Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
File:                     323830343a363063633a3a2f33322d3332203d3e20323639313932.roa (raw, json)
Hash identifier:          c80jzCef/Uhq3OV1PPKNrWErfWWq31+M2pplihZp2gY=
Subject key identifier:   41:C0:2E:B6:01:D9:8E:AB:82:46:F5:BF:B7:42:B7:55:C5:98:C6:63
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       67AFFAC08CC6D4E2DC18A518BCDC5EF8479898A8
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     269192
IP address blocks:        2804:60cc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:af:fa:c0:8c:c6:d4:e2:dc:18:a5:18:bc:dc:5e:f8:47:98:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=41C02EB601D98EAB8246F5BFB742B755C598C663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:c4:23:37:af:3a:c2:68:af:95:01:30:eb:
                    c7:8e:5b:13:b6:7a:8b:53:8c:25:ab:5b:62:02:9c:
                    88:a3:06:94:d6:5f:40:e1:ee:70:12:3b:33:d6:db:
                    79:3a:79:6a:cf:4f:b3:d8:6f:f6:95:95:19:8a:40:
                    98:03:e3:22:f5:fa:bb:28:69:8c:c2:a3:b1:09:ed:
                    38:cc:ae:03:31:10:3e:9c:8f:a5:98:66:80:24:d6:
                    a6:a4:51:04:2c:32:e1:52:3d:25:d1:72:91:33:ea:
                    cc:d7:ee:cb:4f:3b:01:c2:17:22:5e:61:c2:da:84:
                    1a:be:ce:55:6a:bb:ad:e8:77:d0:a8:7a:de:05:aa:
                    81:5b:ce:64:0a:48:8b:b8:e8:e2:1d:c5:40:30:41:
                    0c:94:32:07:b9:b6:b3:f0:8d:36:74:c3:a9:86:89:
                    ba:9d:1e:b4:7c:4a:4d:02:7a:68:12:2d:44:d3:41:
                    2e:bc:08:4d:8f:1e:01:00:78:08:05:1c:18:9e:d7:
                    fb:9d:68:03:bc:80:0d:99:5d:9c:12:fb:30:3a:21:
                    b0:0b:3d:b6:b4:8e:15:0d:79:f5:40:f3:66:66:a9:
                    2d:d8:61:6b:5b:a0:a0:1b:52:c5:d9:88:7e:2b:2e:
                    86:ab:69:f0:db:4c:6a:e2:5e:bd:26:cc:bb:4f:ae:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:2E:B6:01:D9:8E:AB:82:46:F5:BF:B7:42:B7:55:C5:98:C6:63
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:7b:ff:fc:ba:e0:c3:06:24:be:e5:1f:a0:99:dd:9c:ea:
         b2:8c:7e:d1:c4:eb:d2:38:66:b9:d0:e9:5e:51:fd:dd:18:76:
         d2:ae:f7:d5:03:ae:b5:2d:a4:05:db:79:75:5e:09:d1:3c:23:
         95:56:e6:f6:56:a6:e6:af:40:09:78:4e:4d:0a:41:23:44:51:
         50:86:9c:60:43:bb:4b:2d:5a:c1:e1:c5:99:38:d4:09:0b:ea:
         8f:8c:8c:cd:77:33:7f:06:ec:21:6e:f0:90:df:33:2c:62:58:
         42:d6:3c:78:b2:66:44:e5:f8:d0:5d:17:56:b2:27:b1:39:0b:
         b0:fc:c8:c4:fe:64:5b:8e:4c:0d:33:f5:32:4f:39:e9:32:71:
         f9:a0:78:62:b2:d1:0d:0c:94:d1:e8:bf:ed:c5:31:1f:cf:5e:
         8a:72:57:66:79:10:34:a0:53:f9:8e:1f:c4:f5:67:2f:e0:e2:
         bc:03:cc:11:5b:6b:b6:00:5f:e4:b6:7e:ce:dc:b5:a3:e5:8b:
         a7:5d:1b:de:10:c6:2b:50:36:69:dc:72:6d:b5:f7:84:9c:e0:
         5a:fa:29:e5:28:3b:ff:c4:7e:4f:eb:9c:70:b4:88:ea:94:9a:
         34:60:74:78:5f:51:9b:88:8e:5e:b9:a7:ee:1c:ef:9e:5e:f8:
         e4:f4:be:71
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ6/6wIzG1OLcGKUYvNxe+EeYmKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlEQjU5MTM2OEZGQzlDMDMzRDE3NUJFRDExMzYwMDBE
NEM4NDgyMTAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMDMxMTAvBgNV
BAMTKDQxQzAyRUI2MDFEOThFQUI4MjQ2RjVCRkI3NDJCNzU1QzU5OEM2NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvMQjN686wmivlQEw68eOWxO2
eotTjCWrW2ICnIijBpTWX0Dh7nASOzPW23k6eWrPT7PYb/aVlRmKQJgD4yL1+rso
aYzCo7EJ7TjMrgMxED6cj6WYZoAk1qakUQQsMuFSPSXRcpEz6szX7stPOwHCFyJe
YcLahBq+zlVqu63od9Coet4FqoFbzmQKSIu46OIdxUAwQQyUMge5trPwjTZ0w6mG
ibqdHrR8Sk0CemgSLUTTQS68CE2PHgEAeAgFHBie1/udaAO8gA2ZXZwS+zA6IbAL
Pba0jhUNefVA82ZmqS3YYWtboKAbUsXZiH4rLoarafDbTGriXr0mzLtPrri7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQcAutgHZjquCRvW/t0K3VcWYxmMwHwYDVR0j
BBgwFoAUGdtZE2j/ycAz0XW+0RNgANTISCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGpZcnE4cmFuMWJSREVvUGM5aXZVZlM5NnZxb2R3WnpoMmNGSk5KeEpt
a3MvMS8xOURCNTkxMzY4RkZDOUMwMzNEMTc1QkVEMTEzNjAwMEQ0Qzg0ODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5REI1OTEzNjhGRkM5QzAz
M0QxNzVCRUQxMTM2MDAwRDRDODQ4MjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqWXJxOHJhbjFiUkRFb1BjOWl2VWZTOTZ2cW9kd1p6aDJjRkpOSnhKbWtzLzEv
MzIzODMwMzQzYTM2MzA2MzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgzDANBgkqhkiG9w0BAQsFAAOCAQEAddd7//y6
4MMGJL7lH6CZ3Zzqsox+0cTr0jhmudDpXlH93Rh20q731QOutS2kBdt5dV4J0Twj
lVbm9lam5q9ACXhOTQpBI0RRUIacYEO7Sy1aweHFmTjUCQvqj4yMzXczfwbsIW7w
kN8zLGJYQtY8eLJmROX40F0XVrInsTkLsPzIxP5kW45MDTP1Mk856TJx+aB4YrLR
DQyU0ei/7cUxH89einJXZnkQNKBT+Y4fxPVnL+DivAPMEVtrtgBf5LZ+zty1o+WL
p10b3hDGK1A2adxybbX3hJzgWvop5Sg7/8R+T+uccLSI6pSaNGB0eF9Rm4iOXrmn
7hzvnl745PS+cQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:47:57 2025 by rpki-client