Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
File:                     323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa (raw, json)
Hash identifier:          1wE+8g13h3WKzkYZH2MGfO5UAXBhvwtMorMEwgnmEf8=
Subject key identifier:   42:B4:E0:7C:C6:BE:91:F4:93:F9:7F:CE:68:74:08:95:1D:B3:5C:89
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       38426FE97BBCF80C4A872399A6C5E64DD4CCF5A9
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        2804:688c:c000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:6f:e9:7b:bc:f8:0c:4a:87:23:99:a6:c5:e6:4d:d4:cc:f5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0f:d9:7a:c0:b3:ac:58:29:4c:57:ed:ca:e2:
                    4e:4e:b5:47:79:89:7b:3c:b5:eb:4d:46:2d:7b:b0:
                    4c:dc:51:a6:77:27:98:ed:47:09:d6:2c:5d:25:1a:
                    4b:e8:f9:be:ca:e1:d4:74:6f:57:28:ee:73:07:ec:
                    54:8e:53:17:6d:1e:dc:70:0c:08:78:87:42:ea:2e:
                    d5:37:0f:a5:7c:52:2e:d8:df:6c:11:c9:44:88:90:
                    0e:71:fb:2e:32:3e:e3:1e:0a:e3:dd:93:10:f8:06:
                    ce:16:f7:9c:b1:6c:f4:f2:90:28:73:b4:77:20:5b:
                    e2:79:40:65:46:11:3c:2e:e7:dd:a8:d9:62:47:02:
                    35:f5:88:a5:5f:41:ad:a6:8b:16:63:9a:64:ee:98:
                    38:69:64:0f:25:e3:57:ae:db:90:96:a0:1a:c9:a6:
                    92:29:f2:49:ec:02:07:41:bc:d7:3c:b7:07:24:f7:
                    3c:8f:b4:20:f1:11:58:1e:01:14:e5:d2:8a:dc:a6:
                    d3:4a:ce:61:63:17:5c:38:7a:5a:f1:5e:7f:cc:2e:
                    88:07:4b:35:33:55:40:ec:45:18:95:1f:fe:63:2d:
                    1a:e2:b5:6e:1e:2a:e2:6e:a1:06:d3:dc:3f:c7:ec:
                    7c:c2:27:07:33:c3:b6:50:cd:ac:c9:8d:4f:70:c4:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:E0:7C:C6:BE:91:F4:93:F9:7F:CE:68:74:08:95:1D:B3:5C:89
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/323830343a363838633a633030303a3a2f34302d3430203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:688c:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:06:15:2a:63:3d:b0:d1:85:df:06:b3:9e:49:50:ba:22:c6:
         5e:11:9a:53:b9:a6:2d:d6:29:ab:ba:59:49:75:8a:b9:5c:43:
         fe:8b:fa:e3:da:3c:79:f6:58:dd:c9:29:d8:6d:16:18:3e:f3:
         14:71:70:67:bf:5f:b3:23:fb:d8:99:56:1d:00:b3:af:ca:56:
         20:8b:30:51:4f:9b:d5:ee:d1:ab:7f:71:6b:16:84:3d:f4:54:
         63:9f:0d:37:57:83:e1:c8:31:a0:f9:c8:ec:dc:d6:fb:0b:e9:
         f0:4c:43:59:0e:db:40:70:19:63:8e:cd:21:ef:64:51:65:82:
         14:3d:0e:1e:9d:08:48:1f:bc:09:c8:ea:32:05:bc:2d:61:71:
         3a:a9:3c:5b:75:7c:94:21:d4:63:8c:9d:ae:80:3f:04:41:57:
         b6:60:b1:d4:3a:27:24:83:93:af:d0:5e:c4:4d:8b:dd:28:48:
         f9:b6:01:dc:f8:e9:00:99:9b:f5:5e:04:cb:4c:38:b4:51:ad:
         04:10:dc:17:12:1d:ea:b0:64:29:dd:6f:ef:91:47:19:62:89:
         50:b6:ab:f1:1e:83:1d:25:8a:02:5e:6d:99:3b:a4:6d:f1:5d:
         bd:23:4d:c0:cb:ba:56:a4:8b:8f:8a:51:ef:51:14:4e:79:49:
         44:12:0c:f1
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUOEJv6Xu8+AxKhyOZpsXmTdTM9akwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM3M0MxMzQwODY4MkUzQkE0ODY1MkE5QkU1OTBDNUU0
RTRBMENGQTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjUwRkQ5N0FDMEIzQUM1ODI5
NEM1N0VEQ0FFMjRFNEVCNTQ3Nzk4OTdCM0NCNUVCNEQ0NjJEN0JCMDRDREM1MUE2
NzcyNzk4RUQ0NzA5RDYyQzVEMjUxQTRCRThGOUJFQ0FFMUQ0NzQ2RjU3MjhFRTcz
MDdFQzU0OEU1MzE3NkQxRURDNzAwQzA4Nzg4NzQyRUEyRUQ1MzcwRkE1N0M1MjJF
RDhERjZDMTFDOTQ0ODg5MDBFNzFGQjJFMzIzRUUzMUUwQUUzREQ5MzEwRjgwNkNF
MTZGNzlDQjE2Q0Y0RjI5MDI4NzNCNDc3MjA1QkUyNzk0MDY1NDYxMTNDMkVFN0RE
QThEOTYyNDcwMjM1RjU4OEE1NUY0MUFEQTY4QjE2NjM5QTY0RUU5ODM4Njk2NDBG
MjVFMzU3QUVEQjkwOTZBMDFBQzlBNjkyMjlGMjQ5RUMwMjA3NDFCQ0Q3M0NCNzA3
MjRGNzNDOEZCNDIwRjExMTU4MUUwMTE0RTVEMjhBRENBNkQzNEFDRTYxNjMxNzVD
Mzg3QTVBRjE1RTdGQ0MyRTg4MDc0QjM1MzM1NTQwRUM0NTE4OTUxRkZFNjMyRDFB
RTJCNTZFMUUyQUUyNkVBMTA2RDNEQzNGQzdFQzdDQzIyNzA3MzNDM0I2NTBDREFD
Qzk4RDRGNzBDNDU2QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9Q/ZesCzrFgpTFftyuJOTrVHeYl7PLXrTUYte7BM3FGmdyeY7UcJ
1ixdJRpL6Pm+yuHUdG9XKO5zB+xUjlMXbR7ccAwIeIdC6i7VNw+lfFIu2N9sEclE
iJAOcfsuMj7jHgrj3ZMQ+AbOFvecsWz08pAoc7R3IFvieUBlRhE8LufdqNliRwI1
9YilX0GtposWY5pk7pg4aWQPJeNXrtuQlqAayaaSKfJJ7AIHQbzXPLcHJPc8j7Qg
8RFYHgEU5dKK3KbTSs5hYxdcOHpa8V5/zC6IB0s1M1VA7EUYlR/+Yy0a4rVuHiri
bqEG09w/x+x8wicHM8O2UM2syY1PcMRWqwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FEK04HzGvpH0k/l/zmh0CJUds1yJMB8GA1UdIwQYMBaAFINzwTQIaC47pIZSqb5Z
DF5OSgz6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyY0JyUXB6RnVUZkVr
SFZGRnFoTWt2VVl6QTNSaFNWVG10MnN2TUQyS3F5LzEvODM3M0MxMzQwODY4MkUz
QkE0ODY1MkE5QkU1OTBDNUU0RTRBMENGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84MzczQzEzNDA4NjgyRTNCQTQ4NjUyQTlCRTU5MEM1RTRFNEEw
Q0ZBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcmNCclFwekZ1VGZFa0hWRkZx
aE1rdlVZekEzUmhTVlRtdDJzdk1EMktxeS8xLzMyMzgzMDM0M2EzNjM4Mzg2MzNh
NjMzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzkzNzMwMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBGiMwDANBgkqhkiG9w0BAQsFAAOCAQEARgYVKmM9sNGF3waznklQ
uiLGXhGaU7mmLdYpq7pZSXWKuVxD/ov649o8efZY3ckp2G0WGD7zFHFwZ79fsyP7
2JlWHQCzr8pWIIswUU+b1e7Rq39xaxaEPfRUY58NN1eD4cgxoPnI7NzW+wvp8ExD
WQ7bQHAZY47NIe9kUWWCFD0OHp0ISB+8CcjqMgW8LWFxOqk8W3V8lCHUY4ydroA/
BEFXtmCx1DonJIOTr9BexE2L3ShI+bYB3PjpAJmb9V4Ey0w4tFGtBBDcFxId6rBk
Kd1v75FHGWKJULar8R6DHSWKAl5tmTukbfFdvSNNwMu6VqSLj4pR71EUTnlJRBIM
8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net