Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33342d3334203d3e20323634393532.roa
File:                     323830343a333037343a383030303a3a2f33342d3334203d3e20323634393532.roa (raw, json)
Hash identifier:          5FWTl9JEP5o73QMO5cXi0ONtySFe8J20RRPHzkgNvAE=
Subject key identifier:   BF:33:5C:DA:59:CA:46:83:BB:85:CB:CB:C8:50:F5:CD:9E:7E:FD:B5
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       7C4C780BEECC6988D392E0673666D05C07551859
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33342d3334203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 16:26:48 +0000
ROA not before:           Tue 01 Apr 2025 16:21:48 +0000
ROA not after:            Tue 31 Mar 2026 16:26:48 +0000
asID:                     264952
IP address blocks:        2804:3074:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4c:78:0b:ee:cc:69:88:d3:92:e0:67:36:66:d0:5c:07:55:18:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 16:21:48 2025 GMT
            Not After : Mar 31 16:26:48 2026 GMT
        Subject: CN=BF335CDA59CA4683BB85CBCBC850F5CD9E7EFDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:3a:24:bd:bf:d0:44:9b:7c:9f:1a:bb:3b:
                    73:46:d2:96:c8:af:8f:d9:9b:58:09:3f:43:57:84:
                    e8:9c:f1:91:4b:82:2d:02:d0:a2:ca:7a:b1:10:51:
                    08:58:50:0e:d3:c5:27:e5:a5:29:ed:c7:a2:4f:2e:
                    4e:69:80:8f:52:c2:f3:ff:ed:f0:b7:f4:eb:54:c3:
                    f8:a0:20:1f:58:36:e2:0a:cf:73:ca:5f:32:f7:37:
                    6d:92:69:7a:93:76:91:4e:dd:f2:03:1b:d5:61:2c:
                    76:79:4f:ec:54:5d:f1:2a:a3:cb:d4:36:8b:c5:76:
                    67:33:31:d7:1b:3c:32:09:fc:4c:24:90:fe:b4:30:
                    b3:04:fe:f9:28:35:b8:84:9f:82:25:c8:8f:8a:ea:
                    c8:51:d3:7c:b0:28:ff:08:7e:17:6f:f2:9a:c0:34:
                    4d:5e:48:fe:5f:3f:3d:a7:12:84:53:fb:6f:e6:e4:
                    74:3e:97:64:12:3d:15:92:92:3d:0d:b2:ed:ff:88:
                    55:17:f0:39:d9:ec:96:06:ba:51:38:3e:b8:4f:d3:
                    f8:78:4d:8c:80:a6:c4:3d:7b:01:2c:e2:4e:43:49:
                    c9:fd:cf:a9:f9:79:23:7c:aa:39:4b:de:0b:92:db:
                    79:84:71:49:76:ba:a0:11:70:ab:d1:99:87:a2:1d:
                    e8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:5C:DA:59:CA:46:83:BB:85:CB:CB:C8:50:F5:CD:9E:7E:FD:B5
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33342d3334203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:85:1f:85:6d:86:1e:f0:3f:40:83:3f:6e:e8:d4:57:2d:3e:
         94:ff:2a:cf:5b:39:c8:da:70:ed:0d:4c:f2:bb:e7:7e:2b:a6:
         9b:bf:65:8b:b2:03:8f:e4:b0:78:04:d7:9a:86:93:bc:54:46:
         da:b0:5a:69:b3:de:6f:4c:07:96:7e:21:44:b4:93:29:53:42:
         7b:ca:c5:09:0b:9c:00:06:dc:c3:c8:71:96:16:34:44:7d:07:
         e0:3e:56:cb:7a:60:e7:d9:dc:b6:d4:83:01:3d:70:34:9a:01:
         64:62:b2:73:ab:06:15:6a:31:4e:4a:22:a0:bf:aa:f7:25:6e:
         5c:43:ec:4d:8e:7f:11:57:cb:9d:19:ff:a8:f8:49:5a:1f:de:
         9b:fc:ee:35:e4:36:f4:aa:3b:07:0e:9e:88:5e:b3:81:f4:52:
         b3:cd:a3:ab:52:a5:14:b8:d6:a6:96:9d:a2:eb:1a:f7:25:81:
         95:ae:59:f4:0b:6c:f6:2a:5d:62:f0:fc:da:44:db:61:14:3d:
         6c:42:59:f5:47:f6:e2:1c:be:1d:88:1c:41:2b:95:9a:8b:57:
         29:7d:23:92:fe:3e:87:9b:f6:e0:fc:eb:64:3c:b6:4e:e9:36:
         6c:23:85:4d:c7:ce:fc:ba:5b:af:71:f4:08:e0:e2:e1:ff:88:
         4f:dd:e3:a3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfEx4C+7MaYjTkuBnNmbQXAdVGFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMTJEQjFCMzAyOTUwRTU5NjcyNzAwMTU1QjE3NkQw
N0NGREFFQTAeFw0yNTA0MDExNjIxNDhaFw0yNjAzMzExNjI2NDhaMDMxMTAvBgNV
BAMTKEJGMzM1Q0RBNTlDQTQ2ODNCQjg1Q0JDQkM4NTBGNUNEOUU3RUZEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gTokvb/QRJt8nxq7O3NG0pbI
r4/Zm1gJP0NXhOic8ZFLgi0C0KLKerEQUQhYUA7TxSflpSntx6JPLk5pgI9SwvP/
7fC39OtUw/igIB9YNuIKz3PKXzL3N22SaXqTdpFO3fIDG9VhLHZ5T+xUXfEqo8vU
NovFdmczMdcbPDIJ/EwkkP60MLME/vkoNbiEn4IlyI+K6shR03ywKP8Ifhdv8prA
NE1eSP5fPz2nEoRT+2/m5HQ+l2QSPRWSkj0Nsu3/iFUX8DnZ7JYGulE4PrhP0/h4
TYyApsQ9ewEs4k5DScn9z6n5eSN8qjlL3guS23mEcUl2uqARcKvRmYeiHehnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvzNc2lnKRoO7hcvLyFD1zZ5+/bUwHwYDVR0j
BBgwFoAUPiEtsbMClQ5ZZycAFVsXbQfP2uowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVVc2c0S2RyS0Z4cTlxZzhMemdrVkxrcWRBRWM5a203ZVZkeURGUkNT
S2EvMC8zRTIxMkRCMUIzMDI5NTBFNTk2NzI3MDAxNTVCMTc2RDA3Q0ZEQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjEyREIxQjMwMjk1MEU1
OTY3MjcwMDE1NUIxNzZEMDdDRkRBRUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VXNnNEtkcktGeHE5cWc4THpna1ZMa3FkQUVjOWttN2VWZHlERlJDU0thLzAv
MzIzODMwMzQzYTMzMzAzNzM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM5MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMHSAMA0GCSqGSIb3DQEBCwUA
A4IBAQDAhR+FbYYe8D9Agz9u6NRXLT6U/yrPWznI2nDtDUzyu+d+K6abv2WLsgOP
5LB4BNeahpO8VEbasFpps95vTAeWfiFEtJMpU0J7ysUJC5wABtzDyHGWFjREfQfg
PlbLemDn2dy21IMBPXA0mgFkYrJzqwYVajFOSiKgv6r3JW5cQ+xNjn8RV8udGf+o
+ElaH96b/O415Db0qjsHDp6IXrOB9FKzzaOrUqUUuNamlp2i6xr3JYGVrln0C2z2
Kl1i8PzaRNthFD1sQln1R/biHL4diBxBK5Wai1cpfSOS/j6Hm/bg/OtkPLZO6TZs
I4VNx878uluvcfQI4OLh/4hP3eOj
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:04:33 2025 by rpki-client