Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
File:                     323830343a336635343a3a2f33322d3332203d3e20323635383835.roa (raw, json)
Hash identifier:          N50JkAvEh8Qlb9uB5vuHe0r6Pv4ZzLNFbHysZKcJ9gg=
Subject key identifier:   EC:40:A1:27:54:5B:6B:18:E9:02:85:26:1B:DA:33:38:9C:85:40:ED
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       314AAD33EF7C73A4FB62078D32D8E0E44551D490
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa
Signing time:             Thu 06 Mar 2025 18:39:22 +0000
ROA not before:           Thu 06 Mar 2025 18:34:22 +0000
ROA not after:            Thu 05 Mar 2026 18:39:22 +0000
asID:                     265885
IP address blocks:        2804:3f54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4a:ad:33:ef:7c:73:a4:fb:62:07:8d:32:d8:e0:e4:45:51:d4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Mar  6 18:34:22 2025 GMT
            Not After : Mar  5 18:39:22 2026 GMT
        Subject: CN=EC40A127545B6B18E90285261BDA33389C8540ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d2:5d:33:6a:a6:d9:f5:6b:97:f3:59:3b:d8:
                    82:56:f8:7d:85:3b:14:72:df:41:7a:05:c6:ab:d2:
                    68:02:c2:a6:8e:ed:6c:2f:c7:da:70:c7:a4:82:fc:
                    b2:5a:f3:92:21:3b:63:f5:77:31:17:9c:8b:9d:0a:
                    1a:d8:08:03:59:2f:e3:96:3b:7e:1d:d8:c6:c4:75:
                    7a:84:b7:bd:f7:6b:1e:14:91:2f:34:ca:1f:bc:4d:
                    77:49:a0:7a:3d:62:7e:9e:c7:68:ee:ea:2b:77:be:
                    24:46:80:dc:c3:13:83:19:36:cc:5e:09:14:79:18:
                    a3:0f:36:aa:d2:ee:5e:af:10:61:4a:50:3a:b7:b4:
                    82:fc:d3:a9:ed:30:79:5c:ca:81:bd:1e:59:5a:06:
                    e7:8d:54:a2:71:00:4b:6b:cd:e9:31:c2:bd:09:5c:
                    ca:6c:0a:c4:a1:76:d6:a5:77:bf:5e:2d:d0:eb:08:
                    03:98:57:67:f4:b5:d2:fe:f2:c7:f1:52:b6:2b:92:
                    7c:fc:71:e3:62:70:61:cc:1d:28:30:0e:8c:75:2b:
                    b6:05:b1:e1:77:bf:86:64:75:9a:d2:34:35:39:16:
                    9b:7e:c8:d2:f4:66:33:a1:50:f7:c5:da:43:57:91:
                    a7:4f:80:1f:7b:4a:80:95:9a:6b:ea:6d:a0:f2:10:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:A1:27:54:5B:6B:18:E9:02:85:26:1B:DA:33:38:9C:85:40:ED
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/323830343a336635343a3a2f33322d3332203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:10:8d:3f:a0:57:a4:7d:bd:71:28:ee:1f:37:fc:bc:d9:
         fa:29:67:57:82:49:ca:6c:f0:6e:d4:81:07:e9:b7:c0:91:22:
         45:b3:a3:17:bd:9b:62:7d:ed:69:bb:9a:60:2c:89:1e:39:33:
         cd:72:7f:7f:42:4a:bd:7f:ba:15:33:68:8b:b4:79:9e:0b:46:
         25:d7:ca:f7:11:73:ad:51:48:bf:36:b0:99:ca:99:72:33:65:
         a8:6a:6e:92:9b:d2:b2:c8:de:ff:eb:6a:f4:af:f9:f3:ba:cf:
         53:e2:52:94:a2:06:b4:1c:93:d5:f5:4b:4f:03:49:9f:5e:f6:
         f9:e4:55:59:44:78:74:82:3d:dd:bf:6b:e7:45:02:c8:67:12:
         35:26:44:fc:d7:66:83:8d:83:bb:49:b9:af:c6:2b:62:98:26:
         ff:a0:15:ad:59:70:9e:a0:16:44:7f:b7:fa:2c:fc:67:9a:1f:
         1a:5f:7a:bc:15:d5:6d:69:03:df:4f:88:20:72:3f:82:f7:9b:
         ca:48:5b:10:c7:82:a3:1f:94:d6:86:27:b1:11:e3:cb:92:a0:
         41:9d:34:71:ec:07:81:4b:47:02:6f:44:45:04:8c:c8:04:42:
         1a:1d:a1:b5:39:90:89:72:38:6c:e3:8a:94:a9:97:82:b2:32:
         1a:15:d4:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMUqtM+98c6T7YgeNMtjg5EVR1JAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDMzgxQ0M5MzMzQzA3QTg2RDNBMTEyODIwNjg0NzZD
NTE5NkZFNjAeFw0yNTAzMDYxODM0MjJaFw0yNjAzMDUxODM5MjJaMDMxMTAvBgNV
BAMTKEVDNDBBMTI3NTQ1QjZCMThFOTAyODUyNjFCREEzMzM4OUM4NTQwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0l0zaqbZ9WuX81k72IJW+H2F
OxRy30F6Bcar0mgCwqaO7Wwvx9pwx6SC/LJa85IhO2P1dzEXnIudChrYCANZL+OW
O34d2MbEdXqEt733ax4UkS80yh+8TXdJoHo9Yn6ex2ju6it3viRGgNzDE4MZNsxe
CRR5GKMPNqrS7l6vEGFKUDq3tIL806ntMHlcyoG9HllaBueNVKJxAEtrzekxwr0J
XMpsCsShdtald79eLdDrCAOYV2f0tdL+8sfxUrYrknz8ceNicGHMHSgwDox1K7YF
seF3v4ZkdZrSNDU5Fpt+yNL0ZjOhUPfF2kNXkadPgB97SoCVmmvqbaDyEPh5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7EChJ1RbaxjpAoUmG9ozOJyFQO0wHwYDVR0j
BBgwFoAUlMOBzJMzwHqG06ESggaEdsUZb+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlB0Smd1Q1ByZHJ3ZFUyMVdUV0wyOTFyVnpOaWdrYk0yODVINGZXVVBV
M0gvMS85NEMzODFDQzkzMzNDMDdBODZEM0ExMTI4MjA2ODQ3NkM1MTk2RkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QzM4MUNDOTMzM0MwN0E4
NkQzQTExMjgyMDY4NDc2QzUxOTZGRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQdEpndUNQcmRyd2RVMjFXVFdMMjkxclZ6Tmlna2JNMjg1SDRmV1VQVTNILzEv
MzIzODMwMzQzYTMzNjYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/VDANBgkqhkiG9w0BAQsFAAOCAQEAHNEQjT+g
V6R9vXEo7h83/LzZ+ilnV4JJymzwbtSBB+m3wJEiRbOjF72bYn3tabuaYCyJHjkz
zXJ/f0JKvX+6FTNoi7R5ngtGJdfK9xFzrVFIvzawmcqZcjNlqGpukpvSssje/+tq
9K/587rPU+JSlKIGtByT1fVLTwNJn172+eRVWUR4dII93b9r50UCyGcSNSZE/Ndm
g42Du0m5r8YrYpgm/6AVrVlwnqAWRH+3+iz8Z5ofGl96vBXVbWkD30+IIHI/gveb
ykhbEMeCox+U1oYnsRHjy5KgQZ00cewHgUtHAm9ERQSMyARCGh2htTmQiXI4bOOK
lKmXgrIyGhXUYw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:16:02 2025 by rpki-client