Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a383030303a3a2f33362d3336203d3e20323638353038.roa
File:                     323830343a353234383a383030303a3a2f33362d3336203d3e20323638353038.roa (raw, json)
Hash identifier:          7LcG7YveUHXfTMZvGb8b5P4T8pjuqeMoeefnjtVf9yY=
Subject key identifier:   52:9D:96:2C:AF:E0:D0:C9:9F:B4:6A:26:38:B1:03:F9:E1:DD:BA:74
Certificate issuer:       /CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
Certificate serial:       52A1C8AE9EBACC8D0840BE2BA47795207814E179
Authority key identifier: 18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a383030303a3a2f33362d3336203d3e20323638353038.roa
Signing time:             Sat 15 Mar 2025 16:57:45 +0000
ROA not before:           Sat 15 Mar 2025 16:52:45 +0000
ROA not after:            Sat 14 Mar 2026 16:57:45 +0000
asID:                     268508
IP address blocks:        2804:5248:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 07:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a1:c8:ae:9e:ba:cc:8d:08:40:be:2b:a4:77:95:20:78:14:e1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
        Validity
            Not Before: Mar 15 16:52:45 2025 GMT
            Not After : Mar 14 16:57:45 2026 GMT
        Subject: CN=529D962CAFE0D0C99FB46A2638B103F9E1DDBA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:a9:8e:69:cd:a9:c2:09:34:95:53:e7:ff:
                    52:f0:91:b6:d8:64:5c:52:c4:43:58:f5:43:b5:ee:
                    10:32:7a:c9:12:7a:0a:c0:86:c7:a0:16:23:60:c7:
                    19:09:46:7c:78:18:88:b8:d2:31:30:86:4c:da:80:
                    b5:9a:5d:21:f4:0c:cf:b9:f9:ae:e4:ee:d7:1d:35:
                    f1:53:04:8c:4a:24:6e:50:2e:39:0f:e3:28:65:a3:
                    be:90:a6:99:82:bf:79:9d:49:04:40:fa:85:78:cd:
                    51:19:b6:82:84:9b:7b:51:7e:5b:dc:cd:02:3a:ca:
                    55:81:8f:ba:d7:80:bb:2a:db:91:cd:7f:e9:80:d2:
                    f7:7c:c1:b6:56:ad:26:6f:61:a1:a5:8e:d0:d1:8f:
                    4e:79:65:43:d5:af:24:c0:b3:0e:7e:cf:4a:f3:bb:
                    5a:da:9c:45:94:2f:5f:f9:e9:2f:8e:2e:3e:53:fc:
                    a4:dc:4e:e2:4b:9a:05:17:1c:9e:8b:c5:cc:54:43:
                    db:d6:d0:fb:76:8a:2c:b1:0d:e2:83:d1:6c:c3:9f:
                    22:f0:a4:95:33:cc:1a:bf:46:63:66:65:75:4a:4b:
                    db:1f:42:82:d1:9b:4b:45:9a:ac:c6:49:26:38:cc:
                    71:70:44:f9:2d:81:77:58:07:c4:b7:12:ff:63:7e:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:96:2C:AF:E0:D0:C9:9F:B4:6A:26:38:B1:03:F9:E1:DD:BA:74
            X509v3 Authority Key Identifier:
                keyid:18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a383030303a3a2f33362d3336203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5248:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:59:74:c7:7a:aa:d0:fd:e9:ca:38:ec:09:05:f3:42:f8:2e:
         4b:2e:21:11:0c:0a:39:13:d8:c0:21:3a:09:ed:33:07:e4:86:
         0b:1e:65:5b:3d:2c:35:23:55:96:04:88:d1:53:88:45:ad:bb:
         91:22:a1:ef:9f:85:85:04:9f:b9:da:67:a6:27:46:b3:33:eb:
         c0:52:02:fe:d8:f6:d2:72:4c:ed:ca:6c:eb:8c:7b:86:13:19:
         2c:ca:39:4c:a2:b3:14:37:ea:05:42:b0:e9:1a:48:08:a4:ed:
         df:f0:42:0f:5c:b6:df:0e:11:0b:bf:18:5e:1d:46:09:a6:99:
         fb:85:43:48:f4:b5:d6:33:0d:f6:04:18:dd:dc:5d:a4:30:d1:
         4f:d0:e5:e6:3a:50:2b:41:3b:f3:8c:5b:e6:2d:19:9c:2c:8f:
         6e:e7:da:83:32:9e:bd:6b:66:bb:72:57:07:2d:51:1b:6f:d2:
         17:b7:76:a7:88:90:6b:dc:50:5c:7a:4a:4b:c1:5f:a0:e8:4b:
         40:91:49:8c:a2:56:b7:9c:18:3d:42:27:59:7d:69:da:e5:78:
         7a:bd:c4:6c:a5:db:f1:75:01:8e:3e:af:cc:88:75:41:6f:3e:
         dc:e7:57:4e:ab:0d:34:90:47:ee:63:37:26:48:0c:f6:d0:b3:
         b1:3b:b7:74
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUqHIrp66zI0IQL4rpHeVIHgU4XkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThCMTBGMkY1RDc4QUQ0NDFBNDYxNzZGOURGMjc4RjBE
RTczRDQwRTAeFw0yNTAzMTUxNjUyNDVaFw0yNjAzMTQxNjU3NDVaMDMxMTAvBgNV
BAMTKDUyOUQ5NjJDQUZFMEQwQzk5RkI0NkEyNjM4QjEwM0Y5RTFEREJBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsS6mOac2pwgk0lVPn/1LwkbbY
ZFxSxENY9UO17hAyeskSegrAhsegFiNgxxkJRnx4GIi40jEwhkzagLWaXSH0DM+5
+a7k7tcdNfFTBIxKJG5QLjkP4yhlo76QppmCv3mdSQRA+oV4zVEZtoKEm3tRflvc
zQI6ylWBj7rXgLsq25HNf+mA0vd8wbZWrSZvYaGljtDRj055ZUPVryTAsw5+z0rz
u1ranEWUL1/56S+OLj5T/KTcTuJLmgUXHJ6LxcxUQ9vW0Pt2iiyxDeKD0WzDnyLw
pJUzzBq/RmNmZXVKS9sfQoLRm0tFmqzGSSY4zHFwRPktgXdYB8S3Ev9jfmcbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUp2WLK/g0MmftGomOLED+eHdunQwHwYDVR0j
BBgwFoAUGLEPL114rUQaRhdvnfJ48N5z1A4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtl
MVYvMC8xOEIxMEYyRjVENzhBRDQ0MUE0NjE3NkY5REYyNzhGMERFNzNENDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4QjEwRjJGNUQ3OEFENDQx
QTQ2MTc2RjlERjI3OEYwREU3M0Q0MEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDaHNjYURTRjVpb2FUclM5c1E1dHh1VnRzYjJaY1ZRYXBGeWpIMnRrZTFWLzAv
MzIzODMwMzQzYTM1MzIzNDM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEUkiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBdWXTHeqrQ/enKOOwJBfNC+C5LLiERDAo5E9jAIToJ7TMH5IYLHmVbPSw1
I1WWBIjRU4hFrbuRIqHvn4WFBJ+52memJ0azM+vAUgL+2PbSckztymzrjHuGExks
yjlMorMUN+oFQrDpGkgIpO3f8EIPXLbfDhELvxheHUYJppn7hUNI9LXWMw32BBjd
3F2kMNFP0OXmOlArQTvzjFvmLRmcLI9u59qDMp69a2a7clcHLVEbb9IXt3aniJBr
3FBcekpLwV+g6EtAkUmMola3nBg9QidZfWna5Xh6vcRspdvxdQGOPq/MiHVBbz7c
51dOqw00kEfuYzcmSAz20LOxO7d0
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:00:03 2025 by rpki-client