Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa
File:                     323830343a3961383a3a2f33342d3336203d3e20323632393739.roa (raw, json)
Hash identifier:          WzCD2fYWaZ4v20H/XyeRnoqnKjV2+dLGiiw/jz/7L7Q=
Subject key identifier:   90:83:84:8D:64:B5:83:83:FE:F7:D1:70:B6:DF:FB:C5:19:04:D6:8F
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       1CF04C1070D4CAFB375C1F62E7E633B329AC25F1
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa
Signing time:             Fri 14 Mar 2025 20:27:28 +0000
ROA not before:           Fri 14 Mar 2025 20:22:28 +0000
ROA not after:            Fri 13 Mar 2026 20:27:28 +0000
asID:                     262979
IP address blocks:        2804:9a8::/34 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f0:4c:10:70:d4:ca:fb:37:5c:1f:62:e7:e6:33:b3:29:ac:25:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Mar 14 20:22:28 2025 GMT
            Not After : Mar 13 20:27:28 2026 GMT
        Subject: CN=9083848D64B58383FEF7D170B6DFFBC51904D68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:17:ef:2c:27:90:48:42:b8:e4:d1:39:da:
                    f3:7f:2a:bb:a7:92:24:ff:3c:e6:39:50:15:c0:36:
                    86:16:43:6f:a9:f0:10:2e:ea:32:3e:ca:eb:0f:ee:
                    18:07:16:89:34:ec:fa:64:a9:45:a7:5f:80:b8:fb:
                    cb:45:d5:92:46:42:ff:ea:a7:1d:0e:09:9a:d7:07:
                    40:d0:7e:75:9b:32:b7:af:05:f5:38:12:59:f7:84:
                    d8:30:2d:86:13:45:4e:a2:3f:0c:c7:c7:ba:7d:55:
                    50:4b:08:42:61:bc:60:af:2b:e8:98:e4:82:d5:29:
                    2b:29:00:51:4a:6d:61:2b:b8:3b:64:47:2a:1e:d7:
                    30:54:45:52:f3:f1:5d:88:08:15:22:1c:ff:47:e3:
                    ed:1b:22:1d:de:39:cf:48:40:8f:7a:d2:0c:34:97:
                    d7:3b:24:5a:3c:fb:88:95:40:83:d7:4f:c8:d4:27:
                    0c:0b:ec:47:dd:e9:d6:14:37:b5:06:36:cf:cc:ea:
                    7c:4e:57:e7:a7:0c:25:fb:ff:0e:d2:84:c5:7d:f3:
                    63:58:db:41:d4:aa:db:ae:80:65:1e:7a:ae:bd:ba:
                    7a:a5:a6:ac:0f:55:92:9f:79:f7:92:00:57:24:06:
                    50:94:08:5b:42:8d:52:65:f7:b1:83:3a:f5:1d:4a:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:83:84:8D:64:B5:83:83:FE:F7:D1:70:B6:DF:FB:C5:19:04:D6:8F
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33342d3336203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:92:62:72:95:b1:70:7a:51:1f:c7:61:18:3f:cf:45:ed:
         67:2f:b8:9a:47:10:19:0b:0f:0c:63:f3:cc:e9:dc:e7:fd:41:
         12:a8:c8:ce:c7:6f:7e:e3:20:f1:bd:11:3d:c0:46:fc:b7:70:
         d4:6b:69:6e:84:6d:7b:32:1c:1e:5d:97:dd:dd:4a:fe:c2:19:
         89:fc:7d:e4:9d:b2:12:6c:28:9e:9a:07:3b:10:4c:1c:bc:33:
         99:aa:7d:fd:f3:b0:3d:0a:60:1a:8c:d9:88:dd:12:ab:5d:0a:
         cf:5c:f7:3e:7c:ff:92:4d:9d:61:30:0e:ae:cf:87:4c:74:9a:
         7b:6d:ab:be:e9:ce:b8:d3:13:76:9b:3e:74:2e:fa:c8:13:21:
         29:85:83:83:db:30:70:3f:34:62:52:19:ee:6c:a4:33:32:bb:
         cc:11:3a:bf:d8:d7:03:1d:5a:33:61:83:57:fd:0a:7a:20:5e:
         9a:ab:f1:03:d5:67:d6:40:35:12:25:de:fe:5b:9e:64:3a:45:
         4c:ba:d6:e6:ae:e9:ca:72:dd:93:fd:9d:9a:53:db:11:13:eb:
         f9:f0:9b:56:de:b0:08:0f:e1:ad:a5:bb:69:ad:b9:77:e0:d0:
         9c:29:9c:12:89:26:76:17:61:03:9b:c2:cc:09:6e:51:a6:d3:
         5b:e7:15:ba
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHPBMEHDUyvs3XB9i5+YzsymsJfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlFOURGNDgwQzVFN0ZBQ0VFQUQ3RTc3NTlFNUVFRjND
NDczMEUwRDAeFw0yNTAzMTQyMDIyMjhaFw0yNjAzMTMyMDI3MjhaMDMxMTAvBgNV
BAMTKDkwODM4NDhENjRCNTgzODNGRUY3RDE3MEI2REZGQkM1MTkwNEQ2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YBfvLCeQSEK45NE52vN/Krun
kiT/POY5UBXANoYWQ2+p8BAu6jI+yusP7hgHFok07PpkqUWnX4C4+8tF1ZJGQv/q
px0OCZrXB0DQfnWbMrevBfU4Eln3hNgwLYYTRU6iPwzHx7p9VVBLCEJhvGCvK+iY
5ILVKSspAFFKbWEruDtkRyoe1zBURVLz8V2ICBUiHP9H4+0bIh3eOc9IQI960gw0
l9c7JFo8+4iVQIPXT8jUJwwL7Efd6dYUN7UGNs/M6nxOV+enDCX7/w7ShMV982NY
20HUqtuugGUeeq69unqlpqwPVZKfefeSAFckBlCUCFtCjVJl97GDOvUdSgTXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkIOEjWS1g4P+99Fwtt/7xRkE1o8wHwYDVR0j
BBgwFoAUmenfSAxef6zurX53WeXu88RzDg0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMS85OUU5REY0ODBDNUU3RkFDRUVBRDdFNzc1OUU1RUVGM0M0NzMwRTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RTlERjQ4MEM1RTdGQUNF
RUFEN0U3NzU5RTVFRUYzQzQ3MzBFMEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWZXNNRzg5U3JIeks4eXlzazZNRWpUaHNlZUdhRkVRdVRURE5DRmptOEg4LzEv
MzIzODMwMzQzYTM5NjEzODNhM2EyZjMzMzQyZDMzMzYyMDNkM2UyMDMyMzYzMjM5
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigECagAMA0GCSqGSIb3DQEBCwUAA4IBAQB2CpJicpWx
cHpRH8dhGD/PRe1nL7iaRxAZCw8MY/PM6dzn/UESqMjOx29+4yDxvRE9wEb8t3DU
a2luhG17MhweXZfd3Ur+whmJ/H3knbISbCiemgc7EEwcvDOZqn3987A9CmAajNmI
3RKrXQrPXPc+fP+STZ1hMA6uz4dMdJp7bau+6c640xN2mz50LvrIEyEphYOD2zBw
PzRiUhnubKQzMrvMETq/2NcDHVozYYNX/Qp6IF6aq/ED1WfWQDUSJd7+W55kOkVM
utbmrunKct2T/Z2aU9sRE+v58JtW3rAID+Gtpbtprbl34NCcKZwSiSZ2F2EDm8LM
CW5RptNb5xW6
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:28 2025 by rpki-client