Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33332d3333203d3e20323634303034.roa
File:                     323830343a323933383a383030303a3a2f33332d3333203d3e20323634303034.roa (raw, json)
Hash identifier:          fOLg0qhf/zXLapk506L8znGyUujiRezPBgCcPnDisFM=
Subject key identifier:   49:1C:C9:E1:6B:78:9A:68:47:CE:62:C9:5B:F8:42:59:DE:C3:20:6E
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       5AF6CF4DCB28B0C4EFEA6C7E2B709F051B495194
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33332d3333203d3e20323634303034.roa
Signing time:             Thu 26 Jun 2025 17:41:19 +0000
ROA not before:           Thu 26 Jun 2025 17:36:19 +0000
ROA not after:            Thu 25 Jun 2026 17:41:19 +0000
asID:                     264004
IP address blocks:        2804:2938:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 04:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f6:cf:4d:cb:28:b0:c4:ef:ea:6c:7e:2b:70:9f:05:1b:49:51:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: Jun 26 17:36:19 2025 GMT
            Not After : Jun 25 17:41:19 2026 GMT
        Subject: CN=491CC9E16B789A6847CE62C95BF84259DEC3206E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:b5:6f:ee:3d:1e:7a:15:dd:cf:49:82:5c:
                    8e:2e:39:73:46:21:46:b9:6e:ac:ec:9c:5c:45:fb:
                    e0:63:ac:1d:1f:5b:e6:c4:c0:f0:89:9d:9f:97:8a:
                    a2:a9:29:27:9f:ed:39:07:9b:2c:5b:ed:b0:4a:f1:
                    0e:61:70:b2:96:d5:9c:c2:c8:bb:2c:5b:68:f2:70:
                    4b:1d:2a:33:77:e7:c9:0d:3f:8c:87:2d:56:47:66:
                    ea:33:08:d1:5c:fb:cf:10:11:3a:01:9d:91:02:18:
                    36:94:31:15:43:90:f1:ab:05:3e:f4:0d:1f:9d:44:
                    73:61:38:04:da:51:5c:0a:1e:e5:e8:f1:9c:ad:49:
                    9e:80:f4:03:19:75:a5:fd:0e:e4:0c:32:92:bd:dd:
                    88:a0:ac:18:6c:0c:37:c7:53:98:3d:c8:5f:e4:d6:
                    55:7b:9c:05:b2:77:83:e7:b3:94:df:65:9f:cf:56:
                    0e:9a:53:d4:20:5f:4e:80:fe:59:7e:97:d9:52:45:
                    4e:b4:5c:55:7d:21:bd:db:72:57:eb:b8:ee:d0:ba:
                    0c:2a:a0:4a:4d:ee:ac:28:86:a3:56:52:d8:f6:42:
                    15:6d:e7:56:b8:b2:2c:92:3d:60:b0:05:24:75:25:
                    91:d0:c6:e7:e3:75:65:ae:e1:1f:a7:ad:5a:51:4e:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1C:C9:E1:6B:78:9A:68:47:CE:62:C9:5B:F8:42:59:DE:C3:20:6E
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33332d3333203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2938:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         e0:d6:aa:09:1a:24:4a:d2:31:1f:73:a1:55:88:3d:33:ac:88:
         1a:4f:f1:75:68:16:df:80:90:84:b8:c5:d1:a8:00:76:98:d5:
         e4:e9:3f:b0:69:fc:17:ff:1b:44:7e:06:6b:9c:58:b1:81:b2:
         98:0f:b6:e8:b7:d7:f8:cc:d6:6f:64:90:1e:bc:df:8a:f0:86:
         b0:b1:6d:9a:b2:0d:8a:15:fe:00:0b:73:b2:87:2a:8d:24:79:
         18:ec:a9:56:a9:f8:ef:cc:b8:ec:70:4f:30:76:a7:4b:9c:ed:
         df:79:74:05:e3:15:ac:e7:71:0a:17:ca:32:38:fd:db:f1:e5:
         85:d3:71:08:81:46:d0:4c:b8:40:c0:1a:a3:17:43:ef:82:90:
         85:7e:32:56:2f:e4:ef:53:63:60:90:a8:85:3b:10:4b:99:b3:
         a1:b0:ac:54:73:8a:17:66:40:be:a6:70:f5:fd:38:5d:2a:2d:
         a3:fa:04:34:e9:74:57:dd:8a:78:5f:23:22:df:5c:a5:e8:f8:
         7b:27:06:e9:62:c2:b8:90:81:2f:37:55:91:24:37:fc:a2:c7:
         00:96:11:b0:af:e0:74:46:98:26:05:d5:1d:88:ed:28:07:d2:
         00:ff:22:4e:2c:a4:e3:19:61:95:10:b7:82:9d:86:d4:b6:32:
         42:64:fa:26
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWvbPTcsosMTv6mx+K3CfBRtJUZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwRUZCNTU3NUZDNjFGNzY5MDhENUFDQjY1MzlEM0Y4
RkM1RjFDMDAeFw0yNTA2MjYxNzM2MTlaFw0yNjA2MjUxNzQxMTlaMDMxMTAvBgNV
BAMTKDQ5MUNDOUUxNkI3ODlBNjg0N0NFNjJDOTVCRjg0MjU5REVDMzIwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSrVv7j0eehXdz0mCXI4uOXNG
IUa5bqzsnFxF++BjrB0fW+bEwPCJnZ+XiqKpKSef7TkHmyxb7bBK8Q5hcLKW1ZzC
yLssW2jycEsdKjN358kNP4yHLVZHZuozCNFc+88QEToBnZECGDaUMRVDkPGrBT70
DR+dRHNhOATaUVwKHuXo8ZytSZ6A9AMZdaX9DuQMMpK93YigrBhsDDfHU5g9yF/k
1lV7nAWyd4Pns5TfZZ/PVg6aU9QgX06A/ll+l9lSRU60XFV9Ib3bclfruO7Qugwq
oEpN7qwohqNWUtj2QhVt51a4siySPWCwBSR1JZHQxufjdWWu4R+nrVpRTpSpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSRzJ4Wt4mmhHzmLJW/hCWd7DIG4wHwYDVR0j
BBgwFoAUng77VXX8YfdpCNWstlOdP4/F8cAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlRvNHFwcktIc3RQbUVtVVYyNUhBdHFGdVNZcEQ5QUJzdVphZ2tnU1hY
N3gvMC85RTBFRkI1NTc1RkM2MUY3NjkwOEQ1QUNCNjUzOUQzRjhGQzVGMUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMEVGQjU1NzVGQzYxRjc2
OTA4RDVBQ0I2NTM5RDNGOEZDNUYxQzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZUbzRxcHJLSHN0UG1FbVVWMjVIQXRxRnVTWXBEOUFCc3VaYWdrZ1NYWDd4LzAv
MzIzODMwMzQzYTMyMzkzMzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNDMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEKTiAMA0GCSqGSIb3DQEBCwUA
A4IBAQDg1qoJGiRK0jEfc6FViD0zrIgaT/F1aBbfgJCEuMXRqAB2mNXk6T+wafwX
/xtEfgZrnFixgbKYD7bot9f4zNZvZJAevN+K8IawsW2asg2KFf4AC3OyhyqNJHkY
7KlWqfjvzLjscE8wdqdLnO3feXQF4xWs53EKF8oyOP3b8eWF03EIgUbQTLhAwBqj
F0PvgpCFfjJWL+TvU2NgkKiFOxBLmbOhsKxUc4oXZkC+pnD1/ThdKi2j+gQ06XRX
3Yp4XyMi31yl6Ph7JwbpYsK4kIEvN1WRJDf8oscAlhGwr+B0RpgmBdUdiO0oB9IA
/yJOLKTjGWGVELeCnYbUtjJCZPom
-----END CERTIFICATE-----
Generated at Wed Jul 2 11:18:37 2025 by rpki-client