Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a383030303a3a2f33342d3334203d3e20323639373030.roa
File:                     323830343a363838633a383030303a3a2f33342d3334203d3e20323639373030.roa (raw, json)
Hash identifier:          0EaY0Q322IA2va7KKclORNh2j++N3+ZKjxCXPiycmGw=
Subject key identifier:   CC:CE:02:F1:FB:EA:95:EB:C9:08:F9:E5:E1:79:44:9A:EE:DC:1F:FC
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       2CEDB961FFF5CF63C7595357E8CC9E293063B373
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a383030303a3a2f33342d3334203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        2804:688c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ed:b9:61:ff:f5:cf:63:c7:59:53:57:e8:cc:9e:29:30:63:b3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100CD8067E1ED041F302034EB5E1D8099B38B2648B05E70D9CAD693AEB0B0DA61129BE3602BAE84F3099E1D4ACCF5CB92BE2ED3505733DAD1C3FFB3A12DBF1EA503EE08B7932904359017E462E962DF27007107C807C188749BA579E0979DFBE8A667524D7E05BAF6CD5E83ED379387A2CDA54FC7503A312D0570CEA429095B06EF9736F711CD29740F708A1E2E185D133403C59BAE59557F8BA5490AA9EC3434667788EC16782D187A2BAEC10B75F5858E47084C5464852FC66FAAEDB72790E34DA2D711043625057DE155AE6F04A61CF10D5D5D76A54D5D2263DD095F31D533787F92A1A1DD80F19E3CD4F22D098A7570AA2BF9AD6DFEC54215CFDF82B293A8630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:67:e1:ed:04:1f:30:20:34:eb:5e:1d:80:
                    99:b3:8b:26:48:b0:5e:70:d9:ca:d6:93:ae:b0:b0:
                    da:61:12:9b:e3:60:2b:ae:84:f3:09:9e:1d:4a:cc:
                    f5:cb:92:be:2e:d3:50:57:33:da:d1:c3:ff:b3:a1:
                    2d:bf:1e:a5:03:ee:08:b7:93:29:04:35:90:17:e4:
                    62:e9:62:df:27:00:71:07:c8:07:c1:88:74:9b:a5:
                    79:e0:97:9d:fb:e8:a6:67:52:4d:7e:05:ba:f6:cd:
                    5e:83:ed:37:93:87:a2:cd:a5:4f:c7:50:3a:31:2d:
                    05:70:ce:a4:29:09:5b:06:ef:97:36:f7:11:cd:29:
                    74:0f:70:8a:1e:2e:18:5d:13:34:03:c5:9b:ae:59:
                    55:7f:8b:a5:49:0a:a9:ec:34:34:66:77:88:ec:16:
                    78:2d:18:7a:2b:ae:c1:0b:75:f5:85:8e:47:08:4c:
                    54:64:85:2f:c6:6f:aa:ed:b7:27:90:e3:4d:a2:d7:
                    11:04:36:25:05:7d:e1:55:ae:6f:04:a6:1c:f1:0d:
                    5d:5d:76:a5:4d:5d:22:63:dd:09:5f:31:d5:33:78:
                    7f:92:a1:a1:dd:80:f1:9e:3c:d4:f2:2d:09:8a:75:
                    70:aa:2b:f9:ad:6d:fe:c5:42:15:cf:df:82:b2:93:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CE:02:F1:FB:EA:95:EB:C9:08:F9:E5:E1:79:44:9A:EE:DC:1F:FC
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a383030303a3a2f33342d3334203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:29:c5:29:bb:4b:1c:2a:92:c7:18:5e:38:a5:58:81:b0:
         c3:5e:80:ec:66:06:9f:d7:b1:4b:5f:65:c8:f3:ae:ca:94:e6:
         59:03:7d:c6:6c:1f:cf:b5:a4:ce:ff:2f:3c:7f:5b:fe:78:78:
         1d:f8:50:b5:11:c8:15:c3:02:dc:22:1a:b3:7a:55:5e:f3:31:
         47:d6:81:1f:d2:7e:0f:6f:15:b1:ac:dc:5d:c5:57:a0:2d:f6:
         68:26:79:58:1a:79:0a:1f:24:5e:66:79:dc:7d:ab:38:75:8b:
         c0:40:d0:fc:0b:73:7f:b8:65:0c:8b:19:19:ec:6f:82:af:5a:
         17:6c:2b:93:07:8d:51:c5:69:56:27:76:51:af:1c:27:3c:c5:
         c4:eb:9e:fb:33:af:b2:0a:7a:67:5d:eb:b8:96:8a:a7:92:8c:
         a9:f0:52:6b:2f:43:42:27:d2:c9:3f:a1:8d:3f:7c:e3:ca:ab:
         d5:a1:9b:f0:1f:d6:81:b9:12:7d:19:14:f3:a2:56:05:75:12:
         ac:9d:f6:3e:5e:92:4a:ce:15:7f:d5:ff:ca:d6:25:6e:a6:c1:
         90:74:c1:9e:18:31:f5:3c:6c:23:cc:ba:4d:87:ea:c5:26:9e:
         e5:7a:b6:57:11:3b:43:cb:eb:45:b3:e1:d1:86:9e:34:bf:9b:
         4c:39:74:d5
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIULO25Yf/1z2PHWVNX6MyeKTBjs3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM3M0MxMzQwODY4MkUzQkE0ODY1MkE5QkU1OTBDNUU0
RTRBMENGQTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q4MDY3RTFFRDA0MUYzMDIw
MzRFQjVFMUQ4MDk5QjM4QjI2NDhCMDVFNzBEOUNBRDY5M0FFQjBCMERBNjExMjlC
RTM2MDJCQUU4NEYzMDk5RTFENEFDQ0Y1Q0I5MkJFMkVEMzUwNTczM0RBRDFDM0ZG
QjNBMTJEQkYxRUE1MDNFRTA4Qjc5MzI5MDQzNTkwMTdFNDYyRTk2MkRGMjcwMDcx
MDdDODA3QzE4ODc0OUJBNTc5RTA5NzlERkJFOEE2Njc1MjREN0UwNUJBRjZDRDVF
ODNFRDM3OTM4N0EyQ0RBNTRGQzc1MDNBMzEyRDA1NzBDRUE0MjkwOTVCMDZFRjk3
MzZGNzExQ0QyOTc0MEY3MDhBMUUyRTE4NUQxMzM0MDNDNTlCQUU1OTU1N0Y4QkE1
NDkwQUE5RUMzNDM0NjY3Nzg4RUMxNjc4MkQxODdBMkJBRUMxMEI3NUY1ODU4RTQ3
MDg0QzU0NjQ4NTJGQzY2RkFBRURCNzI3OTBFMzREQTJENzExMDQzNjI1MDU3REUx
NTVBRTZGMDRBNjFDRjEwRDVENUQ3NkE1NEQ1RDIyNjNERDA5NUYzMUQ1MzM3ODdG
OTJBMUExREQ4MEYxOUUzQ0Q0RjIyRDA5OEE3NTcwQUEyQkY5QUQ2REZFQzU0MjE1
Q0ZERjgyQjI5M0E4NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzYBn4e0EHzAgNOteHYCZs4smSLBecNnK1pOusLDaYRKb42ArroTz
CZ4dSsz1y5K+LtNQVzPa0cP/s6Etvx6lA+4It5MpBDWQF+Ri6WLfJwBxB8gHwYh0
m6V54Jed++imZ1JNfgW69s1eg+03k4eizaVPx1A6MS0FcM6kKQlbBu+XNvcRzSl0
D3CKHi4YXRM0A8WbrllVf4ulSQqp7DQ0ZneI7BZ4LRh6K67BC3X1hY5HCExUZIUv
xm+q7bcnkONNotcRBDYlBX3hVa5vBKYc8Q1dXXalTV0iY90JXzHVM3h/kqGh3YDx
njzU8i0JinVwqiv5rW3+xUIVz9+CspOoYwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FMzOAvH76pXryQj55eF5RJru3B/8MB8GA1UdIwQYMBaAFINzwTQIaC47pIZSqb5Z
DF5OSgz6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyY0JyUXB6RnVUZkVr
SFZGRnFoTWt2VVl6QTNSaFNWVG10MnN2TUQyS3F5LzEvODM3M0MxMzQwODY4MkUz
QkE0ODY1MkE5QkU1OTBDNUU0RTRBMENGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84MzczQzEzNDA4NjgyRTNCQTQ4NjUyQTlCRTU5MEM1RTRFNEEw
Q0ZBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcmNCclFwekZ1VGZFa0hWRkZx
aE1rdlVZekEzUmhTVlRtdDJzdk1EMktxeS8xLzMyMzgzMDM0M2EzNjM4Mzg2MzNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNzMwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBGiMgDANBgkqhkiG9w0BAQsFAAOCAQEAC0opxSm7SxwqkscYXjil
WIGww16A7GYGn9exS19lyPOuypTmWQN9xmwfz7Wkzv8vPH9b/nh4HfhQtRHIFcMC
3CIas3pVXvMxR9aBH9J+D28VsazcXcVXoC32aCZ5WBp5Ch8kXmZ53H2rOHWLwEDQ
/Atzf7hlDIsZGexvgq9aF2wrkweNUcVpVid2Ua8cJzzFxOue+zOvsgp6Z13ruJaK
p5KMqfBSay9DQifSyT+hjT9848qr1aGb8B/WgbkSfRkU86JWBXUSrJ32Pl6SSs4V
f9X/ytYlbqbBkHTBnhgx9TxsI8y6TYfqxSae5Xq2VxE7Q8vrRbPh0YaeNL+bTDl0
1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:01:02 2025 by rpki-client