Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3332203d3e20323731343536.roa (raw, json)
Hash identifier:          J1lF+NSgXDPDdLPF2pKAcWUDPLOT+mx652FlpwmIgZA=
Subject key identifier:   01:B8:C9:E1:27:23:29:E2:FE:62:A2:AB:5C:D1:34:F3:3F:07:7A:24
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       6B35E5CFDA6BCD47BC9671EC57F9F779B1E2C012
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa
Signing time:             Thu 06 Mar 2025 18:40:58 +0000
ROA not before:           Thu 06 Mar 2025 18:35:58 +0000
ROA not after:            Thu 05 Mar 2026 18:40:58 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 15:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:35:e5:cf:da:6b:cd:47:bc:96:71:ec:57:f9:f7:79:b1:e2:c0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Mar  6 18:35:58 2025 GMT
            Not After : Mar  5 18:40:58 2026 GMT
        Subject: CN=01B8C9E1272329E2FE62A2AB5CD134F33F077A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:c4:40:17:0f:db:e2:3a:af:63:0b:c3:ab:
                    a1:95:f1:f8:bb:26:68:b8:cd:b3:86:3f:83:f8:45:
                    fc:32:62:f3:8f:b7:91:81:3c:b0:9e:c5:ef:4b:fb:
                    ff:14:7d:7a:73:93:8a:7d:14:37:a2:54:20:8c:7c:
                    3b:a9:11:f8:f3:e0:69:10:64:e1:48:f9:c5:09:60:
                    b1:e9:91:ac:58:69:ea:b1:cb:ff:a4:c7:ec:fc:fe:
                    8a:39:09:32:db:9c:42:fb:cd:1f:63:61:79:f0:6a:
                    b2:2f:be:d8:87:6c:24:47:94:29:53:a6:42:c3:f4:
                    cd:8d:06:6a:db:4b:bc:e8:84:29:df:dc:ef:2d:7f:
                    63:8c:42:ba:5d:28:12:b4:da:5c:1e:ea:e0:49:6c:
                    a3:c0:10:83:97:d3:b2:2b:dd:99:76:a6:08:7a:25:
                    69:c3:bd:bb:97:18:fb:93:00:0d:51:c5:8b:aa:3d:
                    b7:b9:dc:d2:c4:7d:c6:74:37:2f:be:b3:51:32:d1:
                    85:c1:39:43:8e:ac:09:6d:7c:13:75:1a:b3:3f:07:
                    6d:83:03:da:24:eb:a8:1c:66:58:4e:b7:7c:80:99:
                    cb:72:e2:bb:d3:c8:28:38:45:07:d2:30:fa:e4:3c:
                    38:76:7d:9c:9b:57:48:8e:7a:bd:d1:8f:14:df:8c:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:C9:E1:27:23:29:E2:FE:62:A2:AB:5C:D1:34:F3:3F:07:7A:24
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3332203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:65:c4:c2:0a:39:ae:78:2f:fb:88:a4:e4:66:f4:27:7c:
         8d:88:d4:2d:1a:05:9b:9e:86:78:5c:e5:57:a2:fd:f9:63:65:
         b7:15:28:48:36:bc:cc:ef:4f:9e:cd:46:24:33:4c:34:1e:cf:
         c7:1d:bb:d3:b1:d8:e2:4b:15:93:e3:fb:c7:32:03:24:ff:13:
         db:60:e2:ad:32:31:a4:1b:bf:d3:da:db:4e:43:62:6f:95:25:
         e2:bc:73:ee:28:eb:fe:22:78:bc:70:e8:90:40:9b:49:e0:3a:
         10:34:fd:9b:16:91:de:12:f5:e1:f7:fd:8d:98:b4:73:81:de:
         fb:24:f9:d3:53:bb:fd:49:b8:1d:a3:bb:46:81:f4:56:90:86:
         62:52:ee:9e:3c:ac:82:4d:5d:b4:d1:d4:43:35:f0:3b:4a:a1:
         13:e3:a2:2c:f8:87:fc:ef:2f:97:bf:cf:71:96:b6:e6:44:b4:
         39:8d:cf:95:6f:16:af:14:48:96:1c:95:d0:de:a7:e9:94:f4:
         99:f4:61:46:ad:ba:4c:6b:7e:51:6f:6f:04:4a:37:bd:32:dd:
         88:fc:e0:20:51:5b:5e:38:60:48:aa:60:34:e4:e0:1a:c0:46:
         37:0c:53:c5:04:45:78:1e:b3:e3:ec:42:a8:f2:c1:f8:4e:27:
         74:51:46:d1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUazXlz9przUe8lnHsV/n3ebHiwBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3MDFBMDkwMDg4MEU1MEYxM0U2NzQ5QzI4ODk5ODg4
MTFFQzhDMTAeFw0yNTAzMDYxODM1NThaFw0yNjAzMDUxODQwNThaMDMxMTAvBgNV
BAMTKDAxQjhDOUUxMjcyMzI5RTJGRTYyQTJBQjVDRDEzNEYzM0YwNzdBMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRasRAFw/b4jqvYwvDq6GV8fi7
Jmi4zbOGP4P4RfwyYvOPt5GBPLCexe9L+/8UfXpzk4p9FDeiVCCMfDupEfjz4GkQ
ZOFI+cUJYLHpkaxYaeqxy/+kx+z8/oo5CTLbnEL7zR9jYXnwarIvvtiHbCRHlClT
pkLD9M2NBmrbS7zohCnf3O8tf2OMQrpdKBK02lwe6uBJbKPAEIOX07Ir3Zl2pgh6
JWnDvbuXGPuTAA1RxYuqPbe53NLEfcZ0Ny++s1Ey0YXBOUOOrAltfBN1GrM/B22D
A9ok66gcZlhOt3yAmcty4rvTyCg4RQfSMPrkPDh2fZybV0iOer3RjxTfjOxTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAbjJ4ScjKeL+YqKrXNE08z8HeiQwHwYDVR0j
BBgwFoAUK3AaCQCIDlDxPmdJwoiZiIEeyMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkQ5Sjk0S1Y5WEEzZ1J4WGt6ZER1aldFQm9uWTJaTmRmeTF3d2FWVEta
OEsvMS8yQjcwMUEwOTAwODgwRTUwRjEzRTY3NDlDMjg4OTk4ODgxMUVDOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzAxQTA5MDA4ODBFNTBG
MTNFNjc0OUMyODg5OTg4ODExRUM4QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZEOUo5NEtWOVhBM2dSeFhremREdWpXRUJvblkyWk5kZnkxd3dhVlRLWjhLLzEv
MzIzODMwMzQzYTM3NjI2NDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR70DANBgkqhkiG9w0BAQsFAAOCAQEAKsJlxMIK
Oa54L/uIpORm9Cd8jYjULRoFm56GeFzlV6L9+WNltxUoSDa8zO9Pns1GJDNMNB7P
xx2707HY4ksVk+P7xzIDJP8T22DirTIxpBu/09rbTkNib5Ul4rxz7ijr/iJ4vHDo
kECbSeA6EDT9mxaR3hL14ff9jZi0c4He+yT501O7/Um4HaO7RoH0VpCGYlLunjys
gk1dtNHUQzXwO0qhE+OiLPiH/O8vl7/PcZa25kS0OY3PlW8WrxRIlhyV0N6n6ZT0
mfRhRq26TGt+UW9vBEo3vTLdiPzgIFFbXjhgSKpgNOTgGsBGNwxTxQRFeB6z4+xC
qPLB+E4ndFFG0Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:25 2025 by rpki-client