Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          1cppSIhZ4oBFfaBlGaVkf9ClaBoD1ZvH2ww6ZQkhu3I=
Subject key identifier:   48:68:88:84:CE:F1:FC:40:DF:C9:90:CC:53:64:18:58:AE:D8:9D:6C
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       633C2A4D6FF603F2452BC9D3759DEBEEFB43DFE9
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:2a:4d:6f:f6:03:f2:45:2b:c9:d3:75:9d:eb:ee:fb:43:df:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=48688884CEF1FC40DFC990CC53641858AED89D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:98:7d:aa:6f:78:a0:ff:a1:cb:07:8d:f6:
                    a9:66:8a:76:59:00:9e:53:39:2c:01:be:66:48:76:
                    7b:b7:2f:36:7f:35:a2:2f:bd:33:b3:e0:bb:1e:bf:
                    7d:3e:6d:18:a1:64:33:85:ff:13:9b:e8:0a:cb:da:
                    be:c7:1a:93:94:ab:73:0e:7f:96:91:ae:07:2f:ce:
                    59:9a:c9:82:89:a8:c0:af:04:a3:7a:9b:5a:f8:8e:
                    40:cf:3d:6f:8b:5a:ab:78:81:48:a9:01:7a:0b:67:
                    8f:28:1c:73:65:72:f6:53:52:60:60:0d:ba:be:61:
                    d1:c6:dc:ca:74:ed:dd:26:b1:70:19:81:df:1e:a9:
                    54:44:57:d3:f3:65:81:c0:f6:aa:a0:36:c5:11:62:
                    21:4b:57:9a:09:e9:38:1f:fc:ed:e3:67:42:26:68:
                    88:83:2b:c3:39:6d:c1:1f:d5:18:a2:b0:58:c0:95:
                    c4:ca:76:2d:71:ab:a4:b0:c7:8b:43:58:07:2f:73:
                    1b:4d:18:d3:d3:92:b9:8f:e2:52:e0:ed:47:fc:8f:
                    31:ef:ed:62:4f:75:57:92:e4:91:8a:e9:87:db:44:
                    dc:78:77:72:c0:fe:e2:62:2e:58:8c:53:36:a3:17:
                    75:03:a5:87:44:33:c3:a5:e3:e8:59:fd:bb:24:70:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:88:84:CE:F1:FC:40:DF:C9:90:CC:53:64:18:58:AE:D8:9D:6C
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:da:72:f3:ea:5f:d7:17:d2:47:53:f5:dd:30:db:85:2c:
         c2:27:2b:c7:c7:d4:dd:8d:ac:e3:c5:01:78:99:53:46:7c:70:
         53:18:48:c0:07:d6:fc:9d:5b:8b:13:ff:d3:7a:d4:13:e9:ff:
         af:ad:84:a0:1b:99:ff:f8:e5:0c:76:3e:35:9a:b5:f7:1a:90:
         80:ce:65:91:31:d8:36:e9:d1:d2:e9:49:c9:56:25:73:81:17:
         7a:28:76:35:0e:2d:4e:1d:52:b6:1e:cc:cc:95:fb:10:57:87:
         e7:79:af:e5:60:aa:86:e2:10:5a:9c:ed:6b:3d:97:d1:1e:f9:
         55:ea:f5:90:74:0c:11:27:6f:79:06:0a:aa:d4:3b:41:50:f8:
         4c:79:e8:43:14:70:b5:51:05:56:47:43:d6:60:c4:0a:aa:39:
         8d:08:72:69:67:24:f3:9d:b5:ce:02:30:a6:f4:b4:48:20:51:
         8b:5a:43:6a:70:e0:4f:f6:74:38:24:db:12:4e:5a:a7:7e:0f:
         0e:1a:af:d4:51:8b:c2:eb:36:00:6a:7b:a0:34:36:29:5e:29:
         a1:7d:60:05:ac:3b:d7:37:e2:95:ee:df:54:e3:85:45:2c:17:
         7d:15:bf:6d:3a:10:eb:ed:fb:a0:1e:56:60:60:fc:a3:61:f3:
         7e:9a:08:d0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUYzwqTW/2A/JFK8nTdZ3r7vtD3+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz
OUZENjNENzAeFw0yNTAzMDYwMjAxMjdaFw0yNjAzMDUwMjA2MjdaMDMxMTAvBgNV
BAMTKDQ4Njg4ODg0Q0VGMUZDNDBERkM5OTBDQzUzNjQxODU4QUVEODlENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtJh9qm94oP+hyweN9qlminZZ
AJ5TOSwBvmZIdnu3LzZ/NaIvvTOz4Lsev30+bRihZDOF/xOb6ArL2r7HGpOUq3MO
f5aRrgcvzlmayYKJqMCvBKN6m1r4jkDPPW+LWqt4gUipAXoLZ48oHHNlcvZTUmBg
Dbq+YdHG3Mp07d0msXAZgd8eqVREV9PzZYHA9qqgNsURYiFLV5oJ6Tgf/O3jZ0Im
aIiDK8M5bcEf1RiisFjAlcTKdi1xq6Swx4tDWAcvcxtNGNPTkrmP4lLg7Uf8jzHv
7WJPdVeS5JGK6YfbRNx4d3LA/uJiLliMUzajF3UDpYdEM8Ol4+hZ/bskcLNlAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUSGiIhM7x/EDfyZDMU2QYWK7YnWwwHwYDVR0j
BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw
QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzMv
MzIzODMwMzQzYTY1MzE2MzNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzUzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQOHIAwDQYJKoZIhvcNAQELBQADggEB
AIOz2nLz6l/XF9JHU/XdMNuFLMInK8fH1N2NrOPFAXiZU0Z8cFMYSMAH1vydW4sT
/9N61BPp/6+thKAbmf/45Qx2PjWatfcakIDOZZEx2Dbp0dLpSclWJXOBF3oodjUO
LU4dUrYezMyV+xBXh+d5r+VgqobiEFqc7Ws9l9Ee+VXq9ZB0DBEnb3kGCqrUO0FQ
+Ex56EMUcLVRBVZHQ9ZgxAqqOY0IcmlnJPOdtc4CMKb0tEggUYtaQ2pw4E/2dDgk
2xJOWqd+Dw4ar9RRi8LrNgBqe6A0NileKaF9YAWsO9c34pXu31TjhUUsF30Vv206
EOvt+6AeVmBg/KNh836aCNA=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:30:59 2025 by rpki-client