Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a343030303a3a2f33342d3334203d3e20323637363038.roa
File:                     323830343a343433303a343030303a3a2f33342d3334203d3e20323637363038.roa (raw, json)
Hash identifier:          XRwhLOu+0I7Jc56acIWwfCWrojziirrhWI7tAZZn3vg=
Subject key identifier:   11:17:95:A0:CD:AD:15:62:E2:7C:4F:4A:F2:13:E0:B8:31:F6:D9:1A
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       5C9F0A6560814C0EC294FBF19B4E2D3ABA308140
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a343030303a3a2f33342d3334203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:32:02 +0000
ROA not before:           Fri 30 May 2025 23:27:02 +0000
ROA not after:            Fri 29 May 2026 23:32:02 +0000
asID:                     267608
IP address blocks:        2804:4430:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 21:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9f:0a:65:60:81:4c:0e:c2:94:fb:f1:9b:4e:2d:3a:ba:30:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:27:02 2025 GMT
            Not After : May 29 23:32:02 2026 GMT
        Subject: CN=111795A0CDAD1562E27C4F4AF213E0B831F6D91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:95:9d:16:2c:c9:f4:99:92:6b:52:c4:a8:
                    43:b9:9e:a7:36:53:d7:a6:22:68:61:e5:26:92:b8:
                    76:2f:90:33:93:ef:b3:4d:fe:ec:d8:ae:a7:36:4b:
                    5c:bb:b7:63:ba:b4:f3:cd:c2:ab:af:a6:8a:35:f6:
                    16:0b:44:c9:f6:a5:44:c8:64:ce:de:e4:55:f6:d0:
                    c7:b8:1a:12:47:88:09:7f:63:fc:83:e3:a0:24:07:
                    14:24:28:eb:a4:7c:81:b3:f1:1a:a1:06:b9:cc:1e:
                    84:74:38:5e:61:bd:05:e0:07:94:d1:39:8f:d9:4e:
                    73:01:14:8a:99:17:e8:f6:95:5f:74:e4:05:cc:5d:
                    b1:41:08:96:39:97:25:23:05:c9:b9:06:e4:e0:1b:
                    fc:aa:d4:12:54:15:15:7e:85:ee:8c:1f:60:f6:ce:
                    ca:63:f6:11:bb:41:09:0f:e9:6d:ad:0e:9c:39:22:
                    bb:89:d8:22:9b:f5:72:bb:3a:24:2a:44:b8:38:5d:
                    66:7c:4a:b0:e6:de:db:9b:16:ce:a6:ad:9b:26:5e:
                    91:84:a8:41:c1:9f:47:67:c7:7c:6c:9d:14:8e:fc:
                    9e:32:d3:1b:18:2c:ad:9c:b7:f4:52:d0:04:05:1c:
                    f4:af:de:1f:9b:48:d4:f3:10:bf:e0:37:f1:df:f7:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:95:A0:CD:AD:15:62:E2:7C:4F:4A:F2:13:E0:B8:31:F6:D9:1A
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a343030303a3a2f33342d3334203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:a8:82:25:65:bf:2c:1f:85:f1:14:51:97:43:05:eb:fc:
         6e:80:9c:00:c6:e2:d3:da:2e:55:ae:f8:91:31:a6:84:c8:79:
         a7:3c:bd:ea:b4:ea:23:f1:a0:9b:ac:88:a9:0b:4e:23:4e:f4:
         43:1b:1c:9c:90:d2:7c:6f:20:30:f2:4d:89:f8:c6:e3:44:76:
         2f:6d:c3:00:54:1b:87:6d:15:16:95:c1:ab:06:ab:23:12:d2:
         3c:9d:0f:ee:27:37:7a:dd:4f:ab:62:98:e1:b2:26:e1:0b:9a:
         5a:48:67:ce:bb:02:84:a5:0c:a5:54:ec:6f:9d:04:56:67:14:
         ea:c9:09:aa:79:6a:f3:6a:be:3a:c0:ab:64:3d:83:c4:28:28:
         6e:5a:1d:a2:d6:a5:ab:29:e3:69:2b:4f:13:36:d2:91:79:5b:
         62:e9:34:c1:cd:04:83:58:36:1b:c2:6d:6d:7e:4d:de:bf:01:
         8f:a7:c4:5b:60:31:a7:88:98:fa:48:39:a7:51:ba:54:7f:9a:
         1c:e6:4b:5a:3d:fd:52:82:43:08:03:d9:4a:80:3a:c2:32:d1:
         be:77:18:d4:bd:1f:62:74:f6:b3:66:5d:61:e5:4f:3b:b4:f1:
         9c:8e:88:7b:7a:7e:60:bc:18:2d:0c:c3:9f:bd:15:0b:6e:a8:
         3f:3a:43:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXJ8KZWCBTA7ClPvxm04tOrowgUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcxMDcwREIzQUY5NDg5QUMwNDRBMDE4OTRGN0YzREVB
NTAxNkMxRjAeFw0yNTA1MzAyMzI3MDJaFw0yNjA1MjkyMzMyMDJaMDMxMTAvBgNV
BAMTKDExMTc5NUEwQ0RBRDE1NjJFMjdDNEY0QUYyMTNFMEI4MzFGNkQ5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh45WdFizJ9JmSa1LEqEO5nqc2
U9emImhh5SaSuHYvkDOT77NN/uzYrqc2S1y7t2O6tPPNwquvpoo19hYLRMn2pUTI
ZM7e5FX20Me4GhJHiAl/Y/yD46AkBxQkKOukfIGz8RqhBrnMHoR0OF5hvQXgB5TR
OY/ZTnMBFIqZF+j2lV905AXMXbFBCJY5lyUjBcm5BuTgG/yq1BJUFRV+he6MH2D2
zspj9hG7QQkP6W2tDpw5IruJ2CKb9XK7OiQqRLg4XWZ8SrDm3tubFs6mrZsmXpGE
qEHBn0dnx3xsnRSO/J4y0xsYLK2ct/RS0AQFHPSv3h+bSNTzEL/gN/Hf948RAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEReVoM2tFWLifE9K8hPguDH22RowHwYDVR0j
BBgwFoAUNxBw2zr5SJrARKAYlPfz3qUBbB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlO
TG8vMS8zNzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MTA3MERCM0FGOTQ4OUFD
MDQ0QTAxODk0RjdGM0RFQTUwMTZDMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmemkzRG5Zd2hvMjhWRG1LalJhVVg1M2RtZXRLNnlQd2RWeERFVVg5TkxvLzEv
MzIzODMwMzQzYTM0MzQzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERDBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAxyKiCJWW/LB+F8RRRl0MF6/xugJwAxuLT2i5VrviRMaaEyHmnPL3qtOoj
8aCbrIipC04jTvRDGxyckNJ8byAw8k2J+MbjRHYvbcMAVBuHbRUWlcGrBqsjEtI8
nQ/uJzd63U+rYpjhsibhC5paSGfOuwKEpQylVOxvnQRWZxTqyQmqeWrzar46wKtk
PYPEKChuWh2i1qWrKeNpK08TNtKReVti6TTBzQSDWDYbwm1tfk3evwGPp8RbYDGn
iJj6SDmnUbpUf5oc5ktaPf1SgkMIA9lKgDrCMtG+dxjUvR9idPazZl1h5U87tPGc
joh7en5gvBgtDMOfvRULbqg/OkPJ
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:37:19 2025 by rpki-client