Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a613030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a613030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          1sIy9+sARwwuzjW6ntfKAx7DYIGbmIQywblP0IzHt9s=
Subject key identifier:   CF:0E:66:BA:7C:14:E6:B6:09:D1:03:FB:0D:D0:F6:95:9E:91:22:F9
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7A18770C417855F9FEDA1B28A1E1F0A3135C524E
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a613030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:08:58 +0000
ROA not before:           Tue 15 Apr 2025 19:03:58 +0000
ROA not after:            Tue 14 Apr 2026 19:08:58 +0000
asID:                     61923
IP address blocks:        2804:1834:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:18:77:0c:41:78:55:f9:fe:da:1b:28:a1:e1:f0:a3:13:5c:52:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:03:58 2025 GMT
            Not After : Apr 14 19:08:58 2026 GMT
        Subject: CN=CF0E66BA7C14E6B609D103FB0DD0F6959E9122F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:82:6a:34:6e:86:11:f0:14:fd:b9:95:f5:
                    f2:dd:a4:8f:0e:65:b7:53:37:de:1a:c6:79:9a:bc:
                    ba:c3:56:e4:01:9b:7c:71:ce:1a:33:61:50:94:69:
                    b5:4e:bb:ee:de:0a:73:fc:30:1f:59:0b:83:6c:99:
                    c7:a6:17:a0:00:cb:fd:fc:6e:34:6d:5b:c6:ee:42:
                    79:a6:89:81:62:42:48:f3:ae:e6:89:78:e2:7e:4d:
                    72:5b:37:d4:30:eb:af:0e:f3:38:4b:13:75:6d:df:
                    cf:24:9a:49:b2:e5:53:32:6b:0d:30:92:30:b4:87:
                    24:03:f3:00:75:c4:52:8a:3d:13:b7:48:92:7f:45:
                    84:76:69:7b:26:99:d6:6d:0a:91:ef:d5:fa:fd:bb:
                    ea:bd:a8:88:ab:bb:a7:11:8a:6c:11:f6:e1:47:7d:
                    d7:91:84:9c:e0:f9:13:9d:22:ef:76:de:63:3d:b8:
                    e8:e2:33:6b:0c:e0:1a:81:aa:d5:40:58:d5:76:07:
                    a5:52:90:00:0a:ca:88:71:78:1c:7b:f2:fd:76:21:
                    cb:8c:be:47:82:db:c0:7f:28:d9:c4:3c:02:68:fd:
                    e7:a3:cb:a0:3e:3d:7b:60:54:9f:1f:83:c4:f7:78:
                    a2:d7:e9:33:b2:eb:85:f5:15:50:b3:98:82:69:3f:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:66:BA:7C:14:E6:B6:09:D1:03:FB:0D:D0:F6:95:9E:91:22:F9
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a613030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:1e:f8:de:40:6a:7a:c8:e8:30:81:92:c5:71:34:7a:e7:9a:
         0f:68:8a:70:6d:e9:63:9a:e1:4b:52:09:2f:98:8c:4e:44:64:
         19:42:d1:e3:99:85:71:b8:8c:1f:ba:ab:22:fb:80:8f:10:18:
         a4:b6:19:50:bf:b1:2b:ee:cd:91:88:93:86:ea:a8:b8:a7:f5:
         71:cc:9b:2b:cd:12:d5:ea:9e:34:c0:67:fc:14:34:d3:3d:4b:
         7d:6a:b1:0e:dc:2d:81:2f:9e:21:f7:5f:b1:00:55:27:85:62:
         94:38:02:8c:d2:63:f5:1b:5b:0f:63:22:da:bc:74:62:3f:94:
         34:bf:46:ed:89:f4:fe:4c:68:f7:f8:bc:33:6d:04:12:e8:04:
         60:c2:fe:ea:ba:7b:82:bc:be:34:5b:44:89:d1:46:db:c2:a3:
         cf:ce:5e:b4:1f:22:61:53:0e:25:c4:8c:0b:dd:a2:b2:a9:13:
         84:fe:d5:04:4b:50:1d:a9:91:7a:68:1d:af:e5:ba:16:e3:fb:
         48:94:17:d3:4a:3e:a5:e0:36:13:64:28:9e:16:37:65:a3:a4:
         73:cb:00:87:a3:4f:a6:64:31:40:5e:93:11:ae:3d:31:b0:72:
         26:2d:e7:90:8c:77:bc:6b:0b:af:b1:ad:04:25:f1:54:c1:3f:
         2f:d4:52:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUehh3DEF4Vfn+2hsooeHwoxNcUk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTA0MTUxOTAzNThaFw0yNjA0MTQxOTA4NThaMDMxMTAvBgNV
BAMTKENGMEU2NkJBN0MxNEU2QjYwOUQxMDNGQjBERDBGNjk1OUU5MTIyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8oJqNG6GEfAU/bmV9fLdpI8O
ZbdTN94axnmavLrDVuQBm3xxzhozYVCUabVOu+7eCnP8MB9ZC4NsmcemF6AAy/38
bjRtW8buQnmmiYFiQkjzruaJeOJ+TXJbN9Qw668O8zhLE3Vt388kmkmy5VMyaw0w
kjC0hyQD8wB1xFKKPRO3SJJ/RYR2aXsmmdZtCpHv1fr9u+q9qIiru6cRimwR9uFH
fdeRhJzg+ROdIu923mM9uOjiM2sM4BqBqtVAWNV2B6VSkAAKyohxeBx78v12IcuM
vkeC28B/KNnEPAJo/eejy6A+PXtgVJ8fg8T3eKLX6TOy64X1FVCzmIJpPwI9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzw5munwU5rYJ0QP7DdD2lZ6RIvkwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzODMwMzQzYTMxMzgzMzM0M2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzOTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBg0oDANBgkqhkiG9w0BAQsFAAOC
AQEAFx743kBqesjoMIGSxXE0eueaD2iKcG3pY5rhS1IJL5iMTkRkGULR45mFcbiM
H7qrIvuAjxAYpLYZUL+xK+7NkYiThuqouKf1ccybK80S1eqeNMBn/BQ00z1LfWqx
DtwtgS+eIfdfsQBVJ4VilDgCjNJj9RtbD2Mi2rx0Yj+UNL9G7Yn0/kxo9/i8M20E
EugEYML+6rp7gry+NFtEidFG28Kjz85etB8iYVMOJcSMC92isqkThP7VBEtQHamR
emgdr+W6FuP7SJQX00o+peA2E2QonhY3ZaOkc8sAh6NPpmQxQF6TEa49MbByJi3n
kIx3vGsLr7GtBCXxVME/L9RS6w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net