Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          3gaeRamuBRcnrnZFsS6DlYntZen+rJ+bga//SX14/5I=
Subject key identifier:   AF:78:9C:02:77:88:65:43:B0:19:B6:91:1D:22:62:D6:9D:E0:ED:C2
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       7DDAF5896757F3CDD6C89008DB25AC5F0DC7EE4A
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:15 +0000
ROA not before:           Thu 06 Mar 2025 17:23:15 +0000
ROA not after:            Thu 05 Mar 2026 17:28:15 +0000
asID:                     266437
IP address blocks:        2804:37d0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 10:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:f5:89:67:57:f3:cd:d6:c8:90:08:db:25:ac:5f:0d:c7:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:15 2025 GMT
            Not After : Mar  5 17:28:15 2026 GMT
        Subject: CN=AF789C0277886543B019B6911D2262D69DE0EDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:ed:f4:d1:b6:2e:5c:c8:49:f3:f6:7f:39:
                    b6:58:ab:e9:53:71:fc:07:e5:dd:3f:68:6e:3f:9a:
                    71:97:c4:e9:47:d8:54:e4:ca:42:cd:1b:f2:9b:ac:
                    45:d6:35:3e:9c:ab:3a:9c:e4:c9:ce:a4:1e:32:b7:
                    52:7a:9e:75:7b:61:1d:14:1e:92:da:14:6e:8c:6b:
                    1b:29:e0:7c:fc:57:b8:4b:0c:f8:21:3b:01:f7:ea:
                    57:f8:7a:d8:4d:6f:3a:ff:70:86:3a:41:9a:1c:fa:
                    e1:f9:34:a5:df:2c:2f:b4:1c:52:fb:e2:75:60:66:
                    a7:13:15:76:59:19:30:32:f5:f8:7d:38:e3:f9:0c:
                    1b:08:0a:4d:a5:a1:96:ee:ac:d2:7c:ab:ce:80:01:
                    b9:b9:a5:61:c0:1d:25:58:c3:14:3e:17:ff:73:a2:
                    fa:07:a1:db:4f:f3:35:9c:7f:2d:70:3b:10:75:b7:
                    9f:50:32:ef:98:d5:83:24:e6:19:34:5f:0e:99:52:
                    cb:65:fd:db:e1:19:75:3b:6e:36:ba:e8:8a:4a:9b:
                    a6:fe:f5:ff:ef:5d:46:a0:c5:35:7e:20:d5:82:73:
                    59:a9:8b:15:0d:a3:49:dc:4e:7b:0b:0c:93:9e:9b:
                    f8:9a:ec:87:d0:aa:4a:0b:8f:e0:3e:95:f4:93:56:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:78:9C:02:77:88:65:43:B0:19:B6:91:1D:22:62:D6:9D:E0:ED:C2
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:26:32:5b:dc:a9:56:01:b3:c7:e0:2b:3d:5e:55:90:fb:
         77:5e:cf:b0:53:a2:ca:88:f3:65:39:e0:c7:4a:c4:36:aa:06:
         37:88:3e:cf:b1:82:b3:c1:1b:ff:88:6d:36:b6:5b:0b:d8:98:
         d6:00:12:3e:e0:a0:f2:69:76:b5:4b:d1:18:fb:eb:c6:eb:d2:
         c8:c1:29:86:7b:3d:4d:dc:2d:98:c5:3b:6f:fa:fd:d0:e0:a0:
         44:75:ec:73:1e:a6:2d:c6:a5:9e:cc:20:87:50:c9:8a:b6:61:
         10:c0:1d:ee:21:a9:1d:c1:89:90:ef:d7:02:a7:7d:da:70:8f:
         51:76:99:14:ad:fb:39:3b:f3:9b:d8:96:64:75:d7:20:b5:2e:
         f5:81:76:07:43:3d:cd:ea:30:09:eb:42:d1:70:0c:5e:5e:c0:
         9c:a2:93:a0:4e:06:cf:7d:9a:b1:fd:90:b9:f5:4a:db:43:f8:
         f1:30:74:8b:4c:37:87:a0:5a:a4:0a:08:c1:c4:99:51:3e:6d:
         f9:d8:69:cb:73:18:0d:a1:4f:ab:9e:d2:ca:32:3d:28:62:35:
         6c:39:ec:49:b1:51:ef:05:68:89:3e:10:b0:8d:8f:a8:66:a7:
         ab:0a:b4:c5:57:d4:63:64:f3:fb:38:62:66:8a:dc:08:a3:9f:
         20:50:f6:91
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUfdr1iWdX883WyJAI2yWsXw3H7kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMTVaFw0yNjAzMDUxNzI4MTVaMDMxMTAvBgNV
BAMTKEFGNzg5QzAyNzc4ODY1NDNCMDE5QjY5MTFEMjI2MkQ2OURFMEVEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uu300bYuXMhJ8/Z/ObZYq+lT
cfwH5d0/aG4/mnGXxOlH2FTkykLNG/KbrEXWNT6cqzqc5MnOpB4yt1J6nnV7YR0U
HpLaFG6Maxsp4Hz8V7hLDPghOwH36lf4ethNbzr/cIY6QZoc+uH5NKXfLC+0HFL7
4nVgZqcTFXZZGTAy9fh9OOP5DBsICk2loZburNJ8q86AAbm5pWHAHSVYwxQ+F/9z
ovoHodtP8zWcfy1wOxB1t59QMu+Y1YMk5hk0Xw6ZUstl/dvhGXU7bja66IpKm6b+
9f/vXUagxTV+INWCc1mpixUNo0ncTnsLDJOem/ia7IfQqkoLj+A+lfSTVrlzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUr3icAneIZUOwGbaRHSJi1p3g7cIwHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEN9AAATANBgkqhkiG9w0BAQsFAAOCAQEA
FfAmMlvcqVYBs8fgKz1eVZD7d17PsFOiyojzZTngx0rENqoGN4g+z7GCs8Eb/4ht
NrZbC9iY1gASPuCg8ml2tUvRGPvrxuvSyMEphns9TdwtmMU7b/r90OCgRHXscx6m
Lcalnswgh1DJirZhEMAd7iGpHcGJkO/XAqd92nCPUXaZFK37OTvzm9iWZHXXILUu
9YF2B0M9zeowCetC0XAMXl7AnKKToE4Gz32asf2QufVK20P48TB0i0w3h6BapAoI
wcSZUT5t+dhpy3MYDaFPq57SyjI9KGI1bDnsSbFR7wVoiT4QsI2PqGanqwq0xVfU
Y2Tz+zhiZorcCKOfIFD2kQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:20:42 2025 by rpki-client