Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33332d3333203d3e20323636333735.roa (raw, json)
Hash identifier:          OhqEody8tzXic+H/vmfFXMRDNvGhjnqE0rEzUc++ye4=
Subject key identifier:   77:70:CA:01:76:2A:23:8B:9F:98:BA:03:F2:87:97:61:6F:F3:58:8C
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       41DCC398C2522BF5AB13D2AD93DE575FD63FD996
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:40 +0000
ROA not before:           Wed 30 Apr 2025 18:48:40 +0000
ROA not after:            Wed 29 Apr 2026 18:53:40 +0000
asID:                     266375
IP address blocks:        2804:36d4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:c3:98:c2:52:2b:f5:ab:13:d2:ad:93:de:57:5f:d6:3f:d9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:40 2025 GMT
            Not After : Apr 29 18:53:40 2026 GMT
        Subject: CN=7770CA01762A238B9F98BA03F28797616FF3588C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:80:8b:3e:a2:c9:80:59:05:f8:fc:26:f1:
                    f7:ab:8c:45:31:0b:d5:16:e1:87:eb:4a:c3:de:61:
                    c1:3a:1d:c9:78:2b:d4:11:50:95:f5:7b:f5:df:10:
                    fd:16:87:bc:95:09:fe:ea:78:78:44:06:04:dc:e3:
                    80:f7:8f:67:87:3e:2c:7f:e7:2c:ed:38:d1:2a:76:
                    bf:ec:f9:d5:bf:d3:28:bb:e6:02:6a:b5:b7:ce:5e:
                    6b:ad:8a:c1:57:17:35:37:df:ec:71:76:ce:73:64:
                    08:3d:23:fe:be:04:32:5e:3b:77:f8:a0:16:09:46:
                    43:f8:64:dd:d1:e6:8d:33:83:cf:c2:61:16:b0:3a:
                    c7:21:9b:37:7b:69:19:72:dc:50:c8:31:b1:24:c4:
                    71:2b:8c:17:71:5b:ef:77:ce:d2:06:60:1e:98:60:
                    a7:b5:19:a3:0d:43:9d:02:73:0b:af:a2:41:f6:f6:
                    1f:b1:a8:32:d4:44:0f:b3:12:19:89:fa:d5:a8:8f:
                    6e:a8:da:e4:e4:ba:01:a5:13:22:eb:34:4d:aa:13:
                    e8:16:e1:77:85:2a:7b:08:5e:4f:dc:54:0f:10:d0:
                    57:68:36:9e:8b:dc:b8:09:5c:c4:44:95:4e:a9:ba:
                    3a:c4:03:5c:07:ba:f4:f8:33:cc:b2:57:ae:45:f0:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:CA:01:76:2A:23:8B:9F:98:BA:03:F2:87:97:61:6F:F3:58:8C
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33332d3333203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:fa:ae:90:98:0e:59:df:61:85:d9:3f:7f:c2:bb:3d:c2:
         9b:89:18:51:af:24:9c:1c:23:f0:c3:65:6d:58:43:d4:a8:30:
         a1:2c:12:ba:bf:eb:60:2f:45:f7:50:d1:49:1f:e6:b1:38:65:
         e3:00:f1:91:be:5d:b4:f2:17:11:78:e2:41:f6:d6:c3:d4:13:
         24:c2:09:66:7a:93:b1:53:00:2f:18:69:95:a4:48:ae:75:85:
         b6:10:ff:ae:96:7f:a1:be:0e:6e:10:92:67:44:b9:a5:f9:a1:
         d6:e6:8b:be:12:83:46:47:06:aa:e4:77:81:b7:a3:53:4f:30:
         ca:37:d3:5e:8a:5c:f1:c6:6b:84:08:80:d8:f7:63:06:e0:10:
         0e:06:36:0c:3d:59:14:11:28:69:af:10:52:06:6f:c3:aa:61:
         82:0a:9e:fc:43:81:df:85:4f:ec:cb:db:f6:3b:09:1a:f8:92:
         a4:e3:8b:b8:f7:27:73:f2:82:f9:b3:ed:55:fd:8a:fc:3a:92:
         d1:67:47:1a:27:ed:90:dd:54:bc:03:44:83:e1:7d:f4:f0:29:
         f7:65:f2:be:04:29:0b:2f:35:91:b6:a2:54:ce:ba:5b:ae:9e:
         11:e9:50:4f:95:fa:41:0b:09:e7:55:60:13:95:e5:81:58:4d:
         6b:f0:9c:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQdzDmMJSK/WrE9Ktk95XX9Y/2ZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFNDgzM0JGN0M2QjAyNjhCRjRDM0YxRTIwQzBEQjRF
NDg5N0M3NTAeFw0yNTA0MzAxODQ4NDBaFw0yNjA0MjkxODUzNDBaMDMxMTAvBgNV
BAMTKDc3NzBDQTAxNzYyQTIzOEI5Rjk4QkEwM0YyODc5NzYxNkZGMzU4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzYCLPqLJgFkF+Pwm8ferjEUx
C9UW4YfrSsPeYcE6Hcl4K9QRUJX1e/XfEP0Wh7yVCf7qeHhEBgTc44D3j2eHPix/
5yztONEqdr/s+dW/0yi75gJqtbfOXmutisFXFzU33+xxds5zZAg9I/6+BDJeO3f4
oBYJRkP4ZN3R5o0zg8/CYRawOschmzd7aRly3FDIMbEkxHErjBdxW+93ztIGYB6Y
YKe1GaMNQ50CcwuvokH29h+xqDLURA+zEhmJ+tWoj26o2uTkugGlEyLrNE2qE+gW
4XeFKnsIXk/cVA8Q0FdoNp6L3LgJXMRElU6pujrEA1wHuvT4M8yyV65F8K41AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd3DKAXYqI4ufmLoD8oeXYW/zWIwwHwYDVR0j
BBgwFoAUTOSDO/fGsCaL9MPx4gwNtOSJfHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMC80Q0U0ODMzQkY3QzZCMDI2OEJGNEMzRjFFMjBDMERCNEU0ODk3Qzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTQ4MzNCRjdDNkIwMjY4
QkY0QzNGMUUyMEMwREI0RTQ4OTdDNzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzAv
MzIzODMwMzQzYTMzMzY2NDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ21AAwDQYJKoZIhvcNAQELBQADggEBAA3s+q6Q
mA5Z32GF2T9/wrs9wpuJGFGvJJwcI/DDZW1YQ9SoMKEsErq/62AvRfdQ0Ukf5rE4
ZeMA8ZG+XbTyFxF44kH21sPUEyTCCWZ6k7FTAC8YaZWkSK51hbYQ/66Wf6G+Dm4Q
kmdEuaX5odbmi74Sg0ZHBqrkd4G3o1NPMMo3016KXPHGa4QIgNj3YwbgEA4GNgw9
WRQRKGmvEFIGb8OqYYIKnvxDgd+FT+zL2/Y7CRr4kqTji7j3J3Pygvmz7VX9ivw6
ktFnRxon7ZDdVLwDRIPhffTwKfdl8r4EKQsvNZG2olTOuluunhHpUE+V+kELCedV
YBOV5YFYTWvwnIg=
-----END CERTIFICATE-----
Generated at Sat May 10 04:57:04 2025 by rpki-client