Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a663030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a663030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          nOuR/jJ6k6Gex9BoJCETAaZiB2WspM+6PLPre7eKKTw=
Subject key identifier:   1B:12:8F:DD:84:A9:6C:10:3A:D7:A1:67:D7:B4:A6:82:37:11:33:48
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       0643B81C0DDC540AAA74899AF3075010DEA41924
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a663030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:09:43 +0000
ROA not before:           Tue 15 Apr 2025 19:04:43 +0000
ROA not after:            Tue 14 Apr 2026 19:09:43 +0000
asID:                     61923
IP address blocks:        2804:1834:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:b8:1c:0d:dc:54:0a:aa:74:89:9a:f3:07:50:10:de:a4:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:04:43 2025 GMT
            Not After : Apr 14 19:09:43 2026 GMT
        Subject: CN=1B128FDD84A96C103AD7A167D7B4A68237113348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:73:e6:bb:b0:a8:e7:1e:b1:60:8b:b3:dc:
                    f8:4c:9e:4d:53:0e:43:5a:5c:b7:03:d9:4f:19:aa:
                    ff:be:0f:df:83:b7:e0:56:5f:e9:4a:ac:05:38:80:
                    f7:10:0c:4c:6d:39:35:a6:b2:df:47:52:41:8f:72:
                    87:d2:04:91:54:b9:1b:87:33:c6:8b:80:52:0d:1e:
                    82:9c:96:5c:c9:c4:e3:16:8b:53:d3:18:01:03:36:
                    20:dc:be:87:16:8a:d5:e6:f3:17:fc:12:a8:70:8e:
                    15:c6:14:48:a2:e7:5d:39:05:e5:e4:55:b2:b8:f2:
                    c7:33:7c:45:94:67:cd:81:db:c4:67:19:50:cc:27:
                    1c:ac:b5:6e:b3:3b:3a:0a:53:9d:43:da:91:02:54:
                    d2:b5:aa:bb:1e:35:02:f5:03:3c:af:89:02:eb:c2:
                    da:07:02:c6:10:9e:16:5a:24:fb:71:32:d6:be:79:
                    e2:62:92:a9:53:03:cb:f9:dc:89:19:4a:4a:31:87:
                    c7:59:57:43:83:d5:98:46:6b:30:33:6a:eb:46:77:
                    95:73:05:0c:16:06:1a:e8:a8:16:72:28:99:cd:23:
                    e8:e1:05:57:86:86:0c:93:8f:54:28:df:19:e9:81:
                    e2:05:e3:23:d9:96:a9:e6:6e:59:c1:49:1c:8a:29:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:12:8F:DD:84:A9:6C:10:3A:D7:A1:67:D7:B4:A6:82:37:11:33:48
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a663030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:06:dd:1c:32:33:27:88:75:0b:f5:b2:a4:de:d9:3d:88:
         95:9c:1a:0e:8c:2d:c7:56:4f:a7:d0:7e:de:74:af:fe:44:5a:
         db:c0:4f:c6:5e:28:7b:34:d9:70:d2:22:62:ce:d5:dc:5e:0e:
         23:7a:f4:d0:e5:00:49:3d:9f:db:dd:3e:76:12:d1:63:8d:dc:
         5b:86:f8:db:7a:37:c3:94:8a:78:97:b3:ca:78:d1:89:d8:86:
         90:9b:8c:cb:2c:42:e3:9b:2b:8e:de:4e:16:dc:40:fe:b8:c6:
         83:d4:a4:d0:d8:80:75:1c:f1:b9:e5:21:5f:ed:c8:90:e7:b3:
         9a:5c:71:f0:ab:92:48:c8:30:c6:73:4b:ea:31:f0:9d:6b:2f:
         5d:47:f9:1a:9a:03:e8:29:07:fd:83:6d:bd:34:7e:6d:08:1e:
         aa:5a:f4:09:c8:b5:4c:45:2a:42:86:31:05:5a:3f:7b:57:ee:
         d9:e5:b0:a7:ba:b7:14:b6:c4:01:18:ad:f2:4f:0d:e2:42:b0:
         0a:55:f6:a6:ff:fe:17:f0:2e:66:85:59:68:7c:93:db:89:7e:
         50:de:3c:d5:af:32:ae:b8:fc:4c:6d:0e:99:2e:01:ac:cf:c7:
         33:36:99:20:36:bd:84:f0:f4:60:e3:e6:de:f4:54:c8:e5:de:
         81:9f:1e:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBkO4HA3cVAqqdIma8wdQEN6kGSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTA0MTUxOTA0NDNaFw0yNjA0MTQxOTA5NDNaMDMxMTAvBgNV
BAMTKDFCMTI4RkREODRBOTZDMTAzQUQ3QTE2N0Q3QjRBNjgyMzcxMTMzNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOHPmu7Co5x6xYIuz3PhMnk1T
DkNaXLcD2U8Zqv++D9+Dt+BWX+lKrAU4gPcQDExtOTWmst9HUkGPcofSBJFUuRuH
M8aLgFINHoKcllzJxOMWi1PTGAEDNiDcvocWitXm8xf8EqhwjhXGFEii5105BeXk
VbK48sczfEWUZ82B28RnGVDMJxystW6zOzoKU51D2pECVNK1qrseNQL1AzyviQLr
wtoHAsYQnhZaJPtxMta+eeJikqlTA8v53IkZSkoxh8dZV0OD1ZhGazAzautGd5Vz
BQwWBhroqBZyKJnNI+jhBVeGhgyTj1Qo3xnpgeIF4yPZlqnmblnBSRyKKS8rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGxKP3YSpbBA616Fn17SmgjcRM0gwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzODMwMzQzYTMxMzgzMzM0M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzOTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBBg08DANBgkqhkiG9w0BAQsFAAOC
AQEAfjUG3RwyMyeIdQv1sqTe2T2IlZwaDowtx1ZPp9B+3nSv/kRa28BPxl4oezTZ
cNIiYs7V3F4OI3r00OUAST2f290+dhLRY43cW4b423o3w5SKeJezynjRidiGkJuM
yyxC45srjt5OFtxA/rjGg9Sk0NiAdRzxueUhX+3IkOezmlxx8KuSSMgwxnNL6jHw
nWsvXUf5GpoD6CkH/YNtvTR+bQgeqlr0Cci1TEUqQoYxBVo/e1fu2eWwp7q3FLbE
ARit8k8N4kKwClX2pv/+F/AuZoVZaHyT24l+UN481a8yrrj8TG0OmS4BrM/HMzaZ
IDa9hPD0YOPm3vRUyOXegZ8eyg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net