Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
File:                     323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          GMXGOWYatqYZ/uA/CG+b7E1ImffA2IuJ7EWHGWRuIWY=
Subject key identifier:   85:9A:4D:1D:ED:F4:99:60:5B:05:A0:F7:67:B0:68:E3:49:6C:F3:81
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       67D74764D4F1C403EC5E705A10ACE92A4D6EEF45
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:38 +0000
ROA not before:           Sat 03 May 2025 00:15:38 +0000
ROA not after:            Sat 02 May 2026 00:20:38 +0000
asID:                     263612
IP address blocks:        2804:ffc:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 04:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d7:47:64:d4:f1:c4:03:ec:5e:70:5a:10:ac:e9:2a:4d:6e:ef:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:38 2025 GMT
            Not After : May  2 00:20:38 2026 GMT
        Subject: CN=859A4D1DEDF499605B05A0F767B068E3496CF381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:0f:ca:e4:c8:35:4c:d2:91:60:29:db:05:
                    49:8d:8a:f4:8b:77:24:23:67:cb:d2:59:6e:bc:13:
                    e5:aa:c2:9b:6e:67:69:91:eb:fb:af:18:8f:82:b6:
                    27:69:e8:7d:c9:f4:b7:0a:32:3e:1f:53:9d:67:3d:
                    ed:49:5b:41:2e:b9:1f:87:c2:d4:2b:a8:6b:75:a9:
                    d2:72:e2:51:c5:cf:b4:88:b6:57:9d:df:eb:df:67:
                    af:1f:c4:92:c7:a5:c6:dc:5a:ce:be:0a:b5:11:a0:
                    94:49:63:bf:ee:ea:55:d7:39:aa:0d:be:8e:58:66:
                    09:5b:91:be:87:17:f7:2c:4e:67:ad:32:8e:f7:53:
                    f6:80:00:7d:28:42:6a:b3:8f:e1:30:b8:d0:5f:d6:
                    20:2e:3d:78:35:58:60:a7:3b:6b:b3:a9:28:b8:cb:
                    cd:2d:12:08:84:f0:61:af:1b:d6:2d:73:64:30:f5:
                    ae:c6:93:60:37:36:05:52:61:51:a4:4f:17:e2:f5:
                    76:d1:21:a4:94:d0:9f:1e:e9:53:e3:de:03:e3:0e:
                    79:2d:da:51:22:41:56:88:fb:02:6b:63:db:74:82:
                    04:78:ba:04:30:e5:57:15:74:67:45:48:67:ba:2c:
                    b3:03:b5:ae:4e:cc:60:39:fd:c5:86:89:52:f8:77:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9A:4D:1D:ED:F4:99:60:5B:05:A0:F7:67:B0:68:E3:49:6C:F3:81
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:d7:25:e3:55:74:be:af:7b:8a:a8:1f:45:64:d6:82:b5:
         26:9d:29:90:b5:57:c4:77:58:2e:47:c8:b4:e0:84:32:37:d7:
         35:4d:f6:6f:8f:d3:0b:75:23:6b:1a:b0:75:7d:28:41:1f:42:
         79:a5:7f:e6:eb:6b:c4:57:1c:71:c8:8b:1a:15:5c:62:f9:f4:
         c2:5e:f5:9c:e1:5a:11:05:58:62:d1:04:de:df:ed:8b:23:7d:
         61:8f:75:a5:9c:cb:0b:02:0a:2f:75:32:ad:97:d6:4f:2b:c3:
         ad:b7:51:a1:c7:dd:b7:7d:6f:5e:8a:e2:84:c0:1a:3d:47:18:
         64:17:5b:df:b4:19:02:de:18:16:4b:ff:3d:8c:5e:60:db:31:
         f4:84:fd:05:1d:e2:7f:e0:e7:39:42:78:9b:5b:77:1f:45:4f:
         ed:4f:d6:02:7e:28:59:f0:47:a9:54:5d:b1:bb:08:37:0a:b4:
         24:e6:e0:3a:91:e3:d6:8d:fa:a8:8f:2f:0b:93:e5:ab:d6:f7:
         ea:19:76:07:1d:fd:e1:dc:bb:12:a5:5e:68:51:44:e8:53:3b:
         12:05:c7:a6:00:34:c4:b9:ca:1b:25:91:44:c1:f5:e2:b4:04:
         7d:36:cc:14:37:4b:61:c3:e6:35:f8:4b:2a:5d:89:cc:5d:ce:
         e9:5e:2b:25
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUZ9dHZNTxxAPsXnBaEKzpKk1u70UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNTA1MDMwMDE1MzhaFw0yNjA1MDIwMDIwMzhaMDMxMTAvBgNV
BAMTKDg1OUE0RDFERURGNDk5NjA1QjA1QTBGNzY3QjA2OEUzNDk2Q0YzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcw/K5Mg1TNKRYCnbBUmNivSL
dyQjZ8vSWW68E+WqwptuZ2mR6/uvGI+Ctidp6H3J9LcKMj4fU51nPe1JW0EuuR+H
wtQrqGt1qdJy4lHFz7SItled3+vfZ68fxJLHpcbcWs6+CrURoJRJY7/u6lXXOaoN
vo5YZglbkb6HF/csTmetMo73U/aAAH0oQmqzj+EwuNBf1iAuPXg1WGCnO2uzqSi4
y80tEgiE8GGvG9Ytc2Qw9a7Gk2A3NgVSYVGkTxfi9XbRIaSU0J8e6VPj3gPjDnkt
2lEiQVaI+wJrY9t0ggR4ugQw5VcVdGdFSGe6LLMDta5OzGA5/cWGiVL4dyAzAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUhZpNHe30mWBbBaD3Z7Bo40ls84EwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzIzODMwMzQzYTY2NjY2MzNhNjUzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzMzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBA/84AEwDQYJKoZIhvcNAQELBQAD
ggEBAHsB1yXjVXS+r3uKqB9FZNaCtSadKZC1V8R3WC5HyLTghDI31zVN9m+P0wt1
I2sasHV9KEEfQnmlf+bra8RXHHHIixoVXGL59MJe9ZzhWhEFWGLRBN7f7YsjfWGP
daWcywsCCi91Mq2X1k8rw623UaHH3bd9b16K4oTAGj1HGGQXW9+0GQLeGBZL/z2M
XmDbMfSE/QUd4n/g5zlCeJtbdx9FT+1P1gJ+KFnwR6lUXbG7CDcKtCTm4DqR49aN
+qiPLwuT5avW9+oZdgcd/eHcuxKlXmhRROhTOxIFx6YANMS5yhslkUTB9eK0BH02
zBQ3S2HD5jX4SypdicxdzuleKyU=
-----END CERTIFICATE-----
Generated at Fri May 9 20:43:21 2025 by rpki-client