Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          R6rYvylZ3JIFDmaSIwfuuUfS9BKbelKQEVdMkeT17OI=
Subject key identifier:   61:05:AB:F9:71:C7:58:40:49:85:AD:DC:7E:F4:23:39:B7:D0:A6:EF
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       1892285DF52AAC9C6552F01191697D06FE64327F
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:38 +0000
ROA not before:           Wed 16 Apr 2025 15:00:38 +0000
ROA not after:            Wed 15 Apr 2026 15:05:38 +0000
asID:                     264422
IP address blocks:        2804:1e58:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:92:28:5d:f5:2a:ac:9c:65:52:f0:11:91:69:7d:06:fe:64:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:38 2025 GMT
            Not After : Apr 15 15:05:38 2026 GMT
        Subject: CN=6105ABF971C758404985ADDC7EF42339B7D0A6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:bc:3d:d1:e9:ed:3a:84:ca:7c:a5:11:ad:
                    87:0a:fa:99:dc:2b:c0:ff:f7:c3:7b:e8:b0:ac:b8:
                    8a:e3:5c:24:f4:5c:d9:6a:95:2f:76:ed:7b:cc:50:
                    a9:72:c6:de:ce:a7:aa:18:d1:a3:4b:b3:79:91:30:
                    ae:f4:19:82:55:61:85:af:f7:77:23:ad:f5:b1:84:
                    0e:8a:90:fb:ea:bb:ed:f1:cb:96:73:cc:7b:de:b2:
                    fc:b1:a9:1b:11:3b:4b:97:6b:d7:b6:a3:67:dc:65:
                    6f:84:6d:d2:4b:85:e5:39:3c:dc:2f:11:70:8e:b9:
                    20:d2:ac:cd:01:61:ab:92:dc:6a:e9:9b:dc:8f:78:
                    91:42:75:d3:fb:cb:66:e2:cc:e2:ba:05:59:8c:cd:
                    18:a0:98:da:60:17:bf:1a:26:a7:8a:1b:3d:16:5c:
                    da:e5:9c:69:38:ba:dd:8a:6e:68:6a:c4:a4:c7:88:
                    42:f6:74:c0:6b:e6:a7:05:83:26:20:91:89:16:78:
                    9f:e6:80:e9:f7:90:f1:b1:15:0f:85:72:37:0a:e4:
                    ab:86:7d:1b:76:bd:fd:59:4c:ca:5b:18:33:6c:5a:
                    1b:51:af:2c:0c:48:b3:d6:89:b5:9f:9f:c8:31:53:
                    f1:39:e2:4a:4a:47:a6:c2:b6:b2:23:3e:67:5e:5f:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:05:AB:F9:71:C7:58:40:49:85:AD:DC:7E:F4:23:39:B7:D0:A6:EF
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:90:6a:ac:ff:f4:40:8d:ec:04:17:b5:82:f1:9f:5f:95:
         c3:53:c2:5f:ef:c2:a4:36:05:dd:08:c2:11:e2:96:29:99:b9:
         0c:89:c9:11:6f:2e:2c:86:4c:14:51:7e:3d:90:25:fb:f3:36:
         26:d7:8c:b9:7c:64:fc:df:99:5a:7e:3e:1b:d5:22:e0:eb:66:
         71:66:33:37:9b:33:a8:a5:69:74:75:03:1e:a0:30:82:16:8d:
         90:d9:e5:f6:c3:42:f2:c5:c6:65:fc:9f:b8:e0:02:cd:13:c8:
         af:31:d4:b4:9f:32:c0:72:29:e0:f9:94:53:4d:03:c8:74:07:
         5b:8a:c4:74:d5:db:fb:f1:63:cb:88:74:a9:bd:5b:c1:2a:a6:
         b7:06:8b:c8:7c:3f:b1:ad:e4:3e:ed:be:eb:65:c8:0c:37:df:
         a4:44:9b:d6:80:e0:a8:b5:25:7a:b7:91:60:ad:f1:5a:ce:29:
         b3:fc:39:c9:4d:c7:8c:f9:1b:a1:87:6f:ea:d6:8b:41:aa:69:
         31:34:99:9d:72:b9:48:b4:5c:07:63:19:96:a5:c5:94:68:27:
         bb:bc:b8:31:26:5f:41:fa:8a:e3:33:e9:30:f8:70:f8:6f:23:
         90:ef:cc:b9:59:9c:fa:cc:10:e9:b0:6d:6d:f0:b8:10:7f:9b:
         58:37:a8:04
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGJIoXfUqrJxlUvARkWl9Bv5kMn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwMzhaFw0yNjA0MTUxNTA1MzhaMDMxMTAvBgNV
BAMTKDYxMDVBQkY5NzFDNzU4NDA0OTg1QUREQzdFRjQyMzM5QjdEMEE2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOrw90entOoTKfKURrYcK+pnc
K8D/98N76LCsuIrjXCT0XNlqlS927XvMUKlyxt7Op6oY0aNLs3mRMK70GYJVYYWv
93cjrfWxhA6KkPvqu+3xy5ZzzHvesvyxqRsRO0uXa9e2o2fcZW+EbdJLheU5PNwv
EXCOuSDSrM0BYauS3Grpm9yPeJFCddP7y2bizOK6BVmMzRigmNpgF78aJqeKGz0W
XNrlnGk4ut2KbmhqxKTHiEL2dMBr5qcFgyYgkYkWeJ/mgOn3kPGxFQ+FcjcK5KuG
fRt2vf1ZTMpbGDNsWhtRrywMSLPWibWfn8gxU/E54kpKR6bCtrIjPmdeX/n3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYQWr+XHHWEBJha3cfvQjObfQpu8wHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHliQMA0GCSqGSIb3DQEBCwUA
A4IBAQCcHZBqrP/0QI3sBBe1gvGfX5XDU8Jf78KkNgXdCMIR4pYpmbkMickRby4s
hkwUUX49kCX78zYm14y5fGT835lafj4b1SLg62ZxZjM3mzOopWl0dQMeoDCCFo2Q
2eX2w0LyxcZl/J+44ALNE8ivMdS0nzLAcing+ZRTTQPIdAdbisR01dv78WPLiHSp
vVvBKqa3BovIfD+xreQ+7b7rZcgMN9+kRJvWgOCotSV6t5FgrfFazimz/DnJTceM
+Ruhh2/q1otBqmkxNJmdcrlItFwHYxmWpcWUaCe7vLgxJl9B+orjM+kw+HD4byOQ
78y5WZz6zBDpsG1t8LgQf5tYN6gE
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net