Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          iQ5cXhtkTKXIVNuYHEpM7L3+Y1Ovm+L8XjtgtlG61eE=
Subject key identifier:   98:53:7E:40:0F:CF:08:C1:FF:5D:E3:E0:B4:33:40:A3:D3:EF:A9:5A
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       5909111F19DE1F6CA266A587DE2DAB750E776C2C
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:31 +0000
ROA not before:           Thu 06 Mar 2025 00:55:31 +0000
ROA not after:            Thu 05 Mar 2026 01:00:31 +0000
asID:                     61637
IP address blocks:        2804:1c18:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:09:11:1f:19:de:1f:6c:a2:66:a5:87:de:2d:ab:75:0e:77:6c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:31 2025 GMT
            Not After : Mar  5 01:00:31 2026 GMT
        Subject: CN=98537E400FCF08C1FF5DE3E0B43340A3D3EFA95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:aa:02:ad:5a:9e:51:a9:49:95:9b:10:f1:
                    c7:55:cf:66:2f:9a:11:14:36:cd:95:a9:05:5d:3a:
                    e0:ab:cc:57:86:21:2d:2f:0c:45:bf:a9:62:0b:99:
                    78:63:f9:5e:2a:76:ae:8f:cd:a6:9c:ea:12:3e:49:
                    47:b9:b8:39:83:eb:cb:94:4d:62:2d:c7:2d:d4:15:
                    86:05:66:15:dd:59:9a:bc:49:1a:9e:e8:6f:22:e4:
                    25:b5:33:10:c9:cb:ba:a6:79:4f:7a:5d:68:f5:ab:
                    fb:46:0f:f5:5e:99:d5:5f:bd:b3:a4:7e:da:04:ff:
                    6d:95:db:9c:7a:dd:1a:fd:9d:bf:43:0b:48:92:1b:
                    f3:b7:92:2d:5e:58:77:b9:b2:a1:cd:fa:65:86:95:
                    08:d6:a6:8a:d3:44:77:be:64:30:db:98:22:82:3c:
                    c9:c8:99:88:ec:73:e7:6b:54:d8:61:aa:e3:9d:52:
                    21:35:e2:39:48:c5:f7:22:d8:00:f0:c3:de:34:6d:
                    a2:e1:42:b1:e4:4c:56:8c:cc:46:4c:7c:29:b9:cb:
                    be:e9:46:62:ba:f8:59:8a:ec:4c:3f:8a:df:1c:e9:
                    14:85:93:5b:67:ef:3f:ac:5d:1f:ce:2c:24:36:50:
                    32:97:91:b6:cb:99:68:a4:eb:fd:b5:1e:f6:c1:ef:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:53:7E:40:0F:CF:08:C1:FF:5D:E3:E0:B4:33:40:A3:D3:EF:A9:5A
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a363030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:77:3f:c3:ee:a8:bd:49:f6:c5:8b:36:7b:8b:27:1e:b2:
         d0:da:4b:49:6f:14:15:9f:4b:ca:37:79:08:33:ac:41:72:25:
         fa:56:cf:e8:b8:e4:09:bf:8b:52:e9:6f:c9:6a:36:23:89:e4:
         84:7d:c5:3f:41:1d:72:c6:b2:21:e2:e3:78:e6:af:36:e1:2e:
         ff:2d:77:06:7e:52:7a:bb:3b:89:ae:62:9f:09:c8:fa:03:2f:
         f8:15:9d:20:50:e1:5b:b5:4a:89:5b:e8:b7:d6:a6:14:af:7f:
         8a:42:db:b8:b2:1d:1d:e8:4c:1e:8e:29:0e:9a:78:e5:1b:04:
         c8:b9:92:7a:2b:1c:b5:53:7c:59:04:35:54:b7:fd:ef:b8:ef:
         f0:c0:30:50:27:43:9b:a4:d5:20:64:57:b0:e3:24:ea:1b:41:
         13:7d:5f:3a:80:11:e1:89:b7:03:af:a4:47:3a:c5:85:c7:53:
         15:1e:d7:89:1d:2e:db:0e:54:45:05:ee:1c:bd:48:66:7f:06:
         a6:15:50:4c:b0:ae:d0:6f:18:80:21:fc:13:7d:88:20:7a:1a:
         0b:77:a8:bd:0d:9f:d1:3b:90:69:20:a2:68:02:06:65:2b:17:
         3a:0c:24:90:6a:92:d9:17:78:bd:19:a5:43:46:f4:98:c1:f5:
         8c:f0:20:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWQkRHxneH2yiZqWH3i2rdQ53bCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNTAzMDYwMDU1MzFaFw0yNjAzMDUwMTAwMzFaMDMxMTAvBgNV
BAMTKDk4NTM3RTQwMEZDRjA4QzFGRjVERTNFMEI0MzM0MEEzRDNFRkE5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDap6oCrVqeUalJlZsQ8cdVz2Yv
mhEUNs2VqQVdOuCrzFeGIS0vDEW/qWILmXhj+V4qdq6Pzaac6hI+SUe5uDmD68uU
TWItxy3UFYYFZhXdWZq8SRqe6G8i5CW1MxDJy7qmeU96XWj1q/tGD/VemdVfvbOk
ftoE/22V25x63Rr9nb9DC0iSG/O3ki1eWHe5sqHN+mWGlQjWporTRHe+ZDDbmCKC
PMnImYjsc+drVNhhquOdUiE14jlIxfci2ADww940baLhQrHkTFaMzEZMfCm5y77p
RmK6+FmK7Ew/it8c6RSFk1tn7z+sXR/OLCQ2UDKXkbbLmWik6/21HvbB7zYzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUmFN+QA/PCMH/XePgtDNAo9PvqVowHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBwYYDANBgkqhkiG9w0BAQsFAAOC
AQEAvKt3P8PuqL1J9sWLNnuLJx6y0NpLSW8UFZ9Lyjd5CDOsQXIl+lbP6LjkCb+L
UulvyWo2I4nkhH3FP0EdcsayIeLjeOavNuEu/y13Bn5Sers7ia5inwnI+gMv+BWd
IFDhW7VKiVvot9amFK9/ikLbuLIdHehMHo4pDpp45RsEyLmSeisctVN8WQQ1VLf9
77jv8MAwUCdDm6TVIGRXsOMk6htBE31fOoAR4Ym3A6+kRzrFhcdTFR7XiR0u2w5U
RQXuHL1IZn8GphVQTLCu0G8YgCH8E32IIHoaC3eovQ2f0TuQaSCiaAIGZSsXOgwk
kGqS2Rd4vRmlQ0b0mMH1jPAgKg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:30 2025 by rpki-client