Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
File:                     323830343a336537633a3a2f33322d3438203d3e20323636353939.roa (raw, json)
Hash identifier:          3Efq+un5n73xq9iZabGRSGWWD9nvqplWqJNXuIfHPbw=
Subject key identifier:   1C:9F:EE:CA:6B:C3:20:B6:39:6B:89:BD:F0:D0:FF:7A:73:C2:18:D8
Certificate issuer:       /CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
Certificate serial:       34C2F2F4AB3BD1B1D317A66B67F557FEF704158C
Authority key identifier: 6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa
Signing time:             Thu 13 Mar 2025 12:15:22 +0000
ROA not before:           Thu 13 Mar 2025 12:10:22 +0000
ROA not after:            Thu 12 Mar 2026 12:15:22 +0000
asID:                     266599
IP address blocks:        2804:3e7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl
                          rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 04:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c2:f2:f4:ab:3b:d1:b1:d3:17:a6:6b:67:f5:57:fe:f7:04:15:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DB7072D8B617CD7C066951C2153EC8D11742ECC
        Validity
            Not Before: Mar 13 12:10:22 2025 GMT
            Not After : Mar 12 12:15:22 2026 GMT
        Subject: CN=1C9FEECA6BC320B6396B89BDF0D0FF7A73C218D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:16:30:53:2a:21:c3:6a:24:e4:b7:14:e8:
                    46:7a:d2:98:06:48:03:9d:25:30:04:d9:93:e3:7b:
                    72:0a:ab:49:b0:02:30:49:4b:56:f6:d0:0c:1b:6e:
                    cc:8b:4c:08:ef:74:af:33:d1:3a:f0:35:e0:35:89:
                    fc:b8:12:3f:0c:2d:0c:f8:d3:88:45:e7:6f:60:b9:
                    b4:89:cc:a7:9a:60:7a:ac:b2:20:01:2a:c4:44:03:
                    97:e2:d5:50:08:c6:52:d9:e1:91:f2:59:6c:c6:1f:
                    91:7b:0d:75:54:97:58:59:74:80:46:a7:dc:75:b9:
                    c1:14:14:35:8b:73:3c:6f:ac:9f:c5:c8:fe:ff:39:
                    33:0e:b5:d3:67:f6:a2:de:ec:84:bb:71:aa:81:8a:
                    20:25:13:35:b9:a3:0d:88:82:ae:59:93:07:47:c4:
                    28:c5:ee:01:e9:f4:a1:f1:59:ec:bf:ec:0a:05:87:
                    91:ae:85:86:e7:70:e4:ab:d1:9e:9b:ec:6e:ab:3d:
                    77:26:21:7c:8b:f4:f4:c1:55:26:d0:c4:10:45:f8:
                    67:7e:9e:ad:50:99:cd:5d:f7:33:32:18:b1:e8:a3:
                    98:39:fb:15:f0:ea:15:76:60:84:66:cb:8c:83:74:
                    d5:2e:7e:d6:a8:97:9b:90:e7:77:e9:04:8c:5a:af:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:EE:CA:6B:C3:20:B6:39:6B:89:BD:F0:D0:FF:7A:73:C2:18:D8
            X509v3 Authority Key Identifier:
                keyid:6D:B7:07:2D:8B:61:7C:D7:C0:66:95:1C:21:53:EC:8D:11:74:2E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DB7072D8B617CD7C066951C2153EC8D11742ECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYdR2d1KcHDvnaA5wJbop4DjqCYKt24riRuT17Fo2sqJ/1/323830343a336537633a3a2f33322d3438203d3e20323636353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:92:e5:70:6c:3c:51:58:fc:ca:04:01:f5:b9:75:3d:1d:7a:
         02:b7:13:2b:5f:97:c2:4e:72:ee:75:05:bd:de:80:ec:9d:0e:
         5f:a4:cb:b5:dc:1d:07:ef:fc:d1:41:e2:66:f5:bf:0f:9d:2d:
         67:44:0f:ab:32:44:00:1c:72:17:68:d4:f1:26:20:15:0b:60:
         79:35:5f:f1:aa:60:20:14:40:3d:c3:48:62:a2:0a:84:79:9a:
         8c:7e:e2:9a:2e:74:0b:7e:2e:5d:f0:d0:f5:fb:2d:ec:d3:94:
         99:46:29:3c:fc:06:41:9c:77:f7:dd:db:38:5e:90:9e:e3:36:
         3e:7b:54:79:f9:91:8e:ad:57:cc:f0:e1:9e:fd:b6:8e:e1:13:
         cb:92:c9:21:b5:02:46:8e:3a:93:09:55:39:08:7e:ab:b3:a9:
         26:a3:8e:0b:00:57:f8:bc:be:8b:85:84:3f:c6:ec:67:4d:1a:
         a7:d6:84:76:75:d5:6e:39:98:39:3b:f2:98:95:5c:ed:54:07:
         05:50:70:bf:99:f1:67:61:11:30:e6:84:ff:66:8c:b3:17:57:
         eb:b7:2a:07:d8:fd:e0:66:ca:2e:a1:e5:cb:98:1e:db:7a:c7:
         40:c7:18:97:a0:d2:19:e0:a7:dd:b3:33:f9:02:0b:7d:dd:c4:
         97:33:56:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNMLy9Ks70bHTF6ZrZ/VX/vcEFYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRCNzA3MkQ4QjYxN0NEN0MwNjY5NTFDMjE1M0VDOEQx
MTc0MkVDQzAeFw0yNTAzMTMxMjEwMjJaFw0yNjAzMTIxMjE1MjJaMDMxMTAvBgNV
BAMTKDFDOUZFRUNBNkJDMzIwQjYzOTZCODlCREYwRDBGRjdBNzNDMjE4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATxYwUyohw2ok5LcU6EZ60pgG
SAOdJTAE2ZPje3IKq0mwAjBJS1b20AwbbsyLTAjvdK8z0TrwNeA1ify4Ej8MLQz4
04hF529gubSJzKeaYHqssiABKsREA5fi1VAIxlLZ4ZHyWWzGH5F7DXVUl1hZdIBG
p9x1ucEUFDWLczxvrJ/FyP7/OTMOtdNn9qLe7IS7caqBiiAlEzW5ow2Igq5ZkwdH
xCjF7gHp9KHxWey/7AoFh5GuhYbncOSr0Z6b7G6rPXcmIXyL9PTBVSbQxBBF+Gd+
nq1Qmc1d9zMyGLHoo5g5+xXw6hV2YIRmy4yDdNUuftaol5uQ53fpBIxar1W7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHJ/uymvDILY5a4m98ND/enPCGNgwHwYDVR0j
BBgwFoAUbbcHLYthfNfAZpUcIVPsjRF0LswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllkUjJkMUtjSER2bmFBNXdKYm9wNERqcUNZS3QyNHJpUnVUMTdGbzJz
cUovMS82REI3MDcyRDhCNjE3Q0Q3QzA2Njk1MUMyMTUzRUM4RDExNzQyRUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEQjcwNzJEOEI2MTdDRDdD
MDY2OTUxQzIxNTNFQzhEMTE3NDJFQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZZZFIyZDFLY0hEdm5hQTV3SmJvcDREanFDWUt0MjRyaVJ1VDE3Rm8yc3FKLzEv
MzIzODMwMzQzYTMzNjUzNzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+fDANBgkqhkiG9w0BAQsFAAOCAQEAzZLlcGw8
UVj8ygQB9bl1PR16ArcTK1+Xwk5y7nUFvd6A7J0OX6TLtdwdB+/80UHiZvW/D50t
Z0QPqzJEABxyF2jU8SYgFQtgeTVf8apgIBRAPcNIYqIKhHmajH7imi50C34uXfDQ
9fst7NOUmUYpPPwGQZx3993bOF6QnuM2PntUefmRjq1XzPDhnv22juETy5LJIbUC
Ro46kwlVOQh+q7OpJqOOCwBX+Ly+i4WEP8bsZ00ap9aEdnXVbjmYOTvymJVc7VQH
BVBwv5nxZ2ERMOaE/2aMsxdX67cqB9j94GbKLqHly5ge23rHQMcYl6DSGeCn3bMz
+QILfd3ElzNWsg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:10:34 2025 by rpki-client