Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa
File:                     323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa (raw, json)
Hash identifier:          G/oanqGpz/7f8DfTfJikU2Wt5ZIk3K6P/UR05ijOB6I=
Subject key identifier:   24:A3:16:91:9D:92:AC:2D:1B:71:F4:C3:8F:A4:05:EC:32:0A:DD:04
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       22FB1D85163624A85632A921EF588A5974C489C5
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:38:12 +0000
ROA not before:           Thu 26 Jun 2025 00:33:12 +0000
ROA not after:            Thu 25 Jun 2026 00:38:12 +0000
asID:                     265919
IP address blocks:        2804:3fd8:196::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fb:1d:85:16:36:24:a8:56:32:a9:21:ef:58:8a:59:74:c4:89:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:33:12 2025 GMT
            Not After : Jun 25 00:38:12 2026 GMT
        Subject: CN=24A316919D92AC2D1B71F4C38FA405EC320ADD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:c8:74:79:53:06:92:ce:05:31:58:c0:00:
                    06:7a:ac:51:1d:80:ff:43:a6:cf:eb:7e:e8:08:6b:
                    c7:44:d0:39:0d:b2:ec:df:6c:82:4c:af:9b:ee:35:
                    39:95:51:e5:cb:d2:bc:b7:30:e4:61:93:25:bb:d2:
                    bb:8c:ae:11:78:e7:f4:75:3e:0f:6b:1f:02:98:85:
                    db:36:c2:b3:c2:9a:cb:34:b8:04:8b:34:cf:f5:33:
                    0b:cf:41:2c:07:96:07:6e:a5:a4:a6:7b:57:c9:97:
                    88:b7:f1:13:27:0a:d0:2b:74:00:41:b4:8f:f7:28:
                    60:ed:fa:89:a7:6d:fd:e6:35:a0:65:3b:d1:3d:23:
                    e1:9a:ea:e7:c4:f7:0e:04:d6:18:8c:65:a7:12:a6:
                    63:ef:ba:0a:b3:e4:cb:2f:ab:0e:56:ec:ad:55:7e:
                    a4:14:72:1b:ec:c3:0c:76:3e:c0:dd:a0:d6:90:a9:
                    20:05:91:ac:0d:85:3d:19:7b:f3:c1:98:ca:2f:f4:
                    d7:35:58:94:12:43:af:c3:97:67:9f:08:e2:99:1d:
                    7b:ca:5e:d1:2f:31:4f:a2:18:5b:0c:2f:37:44:b9:
                    da:76:ed:06:af:a8:fc:79:9a:b0:8e:4f:3e:b5:02:
                    b5:ab:23:f8:09:4b:68:85:f4:b5:9c:59:8a:27:73:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:16:91:9D:92:AC:2D:1B:71:F4:C3:8F:A4:05:EC:32:0A:DD:04
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34372d3437203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:196::/47

    Signature Algorithm: sha256WithRSAEncryption
         c7:3d:c0:a6:b6:17:a2:57:77:df:50:e2:ff:24:3d:cf:92:08:
         38:ae:f1:96:71:6b:e3:03:09:40:db:47:77:94:2b:d5:12:81:
         e7:f1:93:05:df:ff:1a:f5:b3:8b:b4:cd:b7:43:cc:23:f9:6f:
         7e:e4:48:77:6a:be:68:67:b8:c1:be:67:b3:2c:4c:6a:b6:98:
         d1:03:94:a5:fc:13:91:a7:b9:78:8e:73:92:be:3c:9e:b8:b8:
         51:7e:2a:e7:33:6a:f3:3b:62:a2:63:f9:50:42:a8:df:fe:5d:
         42:fd:76:17:b2:50:68:c1:82:e2:6d:55:9b:a7:b1:63:f4:72:
         ba:31:91:54:86:22:05:1e:e8:4e:0d:d2:8b:1d:c2:7a:4c:9e:
         34:7c:22:27:cc:8f:49:e3:74:5b:ce:16:48:62:14:8c:c9:4e:
         98:7e:28:ef:54:e9:8f:bc:9e:f1:34:42:b6:33:78:a0:5a:97:
         74:7e:09:d3:50:7d:a7:f5:e8:d6:18:79:63:96:51:48:6d:62:
         af:c8:de:32:e1:3c:83:70:2a:1e:ce:42:87:ef:bf:9e:43:c4:
         12:06:e9:56:f6:cc:9f:de:d9:13:0b:71:3f:41:f2:0f:82:29:
         5b:d9:de:ae:84:72:b4:86:61:b4:cd:00:35:21:f0:20:8c:ac:
         80:14:9d:2b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUIvsdhRY2JKhWMqkh71iKWXTEicUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0NjFBNUFGOTg4MzlERTIwQzJEN0Y3QTBBODUzN0M3
N0FDNTJCMjAeFw0yNTA2MjYwMDMzMTJaFw0yNjA2MjUwMDM4MTJaMDMxMTAvBgNV
BAMTKDI0QTMxNjkxOUQ5MkFDMkQxQjcxRjRDMzhGQTQwNUVDMzIwQUREMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I8h0eVMGks4FMVjAAAZ6rFEd
gP9Dps/rfugIa8dE0DkNsuzfbIJMr5vuNTmVUeXL0ry3MORhkyW70ruMrhF45/R1
Pg9rHwKYhds2wrPCmss0uASLNM/1MwvPQSwHlgdupaSme1fJl4i38RMnCtArdABB
tI/3KGDt+omnbf3mNaBlO9E9I+Ga6ufE9w4E1hiMZacSpmPvugqz5Msvqw5W7K1V
fqQUchvswwx2PsDdoNaQqSAFkawNhT0Ze/PBmMov9Nc1WJQSQ6/Dl2efCOKZHXvK
XtEvMU+iGFsMLzdEudp27QavqPx5mrCOTz61ArWrI/gJS2iF9LWcWYoncw8TAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUJKMWkZ2SrC0bcfTDj6QF7DIK3QQwHwYDVR0j
BBgwFoAUF0YaWvmIOd4gwtf3oKhTfHesUrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8xNzQ2MUE1QUY5ODgzOURFMjBDMkQ3RjdBMEE4NTM3Qzc3QUM1MkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3NDYxQTVBRjk4ODM5REUy
MEMyRDdGN0EwQTg1MzdDNzdBQzUyQjIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzIzODMwMzQzYTMzNjY2NDM4M2EzMTM5MzYzYTNhMmYzNDM3MmQzNDM3MjAzZDNl
MjAzMjM2MzUzOTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEoBD/YAZYwDQYJKoZIhvcNAQELBQAD
ggEBAMc9wKa2F6JXd99Q4v8kPc+SCDiu8ZZxa+MDCUDbR3eUK9USgefxkwXf/xr1
s4u0zbdDzCP5b37kSHdqvmhnuMG+Z7MsTGq2mNEDlKX8E5GnuXiOc5K+PJ64uFF+
KuczavM7YqJj+VBCqN/+XUL9dheyUGjBguJtVZunsWP0croxkVSGIgUe6E4N0osd
wnpMnjR8IifMj0njdFvOFkhiFIzJTph+KO9U6Y+8nvE0QrYzeKBal3R+CdNQfaf1
6NYYeWOWUUhtYq/I3jLhPINwKh7OQofvv55DxBIG6Vb2zJ/e2RMLcT9B8g+CKVvZ
3q6EcrSGYbTNADUh8CCMrIAUnSs=
-----END CERTIFICATE-----
Generated at Sat Jul 12 14:05:02 2025 by rpki-client