Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
File:                     323830343a343762343a3a2f33322d3332203d3e20323637303732.roa (raw, json)
Hash identifier:          aaaHpr8RKxK/NKtDk9oSjG3YWx8d7BamoaQSaVJGuxI=
Subject key identifier:   5B:4A:94:F2:F5:62:B1:2F:32:B2:3E:E9:BC:56:64:9D:39:66:D0:78
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       523C6A9184881F22C28E9B964013F0F10E3C57FE
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     267072
IP address blocks:        2804:47b4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3c:6a:91:84:88:1f:22:c2:8e:9b:96:40:13:f0:f1:0e:3c:57:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:94:6b:84:87:e1:91:4e:e1:13:0d:09:f3:
                    0d:e8:13:38:a1:52:83:9f:81:f5:04:95:db:28:a3:
                    3d:6a:80:f3:cf:60:74:85:c4:ee:4c:b2:3e:ad:89:
                    9d:9c:b7:b4:52:ab:60:da:0f:7f:eb:d3:3b:32:58:
                    ae:7c:6e:5e:7c:df:de:fe:21:15:cb:ed:c1:21:71:
                    c3:0a:cf:ed:fd:5e:1e:41:c3:35:33:82:5f:3f:c1:
                    43:81:9b:fc:c2:7f:e8:a3:45:d0:b1:f8:57:6c:11:
                    a4:69:f5:fc:71:ac:7c:89:00:30:14:59:3b:23:1c:
                    a9:24:70:56:81:84:73:62:14:a6:62:fa:2c:f1:74:
                    e5:12:ab:52:c9:7f:4d:cf:75:3c:78:94:03:a7:6c:
                    ab:a0:ec:c9:cb:72:74:b1:31:c9:3e:14:41:1a:f9:
                    7f:66:5f:ce:e1:68:40:86:10:8e:e0:af:ab:68:47:
                    b6:81:1b:a2:4c:89:bf:b1:15:d3:58:91:aa:1e:1b:
                    93:ca:0e:bc:33:80:ab:15:b7:23:90:2b:63:17:b1:
                    5a:2c:15:7f:21:d7:1f:24:6e:00:36:25:03:73:9f:
                    4d:cc:b2:6d:50:ff:dd:2e:3f:7d:10:05:44:1d:b5:
                    c2:8d:c9:ce:7a:1d:12:63:39:56:55:49:52:82:2e:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4A:94:F2:F5:62:B1:2F:32:B2:3E:E9:BC:56:64:9D:39:66:D0:78
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/323830343a343762343a3a2f33322d3332203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         de:79:11:0a:68:27:a7:01:5a:7e:e5:b1:f0:f6:58:29:ce:6a:
         5f:23:04:2a:d3:17:e6:27:f2:44:0c:88:ac:bd:bd:87:90:43:
         44:f9:af:2c:5e:9b:2d:10:96:23:42:01:c7:21:28:98:7b:6e:
         06:29:3f:a7:02:0c:55:34:dd:b6:5f:07:fc:af:21:68:72:14:
         11:0f:d6:89:74:f6:8f:93:ea:89:a7:d1:93:12:92:11:30:f8:
         83:11:b7:89:3b:de:c4:ad:b8:d6:95:88:f9:d9:35:99:66:ac:
         66:d0:2b:ea:cf:b6:5c:47:c8:bd:ce:9f:45:3d:0f:7e:5e:b7:
         5e:d1:a9:09:63:90:28:7e:95:25:68:47:0f:12:67:5b:56:45:
         6c:62:2d:e7:27:9b:87:5c:a9:d7:2a:21:d7:95:c5:22:fa:02:
         14:a8:74:69:7d:cd:b0:b3:35:38:21:42:63:54:fc:29:ec:4a:
         13:a3:b8:50:c7:0e:e8:3c:f9:a0:39:47:90:f0:86:51:1b:f4:
         e6:33:7d:f3:e1:5e:f7:83:21:8d:33:6c:86:27:3f:5b:06:76:
         f6:00:29:a6:8b:d6:a8:c9:5d:87:fa:84:ac:06:c9:13:24:52:
         13:35:15:46:41:dc:bd:72:3f:a7:de:f4:69:02:6e:11:a7:f6:
         24:a0:01:74
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUUjxqkYSIHyLCjpuWQBPw8Q48V/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0MkMzMUI5RDcwNTY5QjI3NjE1MThBMTMwRjJENDc1
NkRCRkM2MTAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTgxMzk0NkI4NDg3RTE5MTRF
RTExMzBEMDlGMzBERTgxMzM4QTE1MjgzOUY4MUY1MDQ5NURCMjhBMzNENkE4MEYz
Q0Y2MDc0ODVDNEVFNENCMjNFQUQ4OTlEOUNCN0I0NTJBQjYwREEwRjdGRUJEMzNC
MzI1OEFFN0M2RTVFN0NERkRFRkUyMTE1Q0JFREMxMjE3MUMzMEFDRkVERkQ1RTFF
NDFDMzM1MzM4MjVGM0ZDMTQzODE5QkZDQzI3RkU4QTM0NUQwQjFGODU3NkMxMUE0
NjlGNUZDNzFBQzdDODkwMDMwMTQ1OTNCMjMxQ0E5MjQ3MDU2ODE4NDczNjIxNEE2
NjJGQTJDRjE3NEU1MTJBQjUyQzk3RjREQ0Y3NTNDNzg5NDAzQTc2Q0FCQTBFQ0M5
Q0I3Mjc0QjEzMUM5M0UxNDQxMUFGOTdGNjY1RkNFRTE2ODQwODYxMDhFRTBBRkFC
Njg0N0I2ODExQkEyNEM4OUJGQjExNUQzNTg5MUFBMUUxQjkzQ0EwRUJDMzM4MEFC
MTVCNzIzOTAyQjYzMTdCMTVBMkMxNTdGMjFENzFGMjQ2RTAwMzYyNTAzNzM5RjRE
Q0NCMjZENTBGRkREMkUzRjdEMTAwNTQ0MURCNUMyOERDOUNFN0ExRDEyNjMzOTU2
NTU0OTUyODIyRTJDNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqBOUa4SH4ZFO4RMNCfMN6BM4oVKDn4H1BJXbKKM9aoDzz2B0hcTu
TLI+rYmdnLe0Uqtg2g9/69M7MliufG5efN/e/iEVy+3BIXHDCs/t/V4eQcM1M4Jf
P8FDgZv8wn/oo0XQsfhXbBGkafX8cax8iQAwFFk7IxypJHBWgYRzYhSmYvos8XTl
EqtSyX9Nz3U8eJQDp2yroOzJy3J0sTHJPhRBGvl/Zl/O4WhAhhCO4K+raEe2gRui
TIm/sRXTWJGqHhuTyg68M4CrFbcjkCtjF7FaLBV/IdcfJG4ANiUDc59NzLJtUP/d
Lj99EAVEHbXCjcnOeh0SYzlWVUlSgi4sSQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FFtKlPL1YrEvMrI+6bxWZJ05ZtB4MB8GA1UdIwQYMBaAFKlCwxudcFabJ2FRihMP
LUdW2/xhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NxeUNHb1AzTGRuZEJa
enJZVkZoMkQxUHExSnp4V1BHTnNtYlQ4ZFQ5Q3BlLzEvQTk0MkMzMUI5RDcwNTY5
QjI3NjE1MThBMTMwRjJENDc1NkRCRkM2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BOTQyQzMxQjlENzA1NjlCMjc2MTUxOEExMzBGMkQ0NzU2REJG
QzYxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcXlDR29QM0xkbmRCWnpyWVZG
aDJEMVBxMUp6eFdQR05zbWJUOGRUOUNwZS8xLzMyMzgzMDM0M2EzNDM3NjIzNDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzMwMzczMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
R7QwDQYJKoZIhvcNAQELBQADggEBAN55EQpoJ6cBWn7lsfD2WCnOal8jBCrTF+Yn
8kQMiKy9vYeQQ0T5ryxemy0QliNCAcchKJh7bgYpP6cCDFU03bZfB/yvIWhyFBEP
1ol09o+T6omn0ZMSkhEw+IMRt4k73sStuNaViPnZNZlmrGbQK+rPtlxHyL3On0U9
D35et17RqQljkCh+lSVoRw8SZ1tWRWxiLecnm4dcqdcqIdeVxSL6AhSodGl9zbCz
NTghQmNU/CnsShOjuFDHDug8+aA5R5DwhlEb9OYzffPhXveDIY0zbIYnP1sGdvYA
KaaL1qjJXYf6hKwGyRMkUhM1FUZB3L1yP6fe9GkCbhGn9iSgAXQ=
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:40 2025 by rpki-client