Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa
File:                     323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa (raw, json)
Hash identifier:          s9AzS+2pmOlkn/NV6067H2sXkcJiejwRMjpV5eVSnv8=
Subject key identifier:   A9:87:95:22:73:61:A2:C1:75:39:CE:28:1E:4C:91:80:83:E6:3F:E4
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       24205C252226D283033EAB0422708AEFF9A65D81
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa
Signing time:             Thu 06 Mar 2025 04:42:07 +0000
ROA not before:           Thu 06 Mar 2025 04:37:07 +0000
ROA not after:            Thu 05 Mar 2026 04:42:07 +0000
asID:                     266448
IP address blocks:        2804:37fc:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:20:5c:25:22:26:d2:83:03:3e:ab:04:22:70:8a:ef:f9:a6:5d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Mar  6 04:37:07 2025 GMT
            Not After : Mar  5 04:42:07 2026 GMT
        Subject: CN=A98795227361A2C17539CE281E4C918083E63FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:0d:6a:48:0c:c7:87:c2:68:f2:bd:b0:4e:
                    2a:24:71:fb:0e:1e:16:d2:df:2f:8b:4b:dc:55:d2:
                    4a:8f:52:92:b2:6d:4c:cb:54:fa:aa:06:75:38:56:
                    ca:e0:82:99:40:4e:ad:21:cf:4d:02:5d:e2:4b:80:
                    71:79:40:e1:ae:a7:80:73:a0:43:da:aa:04:56:95:
                    65:4b:53:0a:2d:31:ba:f8:53:1f:27:34:7e:12:0c:
                    2e:2d:e2:d3:87:2e:87:e3:1c:89:cd:a6:85:7d:9f:
                    2a:80:87:79:f9:b5:13:e2:65:8e:62:95:5d:09:c9:
                    fe:fe:78:ef:4e:9e:9b:39:35:d6:42:04:26:ce:98:
                    17:fc:ac:e6:d1:7e:19:9e:b2:26:27:d6:35:2c:85:
                    cb:8e:d9:35:9c:5f:23:de:89:98:3f:ea:e9:4f:7b:
                    1c:9e:a6:f9:68:94:6f:17:bd:b5:df:fb:87:ef:c9:
                    52:cb:d3:23:27:74:f3:2f:7c:1b:86:c4:98:c8:f0:
                    95:97:4e:32:cb:05:46:8b:43:e6:cf:92:16:6e:5a:
                    02:1c:4f:eb:5b:37:f2:c2:43:f7:c2:13:9c:f1:64:
                    de:58:bb:f9:8e:47:b9:43:47:8b:86:c6:54:e8:36:
                    a3:3c:d2:27:26:e1:f8:97:e8:a5:44:1d:5a:9f:15:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:95:22:73:61:A2:C1:75:39:CE:28:1E:4C:91:80:83:E6:3F:E4
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37fc:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:ee:f5:1c:10:52:db:63:1a:36:b2:fd:42:3e:da:16:db:
         78:17:6e:46:d1:3b:02:5f:5b:d1:9d:ea:58:fc:45:6b:4d:bf:
         19:a7:3a:2e:e4:90:c5:95:68:49:6a:9e:59:b9:fe:a9:fe:26:
         20:67:c6:b7:51:3a:f9:5a:0c:6e:18:11:bb:9a:dc:db:5c:a9:
         ea:a8:f0:17:b3:24:60:b2:89:67:1c:cb:f0:bf:a5:d2:ca:f1:
         f7:3f:3a:ff:63:95:ed:3e:b6:55:02:55:90:a0:f7:2e:43:f7:
         5d:81:63:66:28:a3:7b:ea:97:a9:d0:4e:b4:b8:7a:4c:d7:67:
         9a:de:49:6b:62:9f:40:2d:57:9d:9f:7d:79:25:35:ce:c0:35:
         70:d2:96:39:ff:66:eb:d2:81:46:3c:19:bc:fd:0a:e3:6e:1d:
         e5:45:d7:52:dd:01:10:42:1f:a2:97:f7:22:55:af:c5:a5:e1:
         1d:5a:e1:a7:be:2f:a7:39:cb:e1:6a:84:38:1a:0a:19:d2:52:
         d0:0e:5b:7b:1a:a7:9c:4d:55:ff:8c:4c:10:12:e5:f0:d4:4d:
         76:b1:90:e3:20:86:7b:1b:93:2f:0f:5f:18:53:3a:62:24:fc:
         d6:34:8f:5c:12:95:3e:97:b9:7c:e7:c4:2f:77:eb:86:89:6e:
         2c:11:65:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJCBcJSIm0oMDPqsEInCK7/mmXYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAxQzg1NUYxMzFFQ0NENjUxQjM0MzU3RkZEN0NBQTkz
OTBDRjZGQzAeFw0yNTAzMDYwNDM3MDdaFw0yNjAzMDUwNDQyMDdaMDMxMTAvBgNV
BAMTKEE5ODc5NTIyNzM2MUEyQzE3NTM5Q0UyODFFNEM5MTgwODNFNjNGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgg1qSAzHh8Jo8r2wTiokcfsO
HhbS3y+LS9xV0kqPUpKybUzLVPqqBnU4VsrggplATq0hz00CXeJLgHF5QOGup4Bz
oEPaqgRWlWVLUwotMbr4Ux8nNH4SDC4t4tOHLofjHInNpoV9nyqAh3n5tRPiZY5i
lV0Jyf7+eO9Onps5NdZCBCbOmBf8rObRfhmesiYn1jUshcuO2TWcXyPeiZg/6ulP
exyepvlolG8XvbXf+4fvyVLL0yMndPMvfBuGxJjI8JWXTjLLBUaLQ+bPkhZuWgIc
T+tbN/LCQ/fCE5zxZN5Yu/mOR7lDR4uGxlToNqM80icm4fiX6KVEHVqfFXUrAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqYeVInNhosF1Oc4oHkyRgIPmP+QwHwYDVR0j
BBgwFoAUEByFXxMezNZRs0NX/9fKqTkM9vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1hOHZnNWhuakhQ
Y2IvMS8xMDFDODU1RjEzMUVDQ0Q2NTFCMzQzNTdGRkQ3Q0FBOTM5MENGNkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMUM4NTVGMTMxRUNDRDY1
MUIzNDM1N0ZGRDdDQUE5MzkwQ0Y2RkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5WjExUVR4ZW15OUptREFEUEF4VTVURzFzdDZROGZtYTh2ZzVobmpIUGNiLzEv
MzIzODMwMzQzYTMzMzc2NjYzM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEN/wgMA0GCSqGSIb3DQEBCwUA
A4IBAQB18+71HBBS22MaNrL9Qj7aFtt4F25G0TsCX1vRnepY/EVrTb8Zpzou5JDF
lWhJap5Zuf6p/iYgZ8a3UTr5WgxuGBG7mtzbXKnqqPAXsyRgsolnHMvwv6XSyvH3
Pzr/Y5XtPrZVAlWQoPcuQ/ddgWNmKKN76pep0E60uHpM12ea3klrYp9ALVedn315
JTXOwDVw0pY5/2br0oFGPBm8/Qrjbh3lRddS3QEQQh+il/ciVa/FpeEdWuGnvi+n
OcvhaoQ4GgoZ0lLQDlt7GqecTVX/jEwQEuXw1E12sZDjIIZ7G5MvD18YUzpiJPzW
NI9cEpU+l7l858Qvd+uGiW4sEWVd
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:49 2025 by rpki-client