Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          GkCz/N2MQcf5BB5nnp5dP1+X+WJJwl1uDibYJIGSfhM=
Subject key identifier:   2C:CE:6B:70:61:1D:8A:E2:5F:0B:69:F3:A8:54:30:6D:9A:BB:81:99
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       3D7CEB02ABC364DAD7A3FAC2E3B80982B313165B
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:47 +0000
ROA not before:           Wed 26 Feb 2025 16:36:47 +0000
ROA not after:            Wed 25 Feb 2026 16:41:47 +0000
asID:                     264496
IP address blocks:        2804:2084:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7c:eb:02:ab:c3:64:da:d7:a3:fa:c2:e3:b8:09:82:b3:13:16:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:47 2025 GMT
            Not After : Feb 25 16:41:47 2026 GMT
        Subject: CN=2CCE6B70611D8AE25F0B69F3A854306D9ABB8199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:7f:b5:b6:7f:19:e5:8b:8f:66:e0:ac:1f:
                    1e:8a:7d:5a:32:08:88:d5:c0:96:aa:30:8f:bb:53:
                    e0:61:7a:bc:64:2b:25:e2:69:67:d6:96:f1:f2:1d:
                    d6:96:95:6d:f9:d6:6c:16:92:6f:0f:a4:93:f8:25:
                    28:19:2c:71:7a:db:20:39:c8:54:78:39:9e:9f:79:
                    4f:f1:24:14:05:b4:df:e6:2e:cb:b1:5c:38:d9:e9:
                    ca:19:88:be:ff:ab:40:38:98:10:3e:40:95:51:57:
                    82:01:cf:87:8a:ba:4c:b2:85:1c:6f:92:5a:b7:29:
                    48:da:c5:46:6f:b8:aa:f8:06:29:a8:45:c2:fb:9a:
                    4f:8a:61:3f:77:b7:18:c1:da:80:6d:30:88:a2:c6:
                    16:74:e4:8a:6b:a3:d0:d2:85:d4:97:3f:8d:84:43:
                    a8:13:b1:20:7d:4f:3a:42:20:31:f9:69:6d:1b:4c:
                    af:84:64:5a:e1:f0:7d:91:97:cb:4c:83:26:69:9b:
                    f6:21:2d:ce:91:d4:b1:f4:8a:90:c6:a4:4c:ae:8e:
                    99:86:34:84:be:fe:4a:c2:83:11:44:18:f4:51:67:
                    0a:d0:7a:57:cf:b6:53:8a:c0:04:57:bc:c0:98:b0:
                    0d:d3:cc:99:01:c6:9d:47:72:9f:06:13:4c:4c:6e:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CE:6B:70:61:1D:8A:E2:5F:0B:69:F3:A8:54:30:6D:9A:BB:81:99
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a333030303a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:a7:d2:65:90:b4:c2:ac:d2:89:78:ec:81:86:21:39:63:
         1e:a9:79:3c:01:9e:db:e8:79:c3:14:48:22:13:94:8f:d3:ee:
         c9:80:7b:fb:c0:ba:2e:5f:ca:0c:0b:ec:44:99:11:1d:8b:1e:
         f9:8e:16:11:1e:47:9d:09:23:bc:03:00:78:be:02:37:a5:1e:
         79:b0:b7:6b:1c:87:fd:d9:85:22:ed:d6:4b:a5:df:b8:4e:5d:
         9c:8e:4b:ce:78:84:f6:ad:0a:af:43:21:3a:a0:bb:76:de:b7:
         5f:b0:a5:8f:b4:18:eb:5b:4f:65:7d:b4:bb:3d:b8:50:00:d5:
         d3:0c:35:ce:f5:32:b2:d9:2e:fc:90:84:f4:65:a2:f4:85:a7:
         d8:6c:66:20:15:02:87:4e:1d:e7:73:58:14:ee:f7:ce:c1:a4:
         cf:df:6e:cb:36:e8:fb:0f:f1:fe:0e:4f:a0:38:45:d8:31:3e:
         60:a8:23:21:24:e4:d0:bc:93:40:d4:4f:a4:f7:92:e6:90:bf:
         57:4c:71:77:ec:72:0f:39:49:ea:b8:a4:a5:f7:6e:10:16:52:
         45:e5:69:4c:f8:73:9f:ef:dc:e0:d7:0d:1a:f9:9e:b6:7a:6a:
         27:70:db:fb:e5:66:30:3c:8b:a1:05:b1:c6:2d:26:ac:24:c3:
         37:ec:21:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPXzrAqvDZNrXo/rC47gJgrMTFlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTAyMjYxNjM2NDdaFw0yNjAyMjUxNjQxNDdaMDMxMTAvBgNV
BAMTKDJDQ0U2QjcwNjExRDhBRTI1RjBCNjlGM0E4NTQzMDZEOUFCQjgxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs93+1tn8Z5YuPZuCsHx6KfVoy
CIjVwJaqMI+7U+BherxkKyXiaWfWlvHyHdaWlW351mwWkm8PpJP4JSgZLHF62yA5
yFR4OZ6feU/xJBQFtN/mLsuxXDjZ6coZiL7/q0A4mBA+QJVRV4IBz4eKukyyhRxv
klq3KUjaxUZvuKr4BimoRcL7mk+KYT93txjB2oBtMIiixhZ05Ipro9DShdSXP42E
Q6gTsSB9TzpCIDH5aW0bTK+EZFrh8H2Rl8tMgyZpm/YhLc6R1LH0ipDGpEyujpmG
NIS+/krCgxFEGPRRZwrQelfPtlOKwARXvMCYsA3TzJkBxp1Hcp8GE0xMbkFtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULM5rcGEdiuJfC2nzqFQwbZq7gZkwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzIzODMwMzQzYTMyMzAzODM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIIQwMA0GCSqGSIb3DQEBCwUA
A4IBAQAL86fSZZC0wqzSiXjsgYYhOWMeqXk8AZ7b6HnDFEgiE5SP0+7JgHv7wLou
X8oMC+xEmREdix75jhYRHkedCSO8AwB4vgI3pR55sLdrHIf92YUi7dZLpd+4Tl2c
jkvOeIT2rQqvQyE6oLt23rdfsKWPtBjrW09lfbS7PbhQANXTDDXO9TKy2S78kIT0
ZaL0hafYbGYgFQKHTh3nc1gU7vfOwaTP327LNuj7D/H+Dk+gOEXYMT5gqCMhJOTQ
vJNA1E+k95LmkL9XTHF37HIPOUnquKSl924QFlJF5WlM+HOf79zg1w0a+Z62emon
cNv75WYwPIuhBbHGLSasJMM37CF+
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:15 2025 by rpki-client