Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
File:                     323830343a313261303a3a2f33322d3333203d3e203631393030.roa (raw, json)
Hash identifier:          U7RItReMfKewOUXklbfelEJE+adYzYclyawoMMfWRuE=
Subject key identifier:   79:BB:36:2D:85:91:E9:BF:41:80:55:DE:AB:62:27:E1:7A:6E:8A:3E
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       6F11C62C595B52EF15B5FCF98656BB52F71ACD74
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:55:04 +0000
ROA not before:           Tue 13 May 2025 18:50:04 +0000
ROA not after:            Tue 12 May 2026 18:55:04 +0000
asID:                     61900
IP address blocks:        2804:12a0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:11:c6:2c:59:5b:52:ef:15:b5:fc:f9:86:56:bb:52:f7:1a:cd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:50:04 2025 GMT
            Not After : May 12 18:55:04 2026 GMT
        Subject: CN=79BB362D8591E9BF418055DEAB6227E17A6E8A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:6a:46:6c:33:75:13:c1:cd:5a:d7:d0:77:
                    2c:d9:d7:9f:e8:54:69:e1:ee:16:02:24:42:cc:72:
                    48:22:f3:97:7a:3d:24:76:e6:ab:10:ba:5d:91:8f:
                    11:1e:cf:c9:1a:15:dc:3e:d2:90:2e:1d:0f:ad:92:
                    24:c5:41:e6:c3:f3:76:d5:31:a5:4e:ee:ea:11:d0:
                    2f:91:df:f9:08:05:c7:c4:b9:bc:e5:b8:93:c5:86:
                    1c:61:9d:96:16:79:10:26:33:86:52:ae:92:43:df:
                    1f:6a:f4:6e:a3:75:aa:e2:7f:04:93:65:0b:b5:e0:
                    fa:c5:e4:91:2f:01:47:2e:db:14:69:99:a4:b8:69:
                    ba:29:08:ec:eb:be:2c:36:6c:84:b6:9e:26:9f:35:
                    07:60:8f:05:9b:02:19:3b:f7:e0:03:b8:91:88:d9:
                    80:ab:a0:29:9f:ff:94:c9:43:20:83:6b:af:34:a4:
                    43:44:46:59:d1:f7:fd:f7:39:0f:7e:34:1f:48:b2:
                    e0:e6:0b:8b:b8:32:40:98:b7:28:d1:2e:83:c4:77:
                    91:2d:ee:14:5a:bb:ca:36:55:3b:cc:1e:df:9a:0d:
                    01:ec:af:31:2b:93:fb:1b:45:9c:ca:ae:23:25:f5:
                    de:c9:3f:a4:bf:3b:27:6a:2d:b5:ad:94:7c:94:2e:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BB:36:2D:85:91:E9:BF:41:80:55:DE:AB:62:27:E1:7A:6E:8A:3E
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:43:12:67:a8:82:3a:2b:4a:7a:de:0a:6e:e3:33:07:cb:
         0c:23:af:47:01:5a:f0:60:23:10:fb:74:3f:73:e1:de:6a:eb:
         fa:a5:76:fc:9e:24:81:f5:b1:6b:35:06:0a:59:ba:3b:eb:53:
         79:ca:36:2a:16:c1:25:e1:69:e8:84:5a:3a:b4:be:f2:ee:52:
         32:2b:15:1a:fc:18:86:0f:93:62:ce:bd:fb:83:2f:d0:50:e8:
         89:f5:62:76:50:3a:50:48:62:05:78:7a:ea:98:3f:4b:c3:11:
         89:e6:11:bb:c9:12:ca:96:2d:eb:e5:af:d4:4b:3d:ac:e4:31:
         33:b6:c7:05:5c:85:f9:5f:f8:5d:d3:74:cd:59:53:4f:56:7c:
         62:d2:b0:c8:8c:9f:99:1d:79:87:f3:b2:ec:e7:a1:b4:ef:88:
         b3:bb:92:6c:6b:d8:bd:90:22:27:47:0c:7c:75:8a:ba:0b:bd:
         d1:3d:82:da:90:64:6d:67:f6:b6:25:d1:8d:39:9a:61:24:a3:
         4c:67:80:73:80:02:44:76:c7:2c:d6:73:34:f1:e8:9a:e5:46:
         cd:fd:0a:a7:fb:a9:e0:9b:ad:d0:09:c6:cf:36:3f:d3:d4:3a:
         5d:7b:c0:78:2c:49:a5:9c:50:61:29:fd:36:d3:b6:1a:fa:bb:
         54:f9:85:be
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbxHGLFlbUu8Vtfz5hla7UvcazXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBENUYzQUMxRjk2NEM2QTFBNkYzN0YzOUU1RUE1MjdD
NjM5OENGQzAeFw0yNTA1MTMxODUwMDRaFw0yNjA1MTIxODU1MDRaMDMxMTAvBgNV
BAMTKDc5QkIzNjJEODU5MUU5QkY0MTgwNTVERUFCNjIyN0UxN0E2RThBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnGpGbDN1E8HNWtfQdyzZ15/o
VGnh7hYCJELMckgi85d6PSR25qsQul2RjxEez8kaFdw+0pAuHQ+tkiTFQebD83bV
MaVO7uoR0C+R3/kIBcfEubzluJPFhhxhnZYWeRAmM4ZSrpJD3x9q9G6jdarifwST
ZQu14PrF5JEvAUcu2xRpmaS4abopCOzrviw2bIS2niafNQdgjwWbAhk79+ADuJGI
2YCroCmf/5TJQyCDa680pENERlnR9/33OQ9+NB9IsuDmC4u4MkCYtyjRLoPEd5Et
7hRau8o2VTvMHt+aDQHsrzErk/sbRZzKriMl9d7JP6S/OydqLbWtlHyULljZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUebs2LYWR6b9BgFXeq2In4Xpuij4wHwYDVR0j
BBgwFoAUwNXzrB+WTGoabzfznl6lJ8Y5jPwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC9DMEQ1RjNBQzFGOTY0QzZBMUE2RjM3RjM5RTVFQTUyN0M2Mzk4Q0ZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwRDVGM0FDMUY5NjRDNkEx
QTZGMzdGMzlFNUVBNTI3QzYzOThDRkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzIzODMwMzQzYTMxMzI2MTMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEEqAwDQYJKoZIhvcNAQELBQADggEBAC4TQxJnqII6
K0p63gpu4zMHywwjr0cBWvBgIxD7dD9z4d5q6/qldvyeJIH1sWs1BgpZujvrU3nK
NioWwSXhaeiEWjq0vvLuUjIrFRr8GIYPk2LOvfuDL9BQ6In1YnZQOlBIYgV4euqY
P0vDEYnmEbvJEsqWLevlr9RLPazkMTO2xwVchflf+F3TdM1ZU09WfGLSsMiMn5kd
eYfzsuznobTviLO7kmxr2L2QIidHDHx1iroLvdE9gtqQZG1n9rYl0Y05mmEko0xn
gHOAAkR2xyzWczTx6JrlRs39Cqf7qeCbrdAJxs82P9PUOl17wHgsSaWcUGEp/TbT
thr6u1T5hb4=
-----END CERTIFICATE-----
Generated at Thu May 15 10:08:34 2025 by rpki-client