Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          QooAc9M7uOyoCBnr9+Z2EHXIkUO5A5FhogG40uKXVJg=
Subject key identifier:   AD:97:36:AC:8D:37:9F:FB:6E:CD:B0:01:FA:1A:18:10:EC:7C:01:8C
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       33EB62EFB5B42C1BD5102E2559473BB6066DCBC4
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:46 +0000
ROA not before:           Sat 03 May 2025 00:15:46 +0000
ROA not after:            Sat 02 May 2026 00:20:46 +0000
asID:                     263612
IP address blocks:        2804:ffc:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 20:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:eb:62:ef:b5:b4:2c:1b:d5:10:2e:25:59:47:3b:b6:06:6d:cb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:46 2025 GMT
            Not After : May  2 00:20:46 2026 GMT
        Subject: CN=AD9736AC8D379FFB6ECDB001FA1A1810EC7C018C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:de:3b:a1:64:8f:de:29:95:6b:2b:88:c1:
                    15:5c:09:76:d1:53:5a:ea:19:fb:af:93:0c:5b:ed:
                    ee:41:3f:9c:b0:c4:76:67:c5:b1:3f:c2:36:e2:76:
                    c6:78:6a:ff:bd:37:84:94:28:02:00:5e:6d:b4:5d:
                    25:20:53:ce:32:44:dc:f1:80:08:93:ef:76:53:60:
                    81:b8:9a:b0:77:db:4c:05:a9:8f:5f:93:a0:8e:83:
                    62:4b:b0:2f:18:b2:62:f9:2c:cf:1a:ed:ad:98:c7:
                    2b:35:03:03:3c:f7:43:11:f1:b0:2e:f5:a7:dd:17:
                    64:19:1f:0c:45:2f:8e:bf:94:fd:9f:f8:33:34:71:
                    66:e2:e0:c4:a4:bf:fc:e3:ce:36:f3:ae:bb:5c:90:
                    47:8e:de:fc:d9:e2:cb:1d:22:4a:da:da:91:3d:cb:
                    e3:cb:e4:49:09:9a:a9:0c:11:b8:a1:0c:21:87:10:
                    63:5d:c7:3d:19:36:ce:dc:10:e4:9d:70:71:00:10:
                    18:90:c1:33:22:1a:8a:b4:6c:50:46:9c:b1:9f:c2:
                    3c:41:94:f3:44:a1:29:25:3f:c7:6d:d2:a9:63:6b:
                    ee:c6:be:bd:5f:3b:62:46:46:28:32:dd:f8:81:5f:
                    48:13:2b:5a:ca:bc:27:fe:01:9f:22:e5:07:f9:69:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:36:AC:8D:37:9F:FB:6E:CD:B0:01:FA:1A:18:10:EC:7C:01:8C
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653230303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:6b:f7:f2:ec:23:5a:c4:11:8c:d8:1f:14:2b:d0:82:bb:27:
         d8:63:f1:b2:25:2a:fd:b6:c9:ed:12:d2:45:a5:c6:a0:89:d8:
         4c:e2:7a:ae:44:49:d8:6d:a8:32:af:2a:c7:a7:8c:70:a6:d5:
         55:8f:b8:12:ba:3b:e8:2b:70:49:e8:e4:9c:86:9e:58:8d:0a:
         e2:a7:3d:54:57:15:09:c7:af:eb:c3:36:f5:59:6e:1f:39:77:
         fa:a2:f1:0f:72:d2:51:29:9e:28:b6:99:8a:83:55:34:f7:42:
         a3:c7:82:4e:ec:d9:1f:df:49:36:83:ca:21:a6:2d:6c:e4:44:
         27:cd:76:c7:d1:ba:e1:7c:97:49:fd:0d:55:24:28:90:fc:21:
         43:e1:79:55:ae:f4:db:f8:ed:78:97:a7:14:2d:b6:35:ea:59:
         05:69:bd:bd:58:03:6e:31:6b:c0:5e:25:ff:71:ff:58:f9:77:
         98:43:df:90:f1:31:9b:38:e5:5d:96:11:bc:c6:a8:4d:4b:a5:
         b0:af:67:0e:a3:d4:80:56:e4:20:81:91:2a:db:1f:6d:29:60:
         50:dc:15:21:04:bf:85:b4:4b:0a:bb:75:ea:ee:44:58:7e:fa:
         eb:44:f9:0b:ac:f5:d5:a3:46:a5:8b:8a:77:70:77:45:b7:20:
         7b:3c:86:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUM+ti77W0LBvVEC4lWUc7tgZty8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNTA1MDMwMDE1NDZaFw0yNjA1MDIwMDIwNDZaMDMxMTAvBgNV
BAMTKEFEOTczNkFDOEQzNzlGRkI2RUNEQjAwMUZBMUExODEwRUM3QzAxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHd47oWSP3imVayuIwRVcCXbR
U1rqGfuvkwxb7e5BP5ywxHZnxbE/wjbidsZ4av+9N4SUKAIAXm20XSUgU84yRNzx
gAiT73ZTYIG4mrB320wFqY9fk6COg2JLsC8YsmL5LM8a7a2Yxys1AwM890MR8bAu
9afdF2QZHwxFL46/lP2f+DM0cWbi4MSkv/zjzjbzrrtckEeO3vzZ4ssdIkra2pE9
y+PL5EkJmqkMEbihDCGHEGNdxz0ZNs7cEOSdcHEAEBiQwTMiGoq0bFBGnLGfwjxB
lPNEoSklP8dt0qlja+7Gvr1fO2JGRigy3fiBX0gTK1rKvCf+AZ8i5Qf5aYqRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrZc2rI03n/tuzbAB+hoYEOx8AYwwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzIzODMwMzQzYTY2NjY2MzNhNjUzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBA/84jANBgkqhkiG9w0BAQsFAAOC
AQEAv2v38uwjWsQRjNgfFCvQgrsn2GPxsiUq/bbJ7RLSRaXGoInYTOJ6rkRJ2G2o
Mq8qx6eMcKbVVY+4Ero76CtwSejknIaeWI0K4qc9VFcVCcev68M29VluHzl3+qLx
D3LSUSmeKLaZioNVNPdCo8eCTuzZH99JNoPKIaYtbOREJ812x9G64XyXSf0NVSQo
kPwhQ+F5Va702/jteJenFC22NepZBWm9vVgDbjFrwF4l/3H/WPl3mEPfkPExmzjl
XZYRvMaoTUulsK9nDqPUgFbkIIGRKtsfbSlgUNwVIQS/hbRLCrt16u5EWH7660T5
C6z11aNGpYuKd3B3RbcgezyGIw==
-----END CERTIFICATE-----
Generated at Fri May 9 21:47:37 2025 by rpki-client