Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
File:                     323830343a383237303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier:          WFBp1V/bkcQBnfHePovHA34gex/+Mw4hMniC46k5NXs=
Subject key identifier:   A1:8B:6E:37:62:16:F5:82:CD:A6:C9:DE:CC:9D:3D:12:7F:7E:D3:67
Certificate issuer:       /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial:       4163E239F3D281F10473A84F999BC219BFF0E071
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa
Signing time:             Thu 30 Jan 2025 18:28:29 +0000
ROA not before:           Thu 30 Jan 2025 18:23:29 +0000
ROA not after:            Thu 29 Jan 2026 18:28:29 +0000
asID:                     61608
IP address blocks:        2804:8270::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:e2:39:f3:d2:81:f1:04:73:a8:4f:99:9b:c2:19:bf:f0:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
        Validity
            Not Before: Jan 30 18:23:29 2025 GMT
            Not After : Jan 29 18:28:29 2026 GMT
        Subject: CN=A18B6E376216F582CDA6C9DECC9D3D127F7ED367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:74:dc:2b:6c:06:0c:24:0e:9c:27:d9:8c:
                    cb:ee:83:7a:39:e2:59:32:dd:13:f9:53:9c:b6:ce:
                    f3:1f:2f:91:59:e8:3b:24:a8:64:1d:14:98:9d:9c:
                    ee:e4:8a:72:41:93:23:2e:fa:aa:0c:e9:4f:99:23:
                    de:37:f6:b0:db:6e:bd:6e:dd:07:5b:10:d7:cb:20:
                    a6:a0:0f:3e:61:06:12:ee:eb:01:42:7d:24:9c:84:
                    4c:26:fa:ac:b9:fe:6a:4f:50:c1:57:f7:9f:ca:bd:
                    ba:14:64:b0:60:3b:fb:64:14:17:46:e2:0a:16:d3:
                    c9:c1:2d:f3:bd:c4:fd:74:ed:f9:db:7c:01:61:14:
                    23:91:c9:f8:c1:7a:b2:d7:a9:d9:d7:b7:d6:d1:91:
                    5c:d8:a4:fc:36:36:4f:1c:cf:d9:f4:00:2f:3d:ba:
                    be:e5:5b:35:37:25:1a:ca:e8:f2:17:f6:65:05:26:
                    e7:e9:78:1e:d4:a9:7f:44:59:a1:13:99:49:20:2d:
                    9d:15:5d:5d:42:94:f5:62:bc:75:23:54:d8:1a:35:
                    4b:81:a0:5f:a9:b1:c2:ae:66:14:c8:e2:6d:6c:4e:
                    9d:e2:09:d8:fb:10:db:b4:77:5c:84:97:d3:f3:79:
                    c7:e8:b1:77:c7:2c:51:eb:97:8d:ee:6c:e1:5c:18:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:6E:37:62:16:F5:82:CD:A6:C9:DE:CC:9D:3D:12:7F:7E:D3:67
            X509v3 Authority Key Identifier:
                keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33342d3334203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:c8:7a:bd:f8:6c:ca:02:34:72:40:e5:fb:85:25:22:e7:
         7f:64:f4:90:ed:fa:79:20:ee:f7:4d:c6:6e:50:fc:f8:d5:c4:
         0c:eb:c5:66:53:ff:41:ba:9d:12:f0:c8:d3:6a:f8:5a:69:f7:
         a4:52:70:4a:bb:44:a3:49:7b:c8:f0:b7:ff:d5:ef:fa:0c:4f:
         e5:23:68:9e:3e:4b:49:0a:be:10:6a:5e:27:06:fa:b6:c4:75:
         6b:a3:c1:b7:7c:51:17:64:46:bf:18:6a:06:2d:2f:62:96:dc:
         3b:e0:1a:54:7b:00:3e:49:b5:1f:d1:bc:10:a8:5a:9c:81:96:
         81:de:30:cb:85:04:b3:5b:14:8f:ca:f2:94:7c:64:39:39:7d:
         42:fb:b3:6a:f8:1d:ca:fa:c5:4a:d7:fc:59:0a:49:da:38:19:
         16:7f:ac:eb:0c:4b:bd:53:a5:a6:e3:f9:90:c6:34:e1:be:eb:
         da:09:01:45:84:23:05:1d:e7:95:09:84:1a:2a:aa:09:2b:b6:
         47:7e:6b:9a:7f:03:7c:d2:96:52:1e:a9:ba:ef:f0:3c:c4:7d:
         5c:40:31:36:36:37:86:8e:77:af:52:b3:d7:3d:94:54:0a:df:
         e9:2a:2c:cc:d4:98:6d:e5:34:09:46:0b:73:09:32:44:0a:41:
         a1:25:49:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWPiOfPSgfEEc6hPmZvCGb/w4HEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz
N0NBQUMwMTAeFw0yNTAxMzAxODIzMjlaFw0yNjAxMjkxODI4MjlaMDMxMTAvBgNV
BAMTKEExOEI2RTM3NjIxNkY1ODJDREE2QzlERUNDOUQzRDEyN0Y3RUQzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLnTcK2wGDCQOnCfZjMvug3o5
4lky3RP5U5y2zvMfL5FZ6DskqGQdFJidnO7kinJBkyMu+qoM6U+ZI9439rDbbr1u
3QdbENfLIKagDz5hBhLu6wFCfSSchEwm+qy5/mpPUMFX95/KvboUZLBgO/tkFBdG
4goW08nBLfO9xP107fnbfAFhFCORyfjBerLXqdnXt9bRkVzYpPw2Nk8cz9n0AC89
ur7lWzU3JRrK6PIX9mUFJufpeB7UqX9EWaETmUkgLZ0VXV1ClPVivHUjVNgaNUuB
oF+pscKuZhTI4m1sTp3iCdj7ENu0d1yEl9PzecfosXfHLFHrl43ubOFcGIuTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoYtuN2IW9YLNpsnezJ09En9+02cwHwYDVR0j
BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2
OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv
MzIzODMwMzQzYTM4MzIzNzMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM2
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEgnAAMA0GCSqGSIb3DQEBCwUAA4IBAQAsuch6vfhs
ygI0ckDl+4UlIud/ZPSQ7fp5IO73TcZuUPz41cQM68VmU/9Bup0S8MjTavhaafek
UnBKu0SjSXvI8Lf/1e/6DE/lI2iePktJCr4Qal4nBvq2xHVro8G3fFEXZEa/GGoG
LS9iltw74BpUewA+SbUf0bwQqFqcgZaB3jDLhQSzWxSPyvKUfGQ5OX1C+7Nq+B3K
+sVK1/xZCknaOBkWf6zrDEu9U6Wm4/mQxjThvuvaCQFFhCMFHeeVCYQaKqoJK7ZH
fmuafwN80pZSHqm67/A8xH1cQDE2NjeGjnevUrPXPZRUCt/pKizM1Jht5TQJRgtz
CTJECkGhJUmW
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:57 2025 by rpki-client