Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa
File:                     323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (raw, json)
Hash identifier:          NfllLyEJp8UoEh4DXohmtE2d8eRTUTW38d9Wu1YXuFI=
Subject key identifier:   92:05:F7:41:7D:A7:AC:22:DF:E7:70:2B:8B:75:DD:7F:06:86:46:51
Certificate issuer:       /CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A
Certificate serial:       1A92A80BE4C1577B7ED66AECC6C16682D0114FC5
Authority key identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa
Signing time:             Fri 13 Jun 2025 00:07:52 +0000
ROA not before:           Fri 13 Jun 2025 00:02:52 +0000
ROA not after:            Fri 12 Jun 2026 00:07:52 +0000
asID:                     267443
IP address blocks:        2804:4198::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl
                          rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 02:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:92:a8:0b:e4:c1:57:7b:7e:d6:6a:ec:c6:c1:66:82:d0:11:4f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A
        Validity
            Not Before: Jun 13 00:02:52 2025 GMT
            Not After : Jun 12 00:07:52 2026 GMT
        Subject: CN=9205F7417DA7AC22DFE7702B8B75DD7F06864651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:87:39:8c:9a:07:7e:36:97:8a:d3:c3:da:d1:
                    02:7f:27:f5:97:82:40:83:2d:0f:5f:28:5b:ee:8f:
                    d1:2b:89:0f:28:00:35:ab:e6:4a:90:0b:75:ed:a9:
                    11:72:09:8e:92:71:6f:37:5c:2b:4d:7f:9c:15:b1:
                    98:15:4f:c3:16:49:1e:89:38:b0:18:0a:fc:a0:06:
                    48:7f:aa:ba:3d:94:19:96:39:cc:75:25:7a:66:33:
                    ef:83:65:4c:76:2e:e2:de:87:92:42:ea:40:27:ce:
                    5c:4e:50:af:ab:b9:ae:9e:1d:cb:5b:fa:73:1a:0d:
                    bb:23:ff:26:7f:c1:2d:71:ca:23:38:ea:6a:70:76:
                    ce:49:4f:12:fc:59:64:a0:9b:d1:78:9a:e8:72:30:
                    4e:10:54:6e:c9:f7:c6:38:af:dc:38:10:d6:2f:0d:
                    39:a8:94:fd:6c:88:46:b9:ee:8e:7d:a8:d7:d3:b7:
                    e9:7c:f6:44:f8:c2:0c:73:28:58:00:77:da:2c:80:
                    cb:a4:70:a6:f3:7d:83:43:90:5b:4e:40:9d:99:96:
                    db:73:cd:23:a4:58:d5:3a:6c:01:ed:ba:42:44:b9:
                    d1:d1:0c:4a:e5:22:ba:b0:bb:2c:36:91:0d:43:e6:
                    21:28:d1:c7:9e:71:eb:43:aa:08:fe:a0:95:6d:98:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:05:F7:41:7D:A7:AC:22:DF:E7:70:2B:8B:75:DD:7F:06:86:46:51
            X509v3 Authority Key Identifier:
                keyid:C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/323830343a343139383a3a2f33322d3336203d3e20323637343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4198::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:d9:4b:c6:9d:de:b2:0f:c8:84:ce:c6:27:56:ab:e6:21:
         71:47:06:0f:b5:c7:31:7b:35:80:23:13:d1:37:1c:d9:cf:d3:
         74:fc:d5:2e:03:60:10:b6:2f:3f:61:5d:22:22:d4:a8:fb:dd:
         ee:bf:5f:96:e7:d6:2b:2a:89:bf:a1:e4:8f:97:9d:1f:0d:d2:
         d5:08:3a:c0:29:65:25:02:7b:6e:09:84:aa:ee:5a:c8:f1:7f:
         28:db:1d:ef:de:02:10:44:7e:ff:18:4c:e6:d2:25:48:80:1a:
         93:51:88:17:67:0e:2f:0f:ec:39:4f:4a:ad:a0:13:d6:ee:8e:
         cc:15:08:ea:4b:06:d0:a7:7b:24:e7:05:de:1c:0f:3e:9b:0d:
         bb:5d:bd:b2:60:23:ef:60:9c:07:7f:2c:dd:ee:86:08:26:11:
         a6:db:f5:0a:a8:0f:d0:54:2b:98:d3:26:70:8f:23:41:5e:44:
         6a:63:f1:bf:a6:19:37:99:0f:e0:01:78:29:a6:e7:f1:4d:d7:
         81:5c:61:04:92:3a:b1:fd:82:2f:f3:a6:83:61:e1:15:95:9d:
         17:66:10:cf:39:2a:cf:c6:68:27:64:74:93:de:67:57:e2:ef:
         f3:f7:23:2d:0a:cc:4b:be:9e:0f:35:bc:8e:6f:eb:34:60:83:
         76:92:d6:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGpKoC+TBV3t+1mrsxsFmgtART8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzQTlGRjM2MDQ1NjJBODBDQjU1RTlCRUEzREYwMjAw
MkY1Q0E0QTAeFw0yNTA2MTMwMDAyNTJaFw0yNjA2MTIwMDA3NTJaMDMxMTAvBgNV
BAMTKDkyMDVGNzQxN0RBN0FDMjJERkU3NzAyQjhCNzVERDdGMDY4NjQ2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7hzmMmgd+NpeK08Pa0QJ/J/WX
gkCDLQ9fKFvuj9EriQ8oADWr5kqQC3XtqRFyCY6ScW83XCtNf5wVsZgVT8MWSR6J
OLAYCvygBkh/qro9lBmWOcx1JXpmM++DZUx2LuLeh5JC6kAnzlxOUK+rua6eHctb
+nMaDbsj/yZ/wS1xyiM46mpwds5JTxL8WWSgm9F4muhyME4QVG7J98Y4r9w4ENYv
DTmolP1siEa57o59qNfTt+l89kT4wgxzKFgAd9osgMukcKbzfYNDkFtOQJ2Zlttz
zSOkWNU6bAHtukJEudHRDErlIrqwuyw2kQ1D5iEo0ceecetDqgj+oJVtmIwPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkgX3QX2nrCLf53Ari3XdfwaGRlEwHwYDVR0j
BBgwFoAUxjqf82BFYqgMtV6b6j3wIAL1ykowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDMyQ21VMnAxeXBhaFlWaUFDZVoxOFZwZlQyRWVNd2NnbVR2SmF6eGNq
RlkvMC9DNjNBOUZGMzYwNDU2MkE4MENCNTVFOUJFQTNERjAyMDAyRjVDQTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2M0E5RkYzNjA0NTYyQTgw
Q0I1NUU5QkVBM0RGMDIwMDJGNUNBNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzMkNtVTJwMXlwYWhZVmlBQ2VaMThWcGZUMkVlTXdjZ21UdkphenhjakZZLzAv
MzIzODMwMzQzYTM0MzEzOTM4M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBmDANBgkqhkiG9w0BAQsFAAOCAQEAAh/ZS8ad
3rIPyITOxidWq+YhcUcGD7XHMXs1gCMT0Tcc2c/TdPzVLgNgELYvP2FdIiLUqPvd
7r9flufWKyqJv6Hkj5edHw3S1Qg6wCllJQJ7bgmEqu5ayPF/KNsd794CEER+/xhM
5tIlSIAak1GIF2cOLw/sOU9KraAT1u6OzBUI6ksG0Kd7JOcF3hwPPpsNu129smAj
72CcB38s3e6GCCYRptv1CqgP0FQrmNMmcI8jQV5EamPxv6YZN5kP4AF4Kabn8U3X
gVxhBJI6sf2CL/Omg2HhFZWdF2YQzzkqz8ZoJ2R0k95nV+Lv8/cjLQrMS76eDzW8
jm/rNGCDdpLWAg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:10:18 2025 by rpki-client