Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa
File:                     323830343a363935303a3a2f33322d3438203d3e20323730323632.roa (raw, json)
Hash identifier:          jVB/TZI7mAJTFvFH+Q0TCJt0fSN52rCyMQr+sN4tBf4=
Subject key identifier:   FA:18:C2:3F:0F:2D:8C:18:26:B1:71:FF:F0:B8:36:EC:09:34:2A:19
Certificate issuer:       /CN=4604735AE146206BD46CAEA7DB01B25B210619DE
Certificate serial:       7F2202035580D0A96526F8A629025A64A14E8501
Authority key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa
Signing time:             Thu 19 Jun 2025 20:03:07 +0000
ROA not before:           Thu 19 Jun 2025 19:58:07 +0000
ROA not after:            Thu 18 Jun 2026 20:03:07 +0000
asID:                     270262
IP address blocks:        2804:6950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl
                          rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:22:02:03:55:80:d0:a9:65:26:f8:a6:29:02:5a:64:a1:4e:85:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4604735AE146206BD46CAEA7DB01B25B210619DE
        Validity
            Not Before: Jun 19 19:58:07 2025 GMT
            Not After : Jun 18 20:03:07 2026 GMT
        Subject: CN=FA18C23F0F2D8C1826B171FFF0B836EC09342A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:0b:3f:3d:df:c7:c3:fe:90:d3:2f:01:ac:
                    ae:6f:16:21:98:a7:cd:e0:e7:ba:e2:79:e6:da:12:
                    5b:9a:97:a2:11:09:ea:e9:60:43:70:a3:7c:5d:64:
                    63:95:51:4f:59:03:ab:10:06:f0:04:0e:27:50:5e:
                    96:8d:8c:6d:b1:5a:7d:59:00:23:ef:f3:31:d3:98:
                    bc:86:1c:07:79:d8:6a:34:30:77:60:9a:bf:6e:dc:
                    7b:18:f1:f0:22:b1:79:b6:90:d8:a7:f3:7d:c1:04:
                    b0:e4:e1:04:23:54:91:0b:08:0b:cd:eb:e5:e8:31:
                    5c:ad:e3:55:47:8b:c6:48:9d:d3:13:c8:42:f3:0d:
                    1b:7d:c6:b2:84:39:33:7f:ff:6e:31:3c:50:ef:8d:
                    05:69:84:68:67:f4:a5:b6:90:d3:35:d9:c7:83:40:
                    56:63:98:f9:84:25:b7:bd:ce:b1:52:34:c8:fa:56:
                    f3:b2:51:42:77:1d:0c:29:b4:c9:3f:cd:13:c6:75:
                    1a:22:6c:e0:0f:dc:76:35:58:35:20:fd:5b:eb:c7:
                    62:8e:f1:bd:d8:e4:24:12:5c:81:85:18:46:cb:c2:
                    af:f8:97:c1:40:c7:7d:02:2f:e0:32:80:0f:9a:10:
                    24:ea:d2:71:76:2d:1e:6a:29:a5:df:9c:46:e6:e0:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:C2:3F:0F:2D:8C:18:26:B1:71:FF:F0:B8:36:EC:09:34:2A:19
            X509v3 Authority Key Identifier:
                keyid:46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/323830343a363935303a3a2f33322d3438203d3e20323730323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6950::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:39:d2:f2:55:54:48:02:d8:db:0e:06:64:bb:3b:de:57:
         74:1a:ed:a5:0d:39:bb:01:b4:b9:de:69:54:d7:12:61:59:70:
         2c:b0:84:1f:60:b3:87:9d:1e:31:98:ae:cf:92:6c:3a:98:11:
         22:40:7c:72:ac:08:52:99:7a:81:8a:00:f2:80:bb:65:01:8d:
         f6:47:b5:b4:b8:1d:33:2c:51:aa:91:b0:9e:24:b0:e2:ee:3b:
         53:3c:0f:53:98:da:f8:bb:13:37:9f:d5:b5:62:6a:67:46:4e:
         5e:e1:26:95:2c:ef:cb:43:d9:b9:62:04:0e:03:b6:8e:fd:82:
         5a:45:27:82:57:1f:da:71:ec:4b:0c:fc:bb:df:72:bf:f5:8a:
         a6:1c:f2:fd:ac:17:55:af:3f:8d:3d:f4:a0:f4:b5:19:06:1f:
         e8:09:d5:86:fd:6e:f4:ab:a7:f9:52:ed:49:2f:9a:80:3a:79:
         57:51:47:29:80:aa:42:a8:99:ae:66:70:18:c5:ad:f1:0c:46:
         21:73:58:57:42:ae:cc:c4:f6:fa:ee:0d:94:cb:91:e9:65:67:
         3a:78:05:8a:0c:7c:a0:98:93:31:90:9d:82:5e:c6:2f:e6:0e:
         3c:35:71:6a:13:86:5b:59:62:0b:0f:00:aa:f0:f3:d9:3e:14:
         c3:aa:08:4e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfyICA1WA0KllJvimKQJaZKFOhQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwNDczNUFFMTQ2MjA2QkQ0NkNBRUE3REIwMUIyNUIy
MTA2MTlERTAeFw0yNTA2MTkxOTU4MDdaFw0yNjA2MTgyMDAzMDdaMDMxMTAvBgNV
BAMTKEZBMThDMjNGMEYyRDhDMTgyNkIxNzFGRkYwQjgzNkVDMDkzNDJBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tQs/Pd/Hw/6Q0y8BrK5vFiGY
p83g57rieebaElual6IRCerpYENwo3xdZGOVUU9ZA6sQBvAEDidQXpaNjG2xWn1Z
ACPv8zHTmLyGHAd52Go0MHdgmr9u3HsY8fAisXm2kNin833BBLDk4QQjVJELCAvN
6+XoMVyt41VHi8ZIndMTyELzDRt9xrKEOTN//24xPFDvjQVphGhn9KW2kNM12ceD
QFZjmPmEJbe9zrFSNMj6VvOyUUJ3HQwptMk/zRPGdRoibOAP3HY1WDUg/Vvrx2KO
8b3Y5CQSXIGFGEbLwq/4l8FAx30CL+AygA+aECTq0nF2LR5qKaXfnEbm4D3dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+hjCPw8tjBgmsXH/8Lg27Ak0KhkwHwYDVR0j
BBgwFoAURgRzWuFGIGvUbK6n2wGyWyEGGd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWJpWHM3cVJwbjlDTDRaUERFeVRzRloyQUR6YzRDekJGZG96aFoydndI
RXkvMC80NjA0NzM1QUUxNDYyMDZCRDQ2Q0FFQTdEQjAxQjI1QjIxMDYxOURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MDQ3MzVBRTE0NjIwNkJE
NDZDQUVBN0RCMDFCMjVCMjEwNjE5REUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzViaVhzN3FScG45Q0w0WlBERXlUc0ZaMkFEemM0Q3pCRmRvemhaMnZ3SEV5LzAv
MzIzODMwMzQzYTM2MzkzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpUDANBgkqhkiG9w0BAQsFAAOCAQEAO6k50vJV
VEgC2NsOBmS7O95XdBrtpQ05uwG0ud5pVNcSYVlwLLCEH2Czh50eMZiuz5JsOpgR
IkB8cqwIUpl6gYoA8oC7ZQGN9ke1tLgdMyxRqpGwniSw4u47UzwPU5ja+LsTN5/V
tWJqZ0ZOXuEmlSzvy0PZuWIEDgO2jv2CWkUnglcf2nHsSwz8u99yv/WKphzy/awX
Va8/jT30oPS1GQYf6AnVhv1u9Kun+VLtSS+agDp5V1FHKYCqQqiZrmZwGMWt8QxG
IXNYV0KuzMT2+u4NlMuR6WVnOngFigx8oJiTMZCdgl7GL+YOPDVxahOGW1liCw8A
qvDz2T4Uw6oITg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:03:19 2025 by rpki-client