Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa
File:                     323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (raw, json)
Hash identifier:          77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=
Subject key identifier:   89:66:C8:D7:51:B6:E5:B7:3F:B1:E6:DD:8E:EE:5A:FE:F8:13:4C:17
Certificate issuer:       /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
Certificate serial:       08EC23E60560E3A9984BFB9F4005C79185D6BFED
Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa
Signing time:             Thu 05 Jun 2025 22:52:37 +0000
ROA not before:           Thu 05 Jun 2025 22:47:37 +0000
ROA not after:            Thu 04 Jun 2026 22:52:37 +0000
asID:                     266003
IP address blocks:        2804:4118::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 08:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ec:23:e6:05:60:e3:a9:98:4b:fb:9f:40:05:c7:91:85:d6:bf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4
        Validity
            Not Before: Jun  5 22:47:37 2025 GMT
            Not After : Jun  4 22:52:37 2026 GMT
        Subject: CN=8966C8D751B6E5B73FB1E6DD8EEE5AFEF8134C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:33:65:7e:af:c2:b6:ec:bd:a6:96:1f:30:
                    c6:7c:f7:92:17:da:c8:78:b4:dc:12:94:1e:54:c3:
                    7a:f4:a2:04:c6:1c:98:25:cd:b6:b3:1f:48:33:e2:
                    25:d2:ca:bf:d0:e3:9b:f6:dc:f2:af:b7:bf:fa:54:
                    45:63:ac:d1:05:76:22:27:0e:d0:a0:c2:63:a9:2a:
                    f1:e6:fe:12:d6:59:f7:b5:1e:1e:4e:b2:b9:42:7e:
                    9d:fc:81:6c:c8:59:af:26:50:94:c1:0f:e1:e9:e0:
                    1c:9e:e7:63:e6:19:4e:35:e4:8a:96:23:1b:53:e2:
                    bc:2c:14:bf:05:2e:53:a4:06:d1:10:2d:84:1b:ef:
                    4c:ec:b3:92:35:30:cc:af:55:6b:df:ff:4e:0e:fb:
                    0c:ee:5c:79:0c:7c:d2:5e:e9:a7:49:39:b4:bc:3f:
                    d0:79:d8:68:33:a9:01:40:17:48:8e:68:18:da:65:
                    3e:51:82:6d:f3:b9:3e:2c:23:27:62:e7:f6:e3:91:
                    bf:a8:3c:0d:bb:84:c8:8f:a1:d3:50:99:31:6b:1f:
                    45:09:94:df:46:1f:02:72:b1:c0:dc:14:0e:6e:12:
                    84:df:1c:47:3a:4b:fb:8d:fc:1d:25:b8:bf:c3:68:
                    a4:af:c2:00:e7:5d:12:fe:d2:8d:47:74:40:e5:2e:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:66:C8:D7:51:B6:E5:B7:3F:B1:E6:DD:8E:EE:5A:FE:F8:13:4C:17
            X509v3 Authority Key Identifier:
                keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/323830343a343131383a3a2f33322d3634203d3e20323636303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4118::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:97:6a:36:4f:99:b0:8f:48:27:8a:f1:21:ea:0d:8c:99:
         29:f2:a6:8b:2d:5d:a2:9f:20:2d:5c:49:c0:6b:27:26:cc:13:
         c6:15:4a:4d:a6:4f:f8:a7:36:97:78:a9:dd:ad:19:28:13:2d:
         60:23:e1:7c:8e:fc:2b:2d:35:a0:69:c5:60:8f:20:62:c6:08:
         0d:66:29:d5:72:b8:e1:e0:74:b4:4b:ff:af:f8:5b:c7:31:e3:
         78:79:a6:4b:c2:09:75:69:a8:d8:ec:5a:6a:d5:ea:b4:06:b6:
         9d:8c:15:57:33:dd:23:6e:53:17:d0:f3:ce:8f:f7:da:3a:2e:
         64:5d:de:24:cf:e0:05:f9:ec:07:f1:9b:64:8a:96:1b:66:48:
         70:3c:e9:71:a6:da:da:b7:0e:b4:5b:fe:0c:21:98:22:c4:8d:
         fa:d8:46:07:11:95:8d:b1:05:49:a0:08:d0:03:15:a5:6d:9a:
         05:7c:a6:48:de:e6:0a:b7:ec:10:42:97:c2:ed:0e:e2:0b:0f:
         02:a0:4e:eb:d8:72:b9:fe:7d:df:27:6d:80:b1:35:0c:de:df:
         17:56:de:05:60:02:77:cd:d5:09:61:74:ad:63:5b:b1:98:3e:
         55:a3:f2:8d:82:ec:0b:13:ea:f9:bc:ad:a9:8c:4f:1a:d5:48:
         18:d9:34:88
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCOwj5gVg46mYS/ufQAXHkYXWv+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC
NUFCODFENDAeFw0yNTA2MDUyMjQ3MzdaFw0yNjA2MDQyMjUyMzdaMDMxMTAvBgNV
BAMTKDg5NjZDOEQ3NTFCNkU1QjczRkIxRTZERDhFRUU1QUZFRjgxMzRDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGTNlfq/Ctuy9ppYfMMZ895IX
2sh4tNwSlB5Uw3r0ogTGHJglzbazH0gz4iXSyr/Q45v23PKvt7/6VEVjrNEFdiIn
DtCgwmOpKvHm/hLWWfe1Hh5OsrlCfp38gWzIWa8mUJTBD+Hp4Bye52PmGU415IqW
IxtT4rwsFL8FLlOkBtEQLYQb70zss5I1MMyvVWvf/04O+wzuXHkMfNJe6adJObS8
P9B52GgzqQFAF0iOaBjaZT5Rgm3zuT4sIydi5/bjkb+oPA27hMiPodNQmTFrH0UJ
lN9GHwJyscDcFA5uEoTfHEc6S/uN/B0luL/DaKSvwgDnXRL+0o1HdEDlLkt9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiWbI11G25bc/sebdju5a/vgTTBcwHwYDVR0j
BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq
ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4
RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAv
MzIzODMwMzQzYTM0MzEzMTM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM2
MzAzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARBGDANBgkqhkiG9w0BAQsFAAOCAQEAFr2XajZP
mbCPSCeK8SHqDYyZKfKmiy1dop8gLVxJwGsnJswTxhVKTaZP+Kc2l3ip3a0ZKBMt
YCPhfI78Ky01oGnFYI8gYsYIDWYp1XK44eB0tEv/r/hbxzHjeHmmS8IJdWmo2Oxa
atXqtAa2nYwVVzPdI25TF9Dzzo/32jouZF3eJM/gBfnsB/GbZIqWG2ZIcDzpcaba
2rcOtFv+DCGYIsSN+thGBxGVjbEFSaAI0AMVpW2aBXymSN7mCrfsEEKXwu0O4gsP
AqBO69hyuf593ydtgLE1DN7fF1beBWACd83VCWF0rWNbsZg+VaPyjYLsCxPq+byt
qYxPGtVIGNk0iA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:45:14 2025 by rpki-client