Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa
File:                     323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa (raw, json)
Hash identifier:          8qs7qlR9v+EJ5TynwIL93hQ7EVKAQpzlOVCo/M8gTy4=
Subject key identifier:   66:FC:C8:97:7E:2D:8F:EC:8B:81:0D:8E:95:AE:87:09:2B:6C:55:62
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       5A8D10B2E6845005134DE76706A2FF2382B61380
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa
Signing time:             Thu 10 Apr 2025 01:50:52 +0000
ROA not before:           Thu 10 Apr 2025 01:45:52 +0000
ROA not after:            Thu 09 Apr 2026 01:50:52 +0000
asID:                     264496
IP address blocks:        2804:2084:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 19:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8d:10:b2:e6:84:50:05:13:4d:e7:67:06:a2:ff:23:82:b6:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Apr 10 01:45:52 2025 GMT
            Not After : Apr  9 01:50:52 2026 GMT
        Subject: CN=66FCC8977E2D8FEC8B810D8E95AE87092B6C5562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:e2:00:d1:35:d8:82:07:f8:8d:65:50:29:
                    62:d2:d6:7b:d2:e7:b6:31:89:dd:26:16:26:79:0e:
                    27:e3:07:e2:48:12:03:5f:f5:dd:77:20:9d:b5:ba:
                    34:27:4a:79:14:37:68:d1:e9:d8:88:0b:2d:d5:9a:
                    9e:bc:fd:b8:ed:64:0d:91:40:ff:41:16:2b:54:b8:
                    0c:77:ac:a6:49:f2:45:08:6f:b5:36:b5:50:b7:e4:
                    37:6a:8f:54:dd:f3:64:78:14:c6:cf:7e:b1:61:e0:
                    08:7d:74:71:dd:32:c2:08:2f:ac:4c:5f:1d:4d:22:
                    ee:02:74:11:e1:43:90:7b:82:0c:b2:f5:13:95:00:
                    3f:07:d4:b0:55:8e:d6:ba:ff:0a:54:9f:07:e8:73:
                    9f:d5:e0:10:f5:8d:5f:75:5d:1c:20:13:7e:f4:13:
                    a5:ef:10:56:db:96:a1:f0:15:e3:0c:58:77:f6:43:
                    f9:a5:0a:d1:0a:51:b5:37:fe:54:de:5c:0b:4a:1e:
                    81:68:e1:80:f6:de:2c:76:10:2c:0e:b8:dd:36:75:
                    99:0c:e5:df:76:41:00:03:ff:01:fd:62:21:14:5b:
                    b7:cc:ca:fc:c8:c2:4c:58:9f:16:1f:7d:9f:c7:81:
                    51:bb:ad:49:00:14:5f:45:d3:d0:f3:6b:ed:10:12:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:C8:97:7E:2D:8F:EC:8B:81:0D:8E:95:AE:87:09:2B:6C:55:62
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a343a3a2f34382d3438203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:98:de:1d:85:86:69:c0:76:e7:4a:b7:6f:4a:0d:1f:27:9c:
         b6:df:ef:c3:bc:95:f0:0d:e2:79:42:de:c0:80:4f:c4:6a:69:
         0a:4b:7f:1e:da:3e:fe:39:c8:77:ee:b1:2e:da:ac:bc:3f:68:
         e9:13:51:3f:dd:38:c6:b7:2d:31:06:a8:f9:9c:91:79:df:ef:
         59:79:15:f8:25:4a:09:19:a6:af:b9:e8:7c:0c:18:6d:b1:8f:
         94:5c:ea:7b:b8:1a:34:36:29:60:b9:41:f9:a8:cd:f3:65:13:
         da:58:c9:db:ac:45:3c:66:bd:d8:a0:e1:b0:c7:86:74:77:ea:
         54:77:da:7a:b6:01:60:5e:ec:b5:2d:ce:10:a7:7d:1d:9a:47:
         4e:58:7b:ce:47:61:da:8c:28:7d:35:be:a9:ec:c5:b3:d4:2e:
         a0:cf:45:fd:c2:ad:6e:39:c7:a8:8d:7c:9b:51:4b:c8:54:1e:
         5b:14:47:cb:2a:be:06:84:a0:4e:9c:94:dc:cd:8d:4d:74:f9:
         2f:61:df:da:08:aa:36:ff:08:03:4f:b5:21:04:a3:ef:39:73:
         2a:d9:0c:c5:bd:58:d8:aa:1b:4c:a2:8a:07:54:e4:2f:59:f7:
         19:a7:c3:5b:ec:1c:0a:f1:90:5f:de:b5:03:fb:21:98:ad:8c:
         e4:38:e9:22
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUWo0QsuaEUAUTTednBqL/I4K2E4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTA0MTAwMTQ1NTJaFw0yNjA0MDkwMTUwNTJaMDMxMTAvBgNV
BAMTKDY2RkNDODk3N0UyRDhGRUM4QjgxMEQ4RTk1QUU4NzA5MkI2QzU1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAeIA0TXYggf4jWVQKWLS1nvS
57Yxid0mFiZ5DifjB+JIEgNf9d13IJ21ujQnSnkUN2jR6diICy3Vmp68/bjtZA2R
QP9BFitUuAx3rKZJ8kUIb7U2tVC35Ddqj1Td82R4FMbPfrFh4Ah9dHHdMsIIL6xM
Xx1NIu4CdBHhQ5B7ggyy9ROVAD8H1LBVjta6/wpUnwfoc5/V4BD1jV91XRwgE370
E6XvEFbblqHwFeMMWHf2Q/mlCtEKUbU3/lTeXAtKHoFo4YD23ix2ECwOuN02dZkM
5d92QQAD/wH9YiEUW7fMyvzIwkxYnxYffZ/HgVG7rUkAFF9F09Dza+0QEsmVAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUZvzIl34tj+yLgQ2Ola6HCStsVWIwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzIzODMwMzQzYTMyMzAzODM0M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIIQABDANBgkqhkiG9w0BAQsFAAOCAQEA
FZjeHYWGacB250q3b0oNHyectt/vw7yV8A3ieULewIBPxGppCkt/Hto+/jnId+6x
LtqsvD9o6RNRP904xrctMQao+ZyRed/vWXkV+CVKCRmmr7nofAwYbbGPlFzqe7ga
NDYpYLlB+ajN82UT2ljJ26xFPGa92KDhsMeGdHfqVHfaerYBYF7stS3OEKd9HZpH
Tlh7zkdh2owofTW+qezFs9QuoM9F/cKtbjnHqI18m1FLyFQeWxRHyyq+BoSgTpyU
3M2NTXT5L2Hf2giqNv8IA0+1IQSj7zlzKtkMxb1Y2KobTKKKB1TkL1n3GafDW+wc
CvGQX961A/shmK2M5DjpIg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:07:08 2025 by rpki-client