4o7FUo1edoCLM5CoOcxHxMygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZvcExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5
SGovMC8wQzZCRjhBM0IxNTRBMzU3OURBMDIyQ0NFNDJBMEU3MzExRjEzMzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDNkJGOEEzQjE1NEEzNTc5
REEwMjJDQ0U0MkEwRTczMTFGMTMzMjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlmb3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzAv
MzIzODMwMzQzYTMxMzkzMjM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzYzMTM3
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGSQwDQYJKoZIhvcNAQELBQADggEBABi2OhSKXK2V
ujVIqAcp9HVZtI2PTPQM1SuDQ42293Fkw8Qv4zDJ9hvfkN9rez0+lK22iX1xJzmZ
gJSwHQj6grNN0GsJcY7mrUjuj3tBeNIe7oflfvbTQ7U4LQ1Oh0ztd7Jl07/f2PH4
HWO5DoOdxcyUJTPmQM0BBFEuW4tKxJmDBn+X7on5KJIyX5uT/qKhFh18dk/0xW4M
NSlMI5K2QdbgNMWsqXEl4DOpdjuzegsx0x+5IIhjDYMWKh0HQA58nZsEmC8bh1wG
p+ZFAxtr4F2kpPNhIRN/BBXy7WUWVvBA+8srKa5d4GYUArKCY9nnNhCzedgKNHi3
l0FmulfPA2Q=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:55 2025 by rpki-client