Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa
File:                     323830343a6430383a3a2f33322d3438203d3e20323632333131.roa (raw, json)
Hash identifier:          hTXuJWvyGebPs2YzIWzFt7Fdqt1Sto1rKMZ1OALBME0=
Subject key identifier:   4C:91:CE:FD:62:88:AA:4B:F0:F9:4C:8C:21:57:01:ED:91:77:0F:D1
Certificate issuer:       /CN=8B49F9344E05C9F966C6027F79FC469130EC971D
Certificate serial:       784A8E32E80A6A32493F61BC625C80A78AE5E623
Authority key identifier: 8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa
Signing time:             Thu 13 Mar 2025 12:15:20 +0000
ROA not before:           Thu 13 Mar 2025 12:10:20 +0000
ROA not after:            Thu 12 Mar 2026 12:15:20 +0000
asID:                     262311
IP address blocks:        2804:d08::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl
                          rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 21:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4a:8e:32:e8:0a:6a:32:49:3f:61:bc:62:5c:80:a7:8a:e5:e6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B49F9344E05C9F966C6027F79FC469130EC971D
        Validity
            Not Before: Mar 13 12:10:20 2025 GMT
            Not After : Mar 12 12:15:20 2026 GMT
        Subject: CN=4C91CEFD6288AA4BF0F94C8C215701ED91770FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:5a:a1:5b:f9:4f:9a:ec:3d:54:a6:6a:38:
                    dc:fb:ef:c9:c3:2b:79:d4:17:76:bf:49:57:bf:0d:
                    53:d3:c7:41:41:08:81:d9:d6:49:16:cd:52:99:7c:
                    62:85:cb:80:ff:5d:fb:f2:2a:9c:62:c2:83:b1:22:
                    d7:20:1a:51:03:86:8f:53:f9:81:3d:18:77:cf:fc:
                    33:a2:bb:9d:bf:88:56:63:34:db:21:c3:33:51:de:
                    3e:ac:e1:9e:6e:fd:7e:07:47:58:e7:3b:e3:2c:6d:
                    5e:1b:f8:12:c3:df:95:38:8a:e9:fe:80:11:ef:51:
                    a8:4a:b6:da:89:2c:c8:1b:6f:da:36:65:39:47:dc:
                    75:41:37:71:1a:52:df:1b:dc:85:db:d4:ab:31:4e:
                    71:3a:62:0c:3a:a1:ec:53:46:c6:7e:a2:00:5a:2e:
                    87:4c:36:5a:06:44:1c:a1:9e:30:a0:50:36:7a:73:
                    b1:e6:48:92:c8:27:dd:eb:d2:45:39:aa:ae:50:0a:
                    60:93:4c:50:ad:de:28:d8:b0:db:b6:72:12:a6:d5:
                    08:73:c6:33:54:38:5b:7e:80:de:b6:92:c6:d2:71:
                    1e:6c:a9:69:72:82:d9:d5:7a:1c:02:b3:32:e1:23:
                    6e:07:b9:28:14:90:62:16:b2:a1:40:7b:64:5f:f3:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:CE:FD:62:88:AA:4B:F0:F9:4C:8C:21:57:01:ED:91:77:0F:D1
            X509v3 Authority Key Identifier:
                keyid:8B:49:F9:34:4E:05:C9:F9:66:C6:02:7F:79:FC:46:91:30:EC:97:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/8B49F9344E05C9F966C6027F79FC469130EC971D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B49F9344E05C9F966C6027F79FC469130EC971D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SvMs4HykLokQRooRFSbsnzc8vTT9BFXnj6MzDjAa9ro/1/323830343a6430383a3a2f33322d3438203d3e20323632333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d08::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:ec:07:de:d7:a1:c1:86:68:69:c4:0d:15:c8:a1:33:32:d4:
         a2:8c:e0:53:94:f2:06:93:59:b3:18:38:3c:cf:35:45:dd:4b:
         1d:35:e2:5a:13:de:d7:d0:51:81:03:91:5a:0e:22:b6:90:6f:
         d2:b7:10:ac:f2:c3:ce:ba:e8:d2:39:0f:1c:42:bc:b2:c7:08:
         73:bf:7a:56:9e:f1:82:6b:66:a6:93:71:1b:24:77:98:e6:8c:
         cf:49:9d:cc:eb:25:21:18:32:b7:f3:cc:db:d5:ae:54:32:01:
         b3:e1:94:18:0b:d6:8b:bd:6e:c8:6b:a7:0b:f2:b6:59:1e:67:
         27:75:2b:dc:cd:7b:b7:e4:41:7f:3c:ac:d2:f4:35:77:c6:7a:
         eb:cc:0c:b8:b9:07:9a:74:c3:10:90:78:74:a6:03:3b:60:ec:
         ab:00:42:30:15:20:b0:d8:a8:06:b0:77:56:6a:6b:3c:58:2a:
         21:31:52:64:c4:2c:45:a6:e8:7b:49:58:2c:c8:97:c6:0a:3e:
         13:06:4e:c3:3a:f1:c6:4c:e5:65:e9:98:5f:51:37:b8:3a:6e:
         d2:a3:51:cd:e4:dd:eb:06:05:09:58:b5:0f:6a:10:d2:5d:f4:
         f0:91:47:53:a7:d7:b9:67:82:77:9a:af:a7:1d:d7:b1:44:5a:
         7d:b0:65:8b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUeEqOMugKajJJP2G8YlyAp4rl5iMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0OUY5MzQ0RTA1QzlGOTY2QzYwMjdGNzlGQzQ2OTEz
MEVDOTcxRDAeFw0yNTAzMTMxMjEwMjBaFw0yNjAzMTIxMjE1MjBaMDMxMTAvBgNV
BAMTKDRDOTFDRUZENjI4OEFBNEJGMEY5NEM4QzIxNTcwMUVEOTE3NzBGRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bVqhW/lPmuw9VKZqONz778nD
K3nUF3a/SVe/DVPTx0FBCIHZ1kkWzVKZfGKFy4D/XfvyKpxiwoOxItcgGlEDho9T
+YE9GHfP/DOiu52/iFZjNNshwzNR3j6s4Z5u/X4HR1jnO+MsbV4b+BLD35U4iun+
gBHvUahKttqJLMgbb9o2ZTlH3HVBN3EaUt8b3IXb1KsxTnE6Ygw6oexTRsZ+ogBa
LodMNloGRByhnjCgUDZ6c7HmSJLIJ93r0kU5qq5QCmCTTFCt3ijYsNu2chKm1Qhz
xjNUOFt+gN62ksbScR5sqWlygtnVehwCszLhI24HuSgUkGIWsqFAe2Rf82FtAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUTJHO/WKIqkvw+UyMIVcB7ZF3D9EwHwYDVR0j
BBgwFoAUi0n5NE4FyflmxgJ/efxGkTDslx0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFN2TXM0SHlrTG9rUVJvb1JGU2JzbnpjOHZUVDlCRlhuajZNekRqQWE5
cm8vMS84QjQ5RjkzNDRFMDVDOUY5NjZDNjAyN0Y3OUZDNDY5MTMwRUM5NzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNDlGOTM0NEUwNUM5Rjk2
NkM2MDI3Rjc5RkM0NjkxMzBFQzk3MUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRTdk1zNEh5a0xva1FSb29SRlNic256Yzh2VFQ5QkZYbmo2TXpEakFhOXJvLzEv
MzIzODMwMzQzYTY0MzAzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMz
MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDQgwDQYJKoZIhvcNAQELBQADggEBAEXsB97XocGG
aGnEDRXIoTMy1KKM4FOU8gaTWbMYODzPNUXdSx014loT3tfQUYEDkVoOIraQb9K3
EKzyw8666NI5DxxCvLLHCHO/elae8YJrZqaTcRskd5jmjM9JnczrJSEYMrfzzNvV
rlQyAbPhlBgL1ou9bshrpwvytlkeZyd1K9zNe7fkQX88rNL0NXfGeuvMDLi5B5p0
wxCQeHSmAztg7KsAQjAVILDYqAawd1ZqazxYKiExUmTELEWm6HtJWCzIl8YKPhMG
TsM68cZM5WXpmF9RN7g6btKjUc3k3esGBQlYtQ9qENJd9PCRR1On17lngnear6cd
17FEWn2wZYs=
-----END CERTIFICATE-----
Generated at Thu May 15 11:42:35 2025 by rpki-client