Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
File:                     323830343a356465303a3a2f33322d313238203d3e20323638393938.roa (raw, json)
Hash identifier:          jXecL6TLte3qeuA4/kSpugc6dKrzv0fKK1wIdRlk6gU=
Subject key identifier:   58:2D:9D:60:11:BD:77:F4:90:22:58:C2:BD:CF:A8:3C:78:C0:74:0F
Certificate issuer:       /CN=6B94A85AE07C5BF4E43485EF13FAA7C008DB5441
Certificate serial:       138FAD6611B88FDD1B8DA9783A3FD86DAC7A9B88
Authority key identifier: 6B:94:A8:5A:E0:7C:5B:F4:E4:34:85:EF:13:FA:A7:C0:08:DB:54:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa
Signing time:             Thu 06 Mar 2025 11:39:34 +0000
ROA not before:           Thu 06 Mar 2025 11:34:34 +0000
ROA not after:            Thu 05 Mar 2026 11:39:34 +0000
asID:                     268998
IP address blocks:        2804:5de0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.crl
                          rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 16:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8f:ad:66:11:b8:8f:dd:1b:8d:a9:78:3a:3f:d8:6d:ac:7a:9b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B94A85AE07C5BF4E43485EF13FAA7C008DB5441
        Validity
            Not Before: Mar  6 11:34:34 2025 GMT
            Not After : Mar  5 11:39:34 2026 GMT
        Subject: CN=582D9D6011BD77F4902258C2BDCFA83C78C0740F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:29:d0:cd:68:32:b0:b3:b6:59:dc:39:3b:d0:
                    50:1e:56:c4:b0:65:18:95:16:fc:b7:8b:3d:ac:b3:
                    65:05:da:78:9d:61:3a:e4:83:b6:c7:71:9d:ef:c6:
                    15:7a:72:c6:38:78:a2:26:f5:46:fb:97:ee:e6:0a:
                    18:2e:39:e5:d9:d0:75:4f:d0:4b:be:17:88:0d:f0:
                    9f:7e:0a:8d:04:09:30:49:c9:c9:77:87:c2:78:fb:
                    60:d1:bc:3b:fa:32:86:d1:e3:c1:aa:47:dc:f2:43:
                    fe:70:ae:5a:da:59:e2:ad:df:64:4a:25:f7:ec:bc:
                    91:40:10:b4:4d:84:48:1c:ca:4e:74:07:c3:10:dd:
                    8d:a4:8d:d7:3e:0e:5f:9d:a5:88:e3:f4:b9:97:fd:
                    4d:06:5c:c6:6e:67:e0:22:c9:2b:3c:0c:fc:45:4b:
                    13:b1:b2:6f:31:3c:12:b4:2d:a0:b1:b9:3d:12:20:
                    3c:7f:0c:11:b4:d7:64:e6:fa:35:a5:4f:f9:91:1a:
                    8f:78:09:88:02:e2:4b:2f:41:6c:8c:42:3c:28:62:
                    c2:8e:0e:ca:23:a9:65:85:bd:53:76:32:f1:e4:9f:
                    8f:3d:04:2c:5f:54:71:f9:97:ba:9a:63:1c:3f:b3:
                    d3:03:2b:89:8a:5b:e8:55:77:36:44:3f:16:1e:99:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:9D:60:11:BD:77:F4:90:22:58:C2:BD:CF:A8:3C:78:C0:74:0F
            X509v3 Authority Key Identifier:
                keyid:6B:94:A8:5A:E0:7C:5B:F4:E4:34:85:EF:13:FA:A7:C0:08:DB:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B94A85AE07C5BF4E43485EF13FAA7C008DB5441.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/1/323830343a356465303a3a2f33322d313238203d3e20323638393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:c1:2b:30:d4:22:60:ec:74:40:56:7c:af:fd:3f:e6:f4:fc:
         a0:6d:ba:c3:2f:47:ca:c6:7d:19:36:89:92:f2:c2:6e:2e:65:
         0a:ff:60:f1:8c:63:3e:bc:b1:4c:7c:20:ae:24:93:e3:3b:0f:
         17:58:b2:ad:0f:d7:8c:eb:3a:22:e2:21:01:e3:fd:7e:55:71:
         2a:fc:18:a6:a3:88:5a:fd:9a:1e:97:85:34:8c:53:d6:c4:d7:
         d8:27:8c:1f:5f:07:be:73:5f:4e:ac:e3:9a:79:94:1c:09:76:
         69:d3:f9:39:9f:00:8c:b9:a1:6e:ad:7e:37:c2:e0:e0:bd:42:
         0d:f0:e3:38:c3:2c:31:02:49:69:66:c4:91:5e:ea:55:f8:25:
         d3:4d:30:6e:86:50:21:17:4d:b5:8c:af:1d:54:69:73:24:66:
         de:22:04:f7:65:e5:0a:e5:f5:47:ef:30:d3:86:5d:bc:a4:17:
         fe:cc:c9:04:f8:bb:3c:38:9a:0d:5a:7f:9b:e2:33:20:0f:5c:
         93:e8:40:4a:7c:04:06:5c:f8:ef:8d:3c:fa:95:23:c4:3a:da:
         0e:98:9a:06:a6:73:26:59:d9:4c:90:65:02:48:65:12:56:a6:
         94:56:9c:18:7c:c3:15:de:09:a7:6c:72:85:9f:35:c5:86:8b:
         d9:1d:a0:12
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUE4+tZhG4j90bjal4Oj/Ybax6m4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI5NEE4NUFFMDdDNUJGNEU0MzQ4NUVGMTNGQUE3QzAw
OERCNTQ0MTAeFw0yNTAzMDYxMTM0MzRaFw0yNjAzMDUxMTM5MzRaMDMxMTAvBgNV
BAMTKDU4MkQ5RDYwMTFCRDc3RjQ5MDIyNThDMkJEQ0ZBODNDNzhDMDc0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+KdDNaDKws7ZZ3Dk70FAeVsSw
ZRiVFvy3iz2ss2UF2nidYTrkg7bHcZ3vxhV6csY4eKIm9Ub7l+7mChguOeXZ0HVP
0Eu+F4gN8J9+Co0ECTBJycl3h8J4+2DRvDv6MobR48GqR9zyQ/5wrlraWeKt32RK
JffsvJFAELRNhEgcyk50B8MQ3Y2kjdc+Dl+dpYjj9LmX/U0GXMZuZ+AiySs8DPxF
SxOxsm8xPBK0LaCxuT0SIDx/DBG012Tm+jWlT/mRGo94CYgC4ksvQWyMQjwoYsKO
DsojqWWFvVN2MvHkn489BCxfVHH5l7qaYxw/s9MDK4mKW+hVdzZEPxYemf9jAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUWC2dYBG9d/SQIljCvc+oPHjAdA8wHwYDVR0j
BBgwFoAUa5SoWuB8W/TkNIXvE/qnwAjbVEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFqeTZqM3Z2Ymt6c0s1RmFFTThLZFZYZ3Rub0dXN1RVYjhQTkhyeURR
YW8vMS82Qjk0QTg1QUUwN0M1QkY0RTQzNDg1RUYxM0ZBQTdDMDA4REI1NDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCOTRBODVBRTA3QzVCRjRF
NDM0ODVFRjEzRkFBN0MwMDhEQjU0NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxank2ajN2dmJrenNLNUZhRU04S2RWWGd0bm9HVzdUVWI4UE5IcnlEUWFvLzEv
MzIzODMwMzQzYTM1NjQ2NTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBF3gMA0GCSqGSIb3DQEBCwUAA4IBAQADwSsw
1CJg7HRAVnyv/T/m9PygbbrDL0fKxn0ZNomS8sJuLmUK/2DxjGM+vLFMfCCuJJPj
Ow8XWLKtD9eM6zoi4iEB4/1+VXEq/Bimo4ha/Zoel4U0jFPWxNfYJ4wfXwe+c19O
rOOaeZQcCXZp0/k5nwCMuaFurX43wuDgvUIN8OM4wywxAklpZsSRXupV+CXTTTBu
hlAhF021jK8dVGlzJGbeIgT3ZeUK5fVH7zDThl28pBf+zMkE+Ls8OJoNWn+b4jMg
D1yT6EBKfAQGXPjvjTz6lSPEOtoOmJoGpnMmWdlMkGUCSGUSVqaUVpwYfMMV3gmn
bHKFnzXFhovZHaAS
-----END CERTIFICATE-----
Generated at Tue May 6 02:35:22 2025 by rpki-client