Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33332d3333203d3e20323733363835.roa
File:                     323830343a386161633a3a2f33332d3333203d3e20323733363835.roa (raw, json)
Hash identifier:          7VurPvpRyDkDNurV0m8Tpp6HWCTv8CQje8kujInxRBw=
Subject key identifier:   99:B8:69:33:76:62:BD:00:25:3B:39:36:55:91:C8:B5:F1:31:DF:51
Certificate issuer:       /CN=395B07F63C81D58C40572416F238D4140BA74B63
Certificate serial:       14274BB24D75C8928CE69A0DC93E61F3BA57347E
Authority key identifier: 39:5B:07:F6:3C:81:D5:8C:40:57:24:16:F2:38:D4:14:0B:A7:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33332d3333203d3e20323733363835.roa
Signing time:             Thu 15 May 2025 16:16:40 +0000
ROA not before:           Thu 15 May 2025 16:11:40 +0000
ROA not after:            Thu 14 May 2026 16:16:40 +0000
asID:                     273685
IP address blocks:        2804:8aac::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.crl
                          rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 04:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:4b:b2:4d:75:c8:92:8c:e6:9a:0d:c9:3e:61:f3:ba:57:34:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395B07F63C81D58C40572416F238D4140BA74B63
        Validity
            Not Before: May 15 16:11:40 2025 GMT
            Not After : May 14 16:16:40 2026 GMT
        Subject: CN=99B869337662BD00253B39365591C8B5F131DF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:86:8b:c0:28:72:43:be:d4:15:82:65:9e:
                    b6:78:f3:ae:d4:e2:f9:3b:49:c3:74:c9:8f:37:fa:
                    58:92:a5:7f:d1:c3:d1:3a:1c:7c:ec:ee:0c:18:70:
                    84:b9:1a:5b:86:cc:44:77:3b:02:02:09:90:50:03:
                    f5:25:78:e7:87:4a:43:c7:a5:3f:a3:9d:c4:aa:07:
                    da:01:37:2c:db:a3:20:db:24:24:a5:fb:0e:06:c4:
                    0a:91:6c:56:ec:20:50:60:f8:d1:b7:39:9a:75:b4:
                    ba:88:b6:e5:41:ba:51:d1:97:b5:05:15:43:39:b9:
                    41:66:67:59:27:32:98:2b:30:cb:5b:ce:28:bb:1b:
                    fa:13:13:46:7d:44:e9:d5:34:c4:78:f4:f0:bf:17:
                    5a:3e:74:4e:c7:4f:3b:c2:0b:01:bb:c7:53:04:72:
                    70:92:aa:2b:3d:bc:0e:61:f3:b3:45:b8:d5:29:8c:
                    69:c4:69:76:14:b8:e5:44:86:72:55:47:4e:71:7b:
                    f6:49:4e:21:e4:1e:1b:14:0c:09:ab:b9:e4:aa:c6:
                    9e:f2:ba:b0:12:b5:13:f9:a2:de:33:37:dc:4b:c9:
                    3b:ab:55:79:7b:94:96:e0:6e:2b:cd:44:57:28:5a:
                    6a:79:ad:af:ee:8a:5f:c2:2c:90:3a:d7:0f:36:45:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:69:33:76:62:BD:00:25:3B:39:36:55:91:C8:B5:F1:31:DF:51
            X509v3 Authority Key Identifier:
                keyid:39:5B:07:F6:3C:81:D5:8C:40:57:24:16:F2:38:D4:14:0B:A7:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33332d3333203d3e20323733363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aac::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:0a:ec:df:65:83:64:2c:ee:63:bb:46:35:00:c6:c3:f6:
         05:9e:b4:76:b2:cf:a3:5c:18:7f:c7:81:01:1d:2a:98:18:5a:
         60:24:56:3f:7e:fb:c9:73:fd:05:e5:d7:86:6f:72:97:e9:7e:
         b9:c3:82:01:da:12:dd:83:a3:7a:9d:84:8e:96:62:e3:28:86:
         c7:21:e6:04:90:97:92:c0:1c:ec:25:14:09:90:fd:19:c2:95:
         43:00:3d:5d:b8:d3:02:2e:a2:7c:5d:98:63:d4:67:15:01:82:
         30:cb:a7:a2:b1:b6:9b:ad:76:1b:92:4f:4b:2c:92:d9:d2:ca:
         3b:15:e2:30:76:71:94:93:f7:95:5b:00:17:39:42:14:2c:b2:
         f6:49:f2:3f:d5:55:6e:f2:49:e3:f2:d8:07:27:fa:10:bd:c9:
         ae:0a:5b:5b:4f:ff:4e:b5:26:0a:ed:ce:17:fa:93:e9:66:be:
         e5:ca:22:7e:fd:00:8b:ba:95:73:12:0c:99:05:4d:1a:0e:3e:
         90:42:fa:23:80:a2:46:29:37:95:59:cb:35:2e:fb:ac:55:f0:
         6f:5e:0c:71:7a:65:85:1c:5b:ea:9c:cf:26:b4:97:87:a2:d7:
         7d:a6:4a:0f:17:98:78:d3:c7:62:8b:e1:2f:16:fd:a7:fb:bc:
         a4:ce:05:f0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFCdLsk11yJKM5poNyT5h87pXNH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk1QjA3RjYzQzgxRDU4QzQwNTcyNDE2RjIzOEQ0MTQw
QkE3NEI2MzAeFw0yNTA1MTUxNjExNDBaFw0yNjA1MTQxNjE2NDBaMDMxMTAvBgNV
BAMTKDk5Qjg2OTMzNzY2MkJEMDAyNTNCMzkzNjU1OTFDOEI1RjEzMURGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpE4aLwChyQ77UFYJlnrZ4867U
4vk7ScN0yY83+liSpX/Rw9E6HHzs7gwYcIS5GluGzER3OwICCZBQA/UleOeHSkPH
pT+jncSqB9oBNyzboyDbJCSl+w4GxAqRbFbsIFBg+NG3OZp1tLqItuVBulHRl7UF
FUM5uUFmZ1knMpgrMMtbzii7G/oTE0Z9ROnVNMR49PC/F1o+dE7HTzvCCwG7x1ME
cnCSqis9vA5h87NFuNUpjGnEaXYUuOVEhnJVR05xe/ZJTiHkHhsUDAmrueSqxp7y
urAStRP5ot4zN9xLyTurVXl7lJbgbivNRFcoWmp5ra/uil/CLJA61w82RROxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmbhpM3ZivQAlOzk2VZHItfEx31EwHwYDVR0j
BBgwFoAUOVsH9jyB1YxAVyQW8jjUFAunS2MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhzRk1ackJtM2NLV1hERHIyZDFtQkcycTdmbVRCOGtENjZSeHN1WlM4
cnMvMC8zOTVCMDdGNjNDODFENThDNDA1NzI0MTZGMjM4RDQxNDBCQTc0QjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUIwN0Y2M0M4MUQ1OEM0
MDU3MjQxNkYyMzhENDE0MEJBNzRCNjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYc0ZNWnJCbTNjS1dYRERyMmQxbUJHMnE3Zm1UQjhrRDY2UnhzdVpTOHJzLzAv
MzIzODMwMzQzYTM4NjE2MTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASKrAAwDQYJKoZIhvcNAQELBQADggEBAHD+Cuzf
ZYNkLO5ju0Y1AMbD9gWetHayz6NcGH/HgQEdKpgYWmAkVj9++8lz/QXl14Zvcpfp
frnDggHaEt2Do3qdhI6WYuMohsch5gSQl5LAHOwlFAmQ/RnClUMAPV240wIuonxd
mGPUZxUBgjDLp6KxtputdhuST0ssktnSyjsV4jB2cZST95VbABc5QhQssvZJ8j/V
VW7ySePy2Acn+hC9ya4KW1tP/061Jgrtzhf6k+lmvuXKIn79AIu6lXMSDJkFTRoO
PpBC+iOAokYpN5VZyzUu+6xV8G9eDHF6ZYUcW+qczya0l4ei132mSg8XmHjTx2KL
4S8W/af7vKTOBfA=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:40:25 2025 by rpki-client