Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa
File:                     323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa (raw, json)
Hash identifier:          +Yhzi6T7xonnwvdDsgmD4u06mLttlYew5dt+GN1Nu4Y=
Subject key identifier:   EB:AC:3E:B3:6F:26:3D:B5:4A:E4:C1:71:66:37:2D:D5:3A:C4:6B:F6
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       6D9FF5FA12F481E0BF493927E2A9EE7F9105069B
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa
Signing time:             Thu 06 Mar 2025 06:25:50 +0000
ROA not before:           Thu 06 Mar 2025 06:20:50 +0000
ROA not after:            Thu 05 Mar 2026 06:25:50 +0000
asID:                     270275
IP address blocks:        2804:6984:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:f5:fa:12:f4:81:e0:bf:49:39:27:e2:a9:ee:7f:91:05:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Mar  6 06:20:50 2025 GMT
            Not After : Mar  5 06:25:50 2026 GMT
        Subject: CN=EBAC3EB36F263DB54AE4C17166372DD53AC46BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:4d:b3:03:a9:df:fb:a9:ce:d2:6c:ad:d9:
                    25:81:eb:50:71:dc:33:65:b4:d0:92:57:1d:a4:b5:
                    00:8f:98:81:07:b5:0e:c8:15:b6:ee:2e:7c:69:b0:
                    e0:da:66:d5:35:ed:06:df:5b:62:00:23:96:fb:c7:
                    54:e9:25:8b:04:5d:12:69:2d:5e:fb:46:55:e2:90:
                    13:1f:64:6f:c7:e7:64:a0:77:f8:ea:f7:19:c0:e0:
                    6d:09:3d:44:2f:8d:88:1f:97:60:2a:28:65:57:94:
                    44:c9:b2:e1:86:7b:9c:ab:fb:26:11:b4:ee:c1:6a:
                    10:30:97:ad:da:30:ed:f8:4e:52:97:37:b6:23:eb:
                    95:db:b4:fd:9f:c2:16:af:6f:b8:0c:84:cc:14:5a:
                    6b:2a:45:32:a3:ec:ae:39:25:ce:23:54:2c:86:df:
                    4c:0d:bc:63:65:b4:77:2c:c9:63:70:19:22:5f:ed:
                    34:67:e0:d5:90:23:c9:b9:88:0d:43:eb:0b:a2:ca:
                    12:75:8c:05:ad:d1:81:e6:4b:3a:e1:37:76:0b:f0:
                    8e:7f:d1:88:50:7c:b3:3e:d0:53:90:23:62:31:b9:
                    88:24:98:18:7c:31:88:5d:66:9a:f6:e1:d1:c5:cf:
                    6e:40:5e:82:3f:05:c9:b7:d4:8b:ac:53:43:b4:5a:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:3E:B3:6F:26:3D:B5:4A:E4:C1:71:66:37:2D:D5:3A:C4:6B:F6
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a383030303a3a2f33342d3334203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:ed:b3:7a:b8:1f:d1:34:54:dc:72:b9:69:e3:af:60:e6:f0:
         b2:f6:1a:37:2e:c6:f1:ab:e7:47:24:35:a1:11:e5:62:2f:b1:
         36:58:2c:20:81:d2:07:33:3d:03:d6:d5:64:34:8b:16:e3:93:
         52:1a:5e:8a:0c:d9:ec:40:be:22:a1:3c:84:8c:3b:fe:1c:4a:
         db:25:1d:cd:58:39:f3:4c:4c:f6:ed:ea:59:ab:be:f7:89:04:
         0e:f3:70:79:d2:83:30:fb:a4:95:3e:29:ba:94:d0:b7:bc:c4:
         10:0c:27:7e:9e:13:e6:f4:9e:d5:ae:24:2a:6d:5b:62:c7:10:
         f5:7e:c5:6b:a1:2c:23:e7:a5:8b:e1:cc:eb:d1:e3:a3:7f:88:
         70:2e:5b:ba:05:bc:ac:1a:ac:42:e9:df:83:b4:1a:a1:19:13:
         3a:b3:5b:8e:b1:25:31:dd:87:22:56:63:61:04:00:91:ce:0a:
         af:8a:d7:f1:00:0d:5a:fd:1d:3c:ca:73:56:78:4c:42:e6:99:
         dc:4d:d0:e6:f1:37:8e:d6:ec:87:68:11:85:48:a6:5f:c5:81:
         42:dc:a3:41:d4:91:30:c0:9f:98:7e:bd:17:a3:98:16:6c:47:
         e7:47:a6:7e:85:cc:9f:25:cb:dc:59:8f:bc:c3:51:8f:36:5e:
         d2:c2:60:f2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbZ/1+hL0geC/STkn4qnuf5EFBpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1MDVGQTc2REZBNEQyMzBDOUUwNEE5MUNDNTlEN0NG
ODFENzJCNjAeFw0yNTAzMDYwNjIwNTBaFw0yNjAzMDUwNjI1NTBaMDMxMTAvBgNV
BAMTKEVCQUMzRUIzNkYyNjNEQjU0QUU0QzE3MTY2MzcyREQ1M0FDNDZCRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6U02zA6nf+6nO0myt2SWB61Bx
3DNltNCSVx2ktQCPmIEHtQ7IFbbuLnxpsODaZtU17QbfW2IAI5b7x1TpJYsEXRJp
LV77RlXikBMfZG/H52Sgd/jq9xnA4G0JPUQvjYgfl2AqKGVXlETJsuGGe5yr+yYR
tO7BahAwl63aMO34TlKXN7Yj65XbtP2fwhavb7gMhMwUWmsqRTKj7K45Jc4jVCyG
30wNvGNltHcsyWNwGSJf7TRn4NWQI8m5iA1D6wuiyhJ1jAWt0YHmSzrhN3YL8I5/
0YhQfLM+0FOQI2IxuYgkmBh8MYhdZpr24dHFz25AXoI/Bcm31IusU0O0WpfBAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU66w+s28mPbVK5MFxZjct1TrEa/YwHwYDVR0j
BBgwFoAUGlBfp236TSMMngSpHMWdfPgdcrYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXYyVHB3Y3FqdXV3QU42WFgyVjhkYkxXUUR2cThHUUMyS1VyTGZQYkxr
cnAvMS8xQTUwNUZBNzZERkE0RDIzMEM5RTA0QTkxQ0M1OUQ3Q0Y4MUQ3MkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTA1RkE3NkRGQTREMjMw
QzlFMDRBOTFDQzU5RDdDRjgxRDcyQjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2MlRwd2NxanV1d0FONlhYMlY4ZGJMV1FEdnE4R1FDMktVckxmUGJMa3JwLzEv
MzIzODMwMzQzYTM2MzkzODM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDMyMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEaYSAMA0GCSqGSIb3DQEBCwUA
A4IBAQC+7bN6uB/RNFTccrlp469g5vCy9ho3Lsbxq+dHJDWhEeViL7E2WCwggdIH
Mz0D1tVkNIsW45NSGl6KDNnsQL4ioTyEjDv+HErbJR3NWDnzTEz27epZq773iQQO
83B50oMw+6SVPim6lNC3vMQQDCd+nhPm9J7VriQqbVtixxD1fsVroSwj56WL4czr
0eOjf4hwLlu6BbysGqxC6d+DtBqhGRM6s1uOsSUx3YciVmNhBACRzgqvitfxAA1a
/R08ynNWeExC5pncTdDm8TeO1uyHaBGFSKZfxYFC3KNB1JEwwJ+Yfr0Xo5gWbEfn
R6Z+hcyfJcvcWY+8w1GPNl7SwmDy
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:23 2025 by rpki-client