Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa
File:                     323830343a353734343a3a2f33322d313238203d3e20323638303535.roa (raw, json)
Hash identifier:          JEDTFfSOycCuqPygkQ3H1us2RfL2zIXxZgOxtsAYy4U=
Subject key identifier:   2B:F3:67:C4:04:B6:53:3E:B0:59:0F:30:EB:1A:36:94:03:18:2F:9D
Certificate issuer:       /CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
Certificate serial:       33F10AC0A442BD310A6E6CC65A23DA2022099CE1
Authority key identifier: D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa
Signing time:             Sun 09 Feb 2025 17:17:15 +0000
ROA not before:           Sun 09 Feb 2025 17:12:15 +0000
ROA not after:            Sun 08 Feb 2026 17:17:15 +0000
asID:                     268055
IP address blocks:        2804:5744::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.crl
                          rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 23:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f1:0a:c0:a4:42:bd:31:0a:6e:6c:c6:5a:23:da:20:22:09:9c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
        Validity
            Not Before: Feb  9 17:12:15 2025 GMT
            Not After : Feb  8 17:17:15 2026 GMT
        Subject: CN=2BF367C404B6533EB0590F30EB1A369403182F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:bf:35:03:b3:e4:3d:14:9e:11:fe:32:9b:
                    74:e2:56:32:1f:fe:e6:d9:c4:98:90:a5:48:b4:bd:
                    a2:d8:25:19:eb:5c:39:c9:01:49:79:59:3c:55:99:
                    dc:72:14:19:db:65:9e:28:f4:10:10:af:fa:99:b5:
                    e3:7f:77:5c:b2:ff:41:2a:79:17:bb:6a:a3:6e:38:
                    f1:8b:1b:ce:27:4b:85:d9:ec:ae:59:8f:3f:26:91:
                    55:a4:51:4f:a1:85:b8:ad:81:9b:73:4a:38:49:07:
                    38:48:c3:d1:9a:8f:d3:55:d6:5b:b9:d6:fa:01:84:
                    25:16:27:f0:fe:86:64:b6:51:54:66:21:a5:46:f0:
                    46:a6:1b:3a:83:14:d3:f2:6c:4c:8a:a0:98:a1:bc:
                    3c:a4:ee:c2:4b:c8:35:bd:de:48:e8:7d:dc:8f:cc:
                    00:0b:0c:8a:82:9e:fa:63:d6:10:35:c9:de:e7:fb:
                    6c:c5:36:9c:97:3c:94:49:18:f3:b6:ab:38:38:23:
                    1b:e3:8f:01:8b:fc:5b:42:ac:d5:36:77:66:a0:28:
                    3b:8d:34:b5:77:79:bf:2b:c8:52:fc:75:37:3e:b3:
                    d0:d3:75:5c:e4:d5:8a:50:d1:cf:b0:b8:cb:25:d0:
                    cc:ce:82:06:95:5f:da:20:a5:73:41:08:fc:f7:14:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:67:C4:04:B6:53:3E:B0:59:0F:30:EB:1A:36:94:03:18:2F:9D
            X509v3 Authority Key Identifier:
                keyid:D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/323830343a353734343a3a2f33322d313238203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5744::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:75:1c:54:14:21:33:7b:4f:f0:95:07:ba:4e:8e:01:e6:72:
         c1:81:db:a7:87:bd:5a:54:08:21:9a:c9:ff:37:79:f1:97:66:
         26:c8:84:7b:25:92:17:e8:1b:1d:48:cc:05:e0:8f:2b:2a:7d:
         b5:e2:4e:10:ec:bb:4a:4b:e3:b4:9c:dd:a0:99:5b:f9:26:a5:
         f1:ab:c9:91:68:71:66:51:e3:c3:8b:48:57:80:0c:3e:06:79:
         0c:c9:e8:e4:2b:42:1f:3e:60:04:ab:51:7e:83:fa:d2:6e:02:
         09:e5:38:f0:57:d7:a3:59:60:fc:3c:d2:d4:7d:ed:76:86:b2:
         08:5b:24:2e:16:05:18:5b:1c:16:1b:41:78:00:e1:0e:67:8d:
         e6:04:19:c6:84:55:5d:04:63:08:30:fb:31:54:0b:18:f1:ec:
         63:9d:f6:39:29:82:ef:0b:1c:a9:e3:bf:fd:e8:71:ca:dd:d6:
         64:30:0c:b4:6f:7d:4f:01:94:bc:95:e8:af:d7:ef:2b:c7:c1:
         f5:7b:e2:b4:d2:64:2a:bb:99:cf:6d:89:c2:52:b6:1f:84:1b:
         a1:62:6a:35:6e:55:b6:e5:a7:30:39:f1:b5:33:43:db:6b:07:
         9d:18:32:42:13:97:31:8e:58:c1:f8:10:8e:69:d3:b4:8a:0c:
         90:62:4c:4a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUM/EKwKRCvTEKbmzGWiPaICIJnOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM3QzRBM0Y5M0QwM0REMjE1RTAzMzA2NTE5QkQ4Qzc4
NEM3MUNCNDAeFw0yNTAyMDkxNzEyMTVaFw0yNjAyMDgxNzE3MTVaMDMxMTAvBgNV
BAMTKDJCRjM2N0M0MDRCNjUzM0VCMDU5MEYzMEVCMUEzNjk0MDMxODJGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2b81A7PkPRSeEf4ym3TiVjIf
/ubZxJiQpUi0vaLYJRnrXDnJAUl5WTxVmdxyFBnbZZ4o9BAQr/qZteN/d1yy/0Eq
eRe7aqNuOPGLG84nS4XZ7K5Zjz8mkVWkUU+hhbitgZtzSjhJBzhIw9Gaj9NV1lu5
1voBhCUWJ/D+hmS2UVRmIaVG8EamGzqDFNPybEyKoJihvDyk7sJLyDW93kjofdyP
zAALDIqCnvpj1hA1yd7n+2zFNpyXPJRJGPO2qzg4IxvjjwGL/FtCrNU2d2agKDuN
NLV3eb8ryFL8dTc+s9DTdVzk1YpQ0c+wuMsl0MzOggaVX9ogpXNBCPz3FDB7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUK/NnxAS2Uz6wWQ8w6xo2lAMYL50wHwYDVR0j
BBgwFoAU03xKP5PQPdIV4DMGUZvYx4THHLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWV3RjFmWVNOUjlKV1duZkN4M0NDNnVBeGJ4RTY2UGNVRkY4Z2E3TmpS
WkwvMC9EMzdDNEEzRjkzRDAzREQyMTVFMDMzMDY1MTlCRDhDNzg0QzcxQ0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzN0M0QTNGOTNEMDNERDIx
NUUwMzMwNjUxOUJEOEM3ODRDNzFDQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vld0YxZllTTlI5SldXbmZDeDNDQzZ1QXhieEU2NlBjVUZGOGdhN05qUlpMLzAv
MzIzODMwMzQzYTM1MzczNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFdEMA0GCSqGSIb3DQEBCwUAA4IBAQA5dRxU
FCEze0/wlQe6To4B5nLBgdunh71aVAghmsn/N3nxl2YmyIR7JZIX6BsdSMwF4I8r
Kn214k4Q7LtKS+O0nN2gmVv5JqXxq8mRaHFmUePDi0hXgAw+BnkMyejkK0IfPmAE
q1F+g/rSbgIJ5TjwV9ejWWD8PNLUfe12hrIIWyQuFgUYWxwWG0F4AOEOZ43mBBnG
hFVdBGMIMPsxVAsY8exjnfY5KYLvCxyp47/96HHK3dZkMAy0b31PAZS8leiv1+8r
x8H1e+K00mQqu5nPbYnCUrYfhBuhYmo1blW25acwOfG1M0PbawedGDJCE5cxjljB
+BCOadO0igyQYkxK
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:54 2025 by rpki-client