Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa
File:                     323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa (raw, json)
Hash identifier:          yKJlfHRe2RaZaFeJ8Cbfw5GIHO+e3Npl6VSG9eEn+4M=
Subject key identifier:   3B:21:C8:F7:A7:CC:FF:B6:62:6A:B3:17:4A:86:C9:29:7E:13:58:A3
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       3CB0EF1227A09B5A02B5A99B2025CC8D340FC9A0
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa
Signing time:             Thu 05 Dec 2024 18:15:21 +0000
ROA not before:           Thu 05 Dec 2024 18:10:21 +0000
ROA not after:            Thu 04 Dec 2025 18:15:21 +0000
asID:                     269656
IP address blocks:        2804:67e0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 07:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b0:ef:12:27:a0:9b:5a:02:b5:a9:9b:20:25:cc:8d:34:0f:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Dec  5 18:10:21 2024 GMT
            Not After : Dec  4 18:15:21 2025 GMT
        Subject: CN=3B21C8F7A7CCFFB6626AB3174A86C9297E1358A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:bf:45:3d:ff:25:f7:1a:7c:5d:e0:12:be:
                    f1:aa:d8:16:38:5e:63:b1:ce:db:94:80:71:70:e6:
                    62:52:06:91:91:5e:ee:ff:45:6b:82:7c:5e:1e:18:
                    be:97:a3:f4:04:fd:1e:32:fd:90:94:a2:0e:86:e2:
                    cf:3f:51:3b:58:0c:7f:54:8d:bf:4f:bb:2c:2a:ed:
                    9b:cd:47:8b:c4:f1:6d:e8:33:89:d9:0a:9c:79:9e:
                    0b:54:2d:0a:79:0a:69:a0:24:19:50:fc:98:41:60:
                    8a:a3:68:20:35:d2:4d:7f:14:a9:47:ef:7a:a6:ef:
                    0e:40:ca:84:f2:9e:2c:94:09:2f:7c:16:e2:9f:74:
                    e6:af:c3:c5:db:03:a6:6e:33:dd:e6:55:6c:15:88:
                    28:04:f5:4f:58:67:0e:8f:05:59:03:ea:bc:23:64:
                    40:e3:8f:ef:41:dd:d9:97:98:28:e0:5d:28:0f:91:
                    fb:68:96:99:37:30:a2:f7:4b:9a:44:33:53:28:41:
                    71:9e:f4:2d:12:b5:5b:82:36:ff:a0:7c:97:8f:b2:
                    7e:b7:cb:ac:9d:b3:33:16:ed:e1:a4:41:5b:1e:73:
                    b0:db:b6:b9:91:de:f5:c8:fc:af:5a:15:24:24:f6:
                    f1:05:6a:95:e6:35:dc:83:a3:2d:90:ae:44:9b:16:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:C8:F7:A7:CC:FF:B6:62:6A:B3:17:4A:86:C9:29:7E:13:58:A3
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a383030303a3a2f33342d3334203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:21:55:7c:c6:93:1b:f4:13:82:ef:d5:44:dd:96:9b:d5:
         6d:32:64:fe:82:da:ef:a0:c6:e8:92:57:2a:07:35:59:4f:15:
         1a:19:40:99:0c:dc:a7:7c:7b:88:a7:da:27:f9:23:ec:d3:3a:
         83:f6:a8:71:b1:14:0a:c0:a5:32:05:2e:e9:a7:c6:5b:a4:93:
         cb:56:06:61:2f:78:03:49:29:0b:aa:df:2e:a6:0b:7d:6b:4f:
         4c:80:29:2d:37:a3:cf:7f:85:0f:5e:e7:f5:81:55:e5:7f:b4:
         3a:1d:f7:27:ad:cc:da:0a:2a:3c:90:45:f2:37:2e:f4:38:08:
         8e:35:87:9f:17:b5:eb:1d:56:82:ff:bf:33:ad:26:18:e7:af:
         3d:61:89:18:27:6e:c4:33:e9:8d:b2:f7:d0:45:ac:70:d9:e6:
         62:da:97:62:a1:02:a1:4b:6e:6b:d5:0a:07:1b:99:ca:e5:97:
         c6:48:70:7a:51:82:d3:4c:ec:60:f5:f6:c6:82:ae:95:98:6a:
         14:58:cf:3e:c5:cc:74:a6:1c:a7:a3:aa:2e:7e:f8:1f:1f:36:
         13:23:b6:53:18:74:de:f2:c1:e9:9d:7f:f4:fb:3a:4f:f4:8d:
         d1:15:70:71:bc:d6:05:53:58:71:ac:bd:ca:47:50:e8:9f:f9:
         bf:7a:1c:81
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPLDvEiegm1oCtambICXMjTQPyaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNzA4RDAxM0Q1RkU3NDk5OTgwMEZCMjY1QjE2RkRG
ODk4NjFEMzAeFw0yNDEyMDUxODEwMjFaFw0yNTEyMDQxODE1MjFaMDMxMTAvBgNV
BAMTKDNCMjFDOEY3QTdDQ0ZGQjY2MjZBQjMxNzRBODZDOTI5N0UxMzU4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJr9FPf8l9xp8XeASvvGq2BY4
XmOxztuUgHFw5mJSBpGRXu7/RWuCfF4eGL6Xo/QE/R4y/ZCUog6G4s8/UTtYDH9U
jb9Puywq7ZvNR4vE8W3oM4nZCpx5ngtULQp5CmmgJBlQ/JhBYIqjaCA10k1/FKlH
73qm7w5AyoTyniyUCS98FuKfdOavw8XbA6ZuM93mVWwViCgE9U9YZw6PBVkD6rwj
ZEDjj+9B3dmXmCjgXSgPkftolpk3MKL3S5pEM1MoQXGe9C0StVuCNv+gfJePsn63
y6ydszMW7eGkQVsec7DbtrmR3vXI/K9aFSQk9vEFapXmNdyDoy2QrkSbFp2FAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOyHI96fM/7ZiarMXSobJKX4TWKMwHwYDVR0j
BBgwFoAUSccI0BPV/nSZmAD7JlsW/fiYYdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkQ1S3FRamlyaWhZNkJURFJnb3F1MkpocjZYV3BFekd2cFhURGVmS0hG
OHYvMC80OUM3MDhEMDEzRDVGRTc0OTk5ODAwRkIyNjVCMTZGREY4OTg2MUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzcwOEQwMTNENUZFNzQ5
OTk4MDBGQjI2NUIxNkZERjg5ODYxRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JENUtxUWppcmloWTZCVERSZ29xdTJKaHI2WFdwRXpHdnBYVERlZktIRjh2LzAv
MzIzODMwMzQzYTM2Mzc2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM2MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZ+CAMA0GCSqGSIb3DQEBCwUA
A4IBAQBF+SFVfMaTG/QTgu/VRN2Wm9VtMmT+gtrvoMboklcqBzVZTxUaGUCZDNyn
fHuIp9on+SPs0zqD9qhxsRQKwKUyBS7pp8ZbpJPLVgZhL3gDSSkLqt8upgt9a09M
gCktN6PPf4UPXuf1gVXlf7Q6HfcnrczaCio8kEXyNy70OAiONYefF7XrHVaC/78z
rSYY5689YYkYJ27EM+mNsvfQRaxw2eZi2pdioQKhS25r1QoHG5nK5ZfGSHB6UYLT
TOxg9fbGgq6VmGoUWM8+xcx0phyno6oufvgfHzYTI7ZTGHTe8sHpnX/0+zpP9I3R
FXBxvNYFU1hxrL3KR1Don/m/ehyB
-----END CERTIFICATE-----
Generated at Fri Feb 21 17:27:25 2025 by rpki-client