Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
File:                     323830343a313937633a3a2f33322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          mR3JTudGYHC3/gDxhHG8BiWa9B/Ig5bd23WKqtDV78Y=
Subject key identifier:   34:7E:5F:67:7F:A8:A7:6A:99:59:B2:04:2F:61:AE:85:0B:B5:CB:53
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       670AB252DE8C1C75F373ED0BEE14C5B1F21D05B1
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:00 +0000
ROA not before:           Fri 06 Jun 2025 11:39:00 +0000
ROA not after:            Fri 05 Jun 2026 11:44:00 +0000
asID:                     61797
IP address blocks:        2804:197c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0a:b2:52:de:8c:1c:75:f3:73:ed:0b:ee:14:c5:b1:f2:1d:05:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:00 2025 GMT
            Not After : Jun  5 11:44:00 2026 GMT
        Subject: CN=347E5F677FA8A76A9959B2042F61AE850BB5CB53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:e6:6c:f5:4b:88:ce:a6:6d:4e:93:49:01:
                    56:b8:09:f5:9a:37:26:09:0f:cd:be:bf:79:5a:fa:
                    0d:b6:3c:17:9a:da:a0:4b:a5:3a:ad:80:a4:b2:f1:
                    66:52:f3:5f:8a:9f:c3:b9:7d:db:84:c8:08:09:a3:
                    33:3f:84:b9:61:d5:f5:e7:ce:a2:7b:ab:31:f5:8b:
                    ad:58:81:9c:66:1b:34:53:a2:95:df:90:90:32:2b:
                    da:80:9d:f2:0f:0a:5b:17:13:a2:f8:a1:3d:d3:e6:
                    d9:19:2d:e0:91:f3:6e:c1:73:16:bc:60:d3:99:52:
                    d9:47:7e:89:39:c7:96:37:cf:a6:f7:64:25:c8:ef:
                    8b:9e:4f:fa:39:71:9f:12:25:d0:87:0d:b6:0a:0a:
                    3d:bc:0e:00:78:b5:ed:47:8e:df:21:52:e3:f4:5d:
                    ce:d8:85:b2:8b:73:db:12:48:74:60:14:7a:f7:34:
                    92:4a:d4:7d:32:b5:a5:9c:20:ce:c5:92:bf:b6:0c:
                    a3:e4:9e:aa:48:77:38:f6:dc:17:57:04:1c:32:fb:
                    b4:e6:d4:f2:91:5c:fd:1f:69:4a:e3:b5:0e:29:c9:
                    4e:1c:20:e0:92:bf:1c:b5:4f:8c:9f:76:eb:73:52:
                    09:ce:6f:b4:92:91:0d:f3:e4:73:12:ae:b8:3d:ec:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7E:5F:67:7F:A8:A7:6A:99:59:B2:04:2F:61:AE:85:0B:B5:CB:53
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:197c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:60:ad:7e:26:9e:91:ea:3c:5e:a4:f6:b9:8d:51:3d:6b:ee:
         9b:1c:c6:d8:ce:c9:c7:84:70:80:34:27:b4:46:d0:7e:02:4b:
         23:4f:0a:48:c8:ce:f8:f6:26:d0:ee:f4:f6:f6:0c:ef:61:6c:
         84:08:15:25:22:68:d6:d6:13:9a:8e:dd:52:e4:b8:ae:47:be:
         b4:a7:3d:38:18:12:2a:e4:56:4e:7d:bb:e2:59:52:59:f8:53:
         b7:bf:e7:6f:0e:46:10:f7:cd:20:fa:5f:b6:8b:f7:e9:db:1f:
         57:23:6b:0b:3a:03:06:b1:27:cb:f8:99:b0:ad:3b:e2:73:34:
         6f:d0:33:09:51:bc:a0:32:b0:02:3b:77:4e:b7:bb:67:d0:5d:
         ab:78:d7:6a:ff:19:df:af:a1:61:2c:82:ee:8a:7a:81:ea:8e:
         b3:51:56:e9:0b:6c:e7:c7:32:10:6c:44:0f:87:ba:13:0c:e1:
         44:e0:3c:76:7a:ce:18:87:23:13:5f:ce:a9:8b:ba:db:ec:a6:
         e2:92:94:0e:aa:f5:18:c8:90:f8:26:aa:f0:62:ff:21:3f:5d:
         b4:8c:48:a7:4d:96:4d:92:91:14:69:6d:7d:e7:cf:93:03:cc:
         d1:99:ff:04:76:e0:48:a5:a8:75:66:67:90:b0:12:4c:27:ea:
         bf:9e:9a:53
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZwqyUt6MHHXzc+0L7hTFsfIdBbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU0REEyNzgzMzc1N0NGMUY1RENCNDc5OUQ5RDIzODEx
N0YzMTUzMjAeFw0yNTA2MDYxMTM5MDBaFw0yNjA2MDUxMTQ0MDBaMDMxMTAvBgNV
BAMTKDM0N0U1RjY3N0ZBOEE3NkE5OTU5QjIwNDJGNjFBRTg1MEJCNUNCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HOZs9UuIzqZtTpNJAVa4CfWa
NyYJD82+v3la+g22PBea2qBLpTqtgKSy8WZS81+Kn8O5fduEyAgJozM/hLlh1fXn
zqJ7qzH1i61YgZxmGzRTopXfkJAyK9qAnfIPClsXE6L4oT3T5tkZLeCR827Bcxa8
YNOZUtlHfok5x5Y3z6b3ZCXI74ueT/o5cZ8SJdCHDbYKCj28DgB4te1Hjt8hUuP0
Xc7YhbKLc9sSSHRgFHr3NJJK1H0ytaWcIM7Fkr+2DKPknqpIdzj23BdXBBwy+7Tm
1PKRXP0faUrjtQ4pyU4cIOCSvxy1T4yfdutzUgnOb7SSkQ3z5HMSrrg97LyLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUNH5fZ3+op2qZWbIEL2GuhQu1y1MwHwYDVR0j
BBgwFoAU/k2ieDN1fPH13LR5nZ0jgRfzFTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG
SjEvMC9GRTREQTI3ODMzNzU3Q0YxRjVEQ0I0Nzk5RDlEMjM4MTE3RjMxNTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNERBMjc4MzM3NTdDRjFG
NURDQjQ3OTlEOUQyMzgxMTdGMzE1MzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv
MzIzODMwMzQzYTMxMzkzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGXwwDQYJKoZIhvcNAQELBQADggEBAGRgrX4mnpHq
PF6k9rmNUT1r7pscxtjOyceEcIA0J7RG0H4CSyNPCkjIzvj2JtDu9Pb2DO9hbIQI
FSUiaNbWE5qO3VLkuK5HvrSnPTgYEirkVk59u+JZUln4U7e/528ORhD3zSD6X7aL
9+nbH1cjaws6AwaxJ8v4mbCtO+JzNG/QMwlRvKAysAI7d063u2fQXat412r/Gd+v
oWEsgu6KeoHqjrNRVukLbOfHMhBsRA+HuhMM4UTgPHZ6zhiHIxNfzqmLutvspuKS
lA6q9RjIkPgmqvBi/yE/XbSMSKdNlk2SkRRpbX3nz5MDzNGZ/wR24EilqHVmZ5Cw
Ekwn6r+emlM=
-----END CERTIFICATE-----
Generated at Thu Jun 12 15:23:39 2025 by rpki-client