Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa
File:                     323830343a343330383a3a2f33322d3438203d3e20323637353434.roa (raw, json)
Hash identifier:          0dfo3WNaQNITUN7mxziPwZHTMNCT6cfZlT6yAEBAstI=
Subject key identifier:   9D:DE:32:41:8E:BF:05:B2:D7:70:0B:A0:37:AD:5E:59:94:79:74:AC
Certificate issuer:       /CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
Certificate serial:       7A62A0574AE77494CD6DE7526B98371E2F03006A
Authority key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267544
IP address blocks:        2804:4308::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl
                          rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:62:a0:57:4a:e7:74:94:cd:6d:e7:52:6b:98:37:1e:2f:03:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:16:c9:17:6d:2e:e0:d6:7a:cd:da:df:43:
                    28:d4:d5:27:52:e9:2b:21:38:9b:81:cd:da:a4:5b:
                    95:d4:49:f6:7a:ab:c2:bd:7f:ef:a9:9b:34:70:e7:
                    2a:c6:d5:8f:14:3c:53:15:6a:fd:fb:e5:ea:62:65:
                    1e:c4:12:9e:bc:cb:e1:73:46:c0:82:e2:66:d7:a9:
                    45:4c:5f:d9:78:91:75:74:39:40:62:71:60:07:b4:
                    37:22:58:23:a2:42:97:fd:da:b8:71:ed:b8:4a:4a:
                    2e:98:2f:fb:ec:de:a3:89:2b:14:dc:0b:e4:c6:f6:
                    95:74:3f:65:20:65:3e:a2:f3:5c:56:bb:3a:6d:ed:
                    74:04:74:d1:0f:50:16:3b:99:4d:be:90:6a:95:1b:
                    5a:16:8d:08:4a:23:2c:d4:b0:4a:a5:ca:62:6a:1e:
                    95:b8:b2:e5:6a:61:b1:46:a7:7f:12:66:64:15:d3:
                    14:c4:32:0e:95:dd:d0:24:28:79:15:b4:27:62:7c:
                    b5:68:29:a7:7f:0b:e8:e3:7d:39:fb:8c:c8:98:56:
                    9c:19:03:f9:34:fd:db:75:5f:b5:39:7d:a8:cf:0b:
                    4f:5c:2a:be:0f:6a:a3:1f:72:4c:c9:05:c3:83:13:
                    94:01:17:00:42:73:da:d7:58:95:76:21:31:ba:4d:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:32:41:8E:BF:05:B2:D7:70:0B:A0:37:AD:5E:59:94:79:74:AC
            X509v3 Authority Key Identifier:
                keyid:77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/323830343a343330383a3a2f33322d3438203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4308::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:90:bb:b6:04:96:47:03:a2:1b:96:51:6e:c7:84:08:b4:a6:
         4a:07:fe:dc:ed:f0:5f:d8:c6:a6:b6:0a:43:7b:d4:79:6b:15:
         db:76:fc:59:36:91:2a:96:62:24:70:94:d5:ad:64:11:23:fa:
         28:51:b4:3c:87:aa:15:d6:35:46:f8:99:46:52:6e:0f:23:8e:
         a1:87:76:7d:7a:77:d4:ba:0a:5a:eb:ca:07:cc:ce:30:0f:99:
         9c:3d:79:f9:de:38:12:08:9f:35:77:ed:3b:6f:41:4c:4d:94:
         8e:31:16:f8:53:91:45:d3:44:9e:19:3d:a1:d6:35:d2:33:06:
         28:37:15:e9:50:a8:5f:d8:e1:c5:26:a6:1a:30:c9:a1:cc:75:
         b1:0a:29:82:91:f7:6d:c1:0d:d3:1f:8b:a3:73:47:8b:71:99:
         87:fa:fb:b6:e3:f6:33:98:77:df:41:fc:37:d0:c2:f3:07:80:
         4b:e2:13:a4:4c:e6:96:11:d2:78:71:43:17:f1:72:38:52:e3:
         8c:37:d4:f1:7c:b7:f5:b1:ca:38:c4:08:5b:db:cd:96:0e:4a:
         43:c4:b2:5e:28:bd:99:3a:33:1a:7e:c1:ed:2a:14:7d:d8:7d:
         63:f9:5e:77:97:1b:43:42:51:fc:dc:67:ce:cb:fc:42:30:56:
         e7:a8:f1:b6
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUemKgV0rndJTNbedSa5g3Hi8DAGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdBNUM1NjlCMjI5NEQyQzlBOEQyRTRCRDc4MTA4MUEy
MzRGMUMyNDAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc5RDE2QzkxNzZEMkVFMEQ2
N0FDRERBREY0MzI4RDRENTI3NTJFOTJCMjEzODlCODFDRERBQTQ1Qjk1RDQ0OUY2
N0FBQkMyQkQ3RkVGQTk5QjM0NzBFNzJBQzZENThGMTQzQzUzMTU2QUZERkJFNUVB
NjI2NTFFQzQxMjlFQkNDQkUxNzM0NkMwODJFMjY2RDdBOTQ1NEM1RkQ5Nzg5MTc1
NzQzOTQwNjI3MTYwMDdCNDM3MjI1ODIzQTI0Mjk3RkREQUI4NzFFREI4NEE0QTJF
OTgyRkZCRUNERUEzODkyQjE0REMwQkU0QzZGNjk1NzQzRjY1MjA2NTNFQTJGMzVD
NTZCQjNBNkRFRDc0MDQ3NEQxMEY1MDE2M0I5OTREQkU5MDZBOTUxQjVBMTY4RDA4
NEEyMzJDRDRCMDRBQTVDQTYyNkExRTk1QjhCMkU1NkE2MUIxNDZBNzdGMTI2NjY0
MTVEMzE0QzQzMjBFOTVEREQwMjQyODc5MTVCNDI3NjI3Q0I1NjgyOUE3N0YwQkU4
RTM3RDM5RkI4Q0M4OTg1NjlDMTkwM0Y5MzRGRERCNzU1RkI1Mzk3REE4Q0YwQjRG
NUMyQUJFMEY2QUEzMUY3MjRDQzkwNUMzODMxMzk0MDExNzAwNDI3M0RBRDc1ODk1
NzYyMTMxQkE0RDY5MDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA150WyRdtLuDWes3a30Mo1NUnUukrITibgc3apFuV1En2eqvCvX/v
qZs0cOcqxtWPFDxTFWr9++XqYmUexBKevMvhc0bAguJm16lFTF/ZeJF1dDlAYnFg
B7Q3IlgjokKX/dq4ce24SkoumC/77N6jiSsU3AvkxvaVdD9lIGU+ovNcVrs6be10
BHTRD1AWO5lNvpBqlRtaFo0ISiMs1LBKpcpiah6VuLLlamGxRqd/EmZkFdMUxDIO
ld3QJCh5FbQnYny1aCmnfwvo4305+4zImFacGQP5NP3bdV+1OX2ozwtPXCq+D2qj
H3JMyQXDgxOUARcAQnPa11iVdiExuk1pBwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FJ3eMkGOvwWy13ALoDetXlmUeXSsMB8GA1UdIwQYMBaAFHelxWmyKU0smo0uS9eB
CBojTxwkMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jia3FMY041OXJHQ1dE
bXJLTlR2NEY1Z0FnMmJqR0ttNmJyNkgxQkc0WllZLzEvNzdBNUM1NjlCMjI5NEQy
QzlBOEQyRTRCRDc4MTA4MUEyMzRGMUMyNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83N0E1QzU2OUIyMjk0RDJDOUE4RDJFNEJENzgxMDgxQTIzNEYx
QzI0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CYmtxTGNONTlyR0NXRG1yS05U
djRGNWdBZzJiakdLbTZicjZIMUJHNFpZWS8xLzMyMzgzMDM0M2EzNDMzMzAzODNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNzM1MzQzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
QwgwDQYJKoZIhvcNAQELBQADggEBAHmQu7YElkcDohuWUW7HhAi0pkoH/tzt8F/Y
xqa2CkN71HlrFdt2/Fk2kSqWYiRwlNWtZBEj+ihRtDyHqhXWNUb4mUZSbg8jjqGH
dn16d9S6ClrrygfMzjAPmZw9efneOBIInzV37TtvQUxNlI4xFvhTkUXTRJ4ZPaHW
NdIzBig3FelQqF/Y4cUmphowyaHMdbEKKYKR923BDdMfi6NzR4txmYf6+7bj9jOY
d99B/DfQwvMHgEviE6RM5pYR0nhxQxfxcjhS44w31PF8t/WxyjjECFvbzZYOSkPE
sl4ovZk6Mxp+we0qFH3YfWP5XneXG0NCUfzcZ87L/EIwVueo8bY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:02:54 2025 by rpki-client