Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
File:                     323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa (raw, json)
Hash identifier:          Y+RrMw0ia0bjzrqemsvRtJmSNGbuPRpJjQqMEWe3O2Y=
Subject key identifier:   21:16:FB:D1:88:CB:AB:01:AC:ED:7F:1D:CB:BF:A3:8A:34:78:5B:C8
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       7CF00C3159E673FEE05272F999FEAC99C7F5927A
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
Signing time:             Wed 05 Mar 2025 23:18:47 +0000
ROA not before:           Wed 05 Mar 2025 23:13:47 +0000
ROA not after:            Wed 04 Mar 2026 23:18:47 +0000
asID:                     16685
IP address blocks:        2001:1280:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:0c:31:59:e6:73:fe:e0:52:72:f9:99:fe:ac:99:c7:f5:92:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Mar  5 23:13:47 2025 GMT
            Not After : Mar  4 23:18:47 2026 GMT
        Subject: CN=2116FBD188CBAB01ACED7F1DCBBFA38A34785BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:45:bc:66:82:79:64:76:39:fd:87:c3:0e:8d:
                    d0:8e:96:af:9c:3b:c0:e2:e7:22:86:71:9a:38:dd:
                    ba:0e:af:6f:6b:e5:21:a5:4a:9d:2d:89:2a:84:e2:
                    bf:fd:1c:93:89:52:c6:30:72:ab:c2:96:7b:41:87:
                    9a:0b:98:67:69:c6:6d:0c:36:36:d9:01:50:f8:b2:
                    89:c5:33:e7:3e:f3:24:43:5f:d4:ac:bc:64:c3:f6:
                    e2:7e:13:ba:97:45:14:24:80:ae:a4:6e:03:1d:1a:
                    0a:e1:b5:58:00:67:63:a5:64:c0:ed:67:a0:1f:ec:
                    9d:b0:52:1b:f9:e1:49:5a:53:b9:b1:65:c2:80:c2:
                    ba:c2:0e:a0:76:7e:87:89:0e:b6:3d:83:f5:9e:73:
                    5a:3a:62:56:43:e5:48:5e:81:29:bb:da:e0:fc:ef:
                    74:51:20:eb:0c:f7:12:5a:da:6e:90:22:c0:89:ee:
                    b3:12:b3:56:99:03:28:e0:47:2f:99:4a:55:31:24:
                    da:aa:59:d6:62:ff:70:05:44:1f:f7:63:b1:94:c1:
                    b4:db:8c:2b:e0:1c:d3:81:02:b3:5b:fe:ae:0f:d2:
                    a2:ae:ac:d7:9f:25:6c:29:79:54:ab:7c:fd:36:0a:
                    bf:fd:a1:7c:5d:2c:e2:03:9b:16:e4:b7:da:39:1e:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:16:FB:D1:88:CB:AB:01:AC:ED:7F:1D:CB:BF:A3:8A:34:78:5B:C8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:e8:1e:b0:b3:3b:56:ac:8d:93:70:fe:81:5c:86:9a:cc:
         5d:e0:15:c1:df:28:b8:71:57:bf:47:55:15:01:34:1e:0d:87:
         2c:08:38:4c:be:31:67:e0:69:56:15:85:0f:c2:91:b7:30:1c:
         af:dd:ff:b4:ed:3b:2c:af:99:4d:76:dc:92:4f:f8:c0:e5:26:
         2d:49:cf:a0:67:98:1c:ef:e9:05:d1:d2:fa:26:8f:46:3e:cc:
         6e:97:3e:58:20:9a:bb:ba:2c:49:4f:cc:cd:30:f2:d1:be:f0:
         00:82:3b:8e:31:e4:1a:d1:c9:85:dd:8c:2c:93:48:97:58:9a:
         47:83:f4:32:75:18:f4:23:6b:77:3f:84:2d:c1:16:d3:8a:87:
         77:f0:08:c5:76:e8:52:b0:cd:18:d1:16:d0:8d:59:0e:fc:6b:
         03:f6:51:a4:d2:a3:e0:40:87:f3:02:37:db:09:d9:02:60:81:
         73:cd:f8:f5:24:fc:da:34:e1:c6:2d:ad:0b:c9:a1:63:2e:db:
         ed:5e:ce:63:7d:ba:fc:de:70:9b:2a:3f:6a:15:b3:52:65:a0:
         7a:43:8a:57:10:da:ff:e6:e7:f4:11:fa:03:5a:17:18:33:ad:
         65:0c:ab:ed:70:d6:85:54:16:73:61:d0:ed:39:8d:6f:10:b5:
         8c:04:b1:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfPAMMVnmc/7gUnL5mf6smcf1knowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVFNURDOEU4MTZBQzg2MTk4QTAzNzlCRTYwQTYyQkU5
RjM5MDc5MjAeFw0yNTAzMDUyMzEzNDdaFw0yNjAzMDQyMzE4NDdaMDMxMTAvBgNV
BAMTKDIxMTZGQkQxODhDQkFCMDFBQ0VEN0YxRENCQkZBMzhBMzQ3ODVCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxRbxmgnlkdjn9h8MOjdCOlq+c
O8Di5yKGcZo43boOr29r5SGlSp0tiSqE4r/9HJOJUsYwcqvClntBh5oLmGdpxm0M
NjbZAVD4sonFM+c+8yRDX9SsvGTD9uJ+E7qXRRQkgK6kbgMdGgrhtVgAZ2OlZMDt
Z6Af7J2wUhv54UlaU7mxZcKAwrrCDqB2foeJDrY9g/Wec1o6YlZD5UhegSm72uD8
73RRIOsM9xJa2m6QIsCJ7rMSs1aZAyjgRy+ZSlUxJNqqWdZi/3AFRB/3Y7GUwbTb
jCvgHNOBArNb/q4P0qKurNefJWwpeVSrfP02Cr/9oXxdLOIDmxbkt9o5HohxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIRb70YjLqwGs7X8dy7+jijR4W8gwHwYDVR0j
BBgwFoAUbuXcjoFqyGGYoDeb5gpivp85B5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJwR2g0aTN6NUFadUtHeTlxRVhmRVV3RThXUDFyajlxekJmSGg2bWtN
OHovMS82RUU1REM4RTgxNkFDODYxOThBMDM3OUJFNjBBNjJCRTlGMzkwNzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFRTVEQzhFODE2QUM4NjE5
OEEwMzc5QkU2MEE2MkJFOUYzOTA3OTIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCcEdoNGkzejVBWnVLR3k5cUVYZkVVd0U4V1Axcmo5cXpCZkhoNm1rTTh6LzEv
MzIzMDMwMzEzYTMxMzIzODMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNk
M2UyMDMxMzYzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgARKAQDANBgkqhkiG9w0BAQsFAAOC
AQEAk8LoHrCzO1asjZNw/oFchprMXeAVwd8ouHFXv0dVFQE0Hg2HLAg4TL4xZ+Bp
VhWFD8KRtzAcr93/tO07LK+ZTXbckk/4wOUmLUnPoGeYHO/pBdHS+iaPRj7Mbpc+
WCCau7osSU/MzTDy0b7wAII7jjHkGtHJhd2MLJNIl1iaR4P0MnUY9CNrdz+ELcEW
04qHd/AIxXboUrDNGNEW0I1ZDvxrA/ZRpNKj4ECH8wI32wnZAmCBc8349ST82jTh
xi2tC8mhYy7b7V7OY326/N5wmyo/ahWzUmWgekOKVxDa/+bn9BH6A1oXGDOtZQyr
7XDWhVQWc2HQ7TmNbxC1jASxjw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:03:44 2025 by rpki-client