Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3a2f33322d3430203d3e203238333436.roa
File:                     323030313a313261343a3a2f33322d3430203d3e203238333436.roa (raw, json)
Hash identifier:          Ug6/vjQdgJBgBqRYRV59OAzin+XJffDRWUuvHcW7c88=
Subject key identifier:   23:29:BC:C3:AF:30:23:E2:93:D1:CA:D3:41:77:3C:8F:BE:41:C4:D0
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       16BFCFCE181407ECE7395F5D891DFF37EA627D1D
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3a2f33322d3430203d3e203238333436.roa
Signing time:             Thu 06 Mar 2025 18:40:26 +0000
ROA not before:           Thu 06 Mar 2025 18:35:26 +0000
ROA not after:            Thu 05 Mar 2026 18:40:26 +0000
asID:                     28346
IP address blocks:        2001:12a4::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bf:cf:ce:18:14:07:ec:e7:39:5f:5d:89:1d:ff:37:ea:62:7d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Mar  6 18:35:26 2025 GMT
            Not After : Mar  5 18:40:26 2026 GMT
        Subject: CN=2329BCC3AF3023E293D1CAD341773C8FBE41C4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:3e:d6:24:3a:4d:70:ca:6e:c9:f0:e0:9c:
                    29:70:1f:ce:48:54:07:6a:bd:86:4c:d5:39:17:19:
                    94:1a:df:3d:98:d4:88:02:85:ad:d9:2c:cd:61:e3:
                    9d:8f:3c:32:58:af:f2:82:6f:80:58:c3:3e:bf:11:
                    33:88:06:c3:18:09:09:d5:a1:00:58:68:09:75:4b:
                    6b:c9:57:c2:2f:46:c0:c9:90:d4:ac:26:a3:e6:4c:
                    20:5e:10:4f:e2:dd:0f:2e:bc:cb:4c:59:a7:00:bc:
                    32:3b:15:db:b2:62:13:f4:d1:02:f2:95:a8:68:9d:
                    18:a3:98:d1:01:aa:0e:45:61:6f:52:a8:78:31:12:
                    4a:87:47:92:e0:db:52:da:57:18:93:3d:ce:70:51:
                    e4:36:20:72:49:3c:e4:e3:b1:3c:07:77:ef:c4:72:
                    c0:3e:06:be:22:d7:98:89:10:93:d4:ff:eb:4f:07:
                    29:97:16:ae:47:d1:67:67:66:ba:23:76:79:21:9d:
                    a7:40:0b:cd:81:8d:bf:76:f1:80:db:2d:49:a7:51:
                    ad:8c:dc:13:fe:84:e2:3c:e9:4f:52:94:24:0b:5b:
                    65:d5:f6:97:6d:9f:b8:19:b9:93:bb:7b:e3:98:4d:
                    39:02:ac:60:2c:4c:eb:84:c9:cf:0c:d3:71:8c:3d:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:BC:C3:AF:30:23:E2:93:D1:CA:D3:41:77:3C:8F:BE:41:C4:D0
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/323030313a313261343a3a2f33322d3430203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:71:64:3a:bb:1e:39:33:98:1e:38:be:4b:9d:50:1e:4c:85:
         67:9e:62:50:61:81:0a:24:b2:fa:09:f7:0c:46:b7:74:d1:5b:
         43:08:f4:4e:a6:2d:fe:fd:14:62:92:3a:83:f4:bc:f1:26:62:
         d4:3c:e9:04:2c:92:98:06:0b:bb:20:52:d1:8c:f6:e2:ee:95:
         52:1f:18:00:74:f5:d2:7e:55:cd:84:3b:25:19:c3:88:f7:a6:
         30:47:09:b1:0c:03:a2:83:f5:3d:81:b6:74:fe:0c:0b:40:ef:
         e6:13:0c:29:8a:1c:91:bc:62:7c:ac:0a:6a:98:e7:c0:b3:1a:
         a5:3a:37:d1:ff:3f:d5:d4:98:f3:bb:6a:a9:a5:a3:48:04:a7:
         d4:26:3a:a7:e0:89:79:a1:39:4e:31:58:13:d0:ac:fb:b6:e5:
         0c:ba:de:21:1e:58:dc:ef:ab:39:5f:e9:3b:89:9d:8d:26:4e:
         61:72:97:96:07:6c:dc:cc:7f:4e:6f:b9:b6:da:a0:00:87:8a:
         ba:8d:21:52:fd:85:34:60:12:2c:f5:0e:27:7c:04:bc:c6:f4:
         44:8e:c7:2b:89:2e:a0:45:d6:1f:dd:48:c8:17:97:af:85:08:
         08:c6:12:b7:40:63:d0:29:d6:0e:e6:b3:60:5d:f7:77:14:46:
         c9:37:9e:47
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFr/PzhgUB+znOV9diR3/N+pifR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlDOEZFNEM0Qjk1QUE4MEQzQjczRENEMTM2REExRTFC
ODM2NTZEOTAeFw0yNTAzMDYxODM1MjZaFw0yNjAzMDUxODQwMjZaMDMxMTAvBgNV
BAMTKDIzMjlCQ0MzQUYzMDIzRTI5M0QxQ0FEMzQxNzczQzhGQkU0MUM0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FD7WJDpNcMpuyfDgnClwH85I
VAdqvYZM1TkXGZQa3z2Y1IgCha3ZLM1h452PPDJYr/KCb4BYwz6/ETOIBsMYCQnV
oQBYaAl1S2vJV8IvRsDJkNSsJqPmTCBeEE/i3Q8uvMtMWacAvDI7FduyYhP00QLy
lahonRijmNEBqg5FYW9SqHgxEkqHR5Lg21LaVxiTPc5wUeQ2IHJJPOTjsTwHd+/E
csA+Br4i15iJEJPU/+tPBymXFq5H0WdnZrojdnkhnadAC82Bjb928YDbLUmnUa2M
3BP+hOI86U9SlCQLW2XV9pdtn7gZuZO7e+OYTTkCrGAsTOuEyc8M03GMPWO/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIym8w68wI+KT0crTQXc8j75BxNAwHwYDVR0j
BBgwFoAUycj+TEuVqoDTtz3NE22h4bg2VtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHBiSzEzVHpxZFdLZlhwck1ESEh4OUtaQ0o2d3Z2WUcyR2ROdGZwZkRi
WFAvMS9DOUM4RkU0QzRCOTVBQTgwRDNCNzNEQ0QxMzZEQTFFMUI4MzY1NkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QzhGRTRDNEI5NUFBODBE
M0I3M0RDRDEzNkRBMUUxQjgzNjU2RDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RwYksxM1R6cWRXS2ZYcHJNREhIeDlLWkNKNnd2dllHMkdkTnRmcGZEYlhQLzEv
MzIzMDMwMzEzYTMxMzI2MTM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzODMz
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACABEqQwDQYJKoZIhvcNAQELBQADggEBAA5xZDq7Hjkz
mB44vkudUB5MhWeeYlBhgQoksvoJ9wxGt3TRW0MI9E6mLf79FGKSOoP0vPEmYtQ8
6QQskpgGC7sgUtGM9uLulVIfGAB09dJ+Vc2EOyUZw4j3pjBHCbEMA6KD9T2BtnT+
DAtA7+YTDCmKHJG8YnysCmqY58CzGqU6N9H/P9XUmPO7aqmlo0gEp9QmOqfgiXmh
OU4xWBPQrPu25Qy63iEeWNzvqzlf6TuJnY0mTmFyl5YHbNzMf05vubbaoACHirqN
IVL9hTRgEiz1Did8BLzG9ESOxyuJLqBF1h/dSMgXl6+FCAjGErdAY9Ap1g7ms2Bd
93cURsk3nkc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:37 2025 by rpki-client