Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d313238203d3e20323639303135.roa
File:                     323830343a356532383a3a2f33322d313238203d3e20323639303135.roa (raw, json)
Hash identifier:          Tk0fHJm8CCskQQrj3njBfNusl3ZZnaPSVqD083REh3M=
Subject key identifier:   8B:65:9F:AB:B7:38:18:7B:9C:05:5D:C1:DD:A8:86:23:FC:CB:C6:FA
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       05384FBB2EA28210C668392F07C1B861A70C241A
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d313238203d3e20323639303135.roa
Signing time:             Thu 06 Mar 2025 07:55:30 +0000
ROA not before:           Thu 06 Mar 2025 07:50:30 +0000
ROA not after:            Thu 05 Mar 2026 07:55:30 +0000
asID:                     269015
IP address blocks:        2804:5e28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:38:4f:bb:2e:a2:82:10:c6:68:39:2f:07:c1:b8:61:a7:0c:24:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Mar  6 07:50:30 2025 GMT
            Not After : Mar  5 07:55:30 2026 GMT
        Subject: CN=8B659FABB738187B9C055DC1DDA88623FCCBC6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:1c:b5:74:47:f6:a2:ae:d7:e3:62:fd:a5:
                    1b:ac:3a:1e:ee:d8:ae:a8:a8:df:ed:e0:c2:97:77:
                    11:5c:a4:02:55:83:2d:0f:26:57:00:1c:0d:79:e3:
                    90:be:b8:ff:a8:a6:51:6d:f3:8c:05:db:2a:99:93:
                    13:d0:0e:93:b4:c2:e4:05:bb:77:b7:13:08:b6:0b:
                    c6:90:64:f2:cf:cf:56:05:22:08:12:79:a6:62:cd:
                    8b:01:b4:6a:1d:31:de:65:10:49:35:71:f5:c0:1c:
                    ee:10:8f:e0:3a:33:70:fd:8e:1f:4c:11:8b:27:8f:
                    8b:66:50:49:97:5f:36:c0:05:dd:dd:f6:83:37:63:
                    2b:ce:fd:92:31:50:9d:cf:72:08:bd:35:f4:ae:3a:
                    09:3a:9b:eb:52:b3:ae:bb:42:5b:a4:ec:53:ed:09:
                    95:38:61:38:6a:39:7b:82:27:e8:2c:66:cd:29:25:
                    fc:f8:f9:f0:02:53:19:18:ca:29:78:71:92:de:59:
                    da:de:87:66:a3:f8:73:25:22:06:36:d5:46:e8:4c:
                    03:72:9d:dc:64:a2:c7:37:ac:d4:8d:62:8c:09:b3:
                    49:29:4a:12:17:4a:b9:62:96:74:34:71:31:ce:b8:
                    96:1c:e1:4e:27:c0:18:bf:0e:6b:cd:28:8d:8e:a0:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:9F:AB:B7:38:18:7B:9C:05:5D:C1:DD:A8:86:23:FC:CB:C6:FA
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d313238203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:56:5c:42:d3:04:c2:73:a5:88:19:8e:3a:8a:61:03:39:
         93:d6:f8:7e:13:9d:1d:3a:f9:0c:20:83:93:ad:52:8e:5d:fa:
         80:17:21:7d:8a:24:87:24:98:50:1c:54:27:64:c9:69:47:0c:
         bf:bc:94:6c:92:c5:3c:84:b0:ee:f2:df:17:e2:61:44:81:cf:
         5a:89:82:2b:57:f8:02:0e:d0:c4:8f:ee:d1:ea:c2:4d:bf:46:
         ce:2d:88:5c:e3:c5:33:77:0d:56:91:b0:ef:31:f4:89:b4:23:
         56:17:9d:82:02:97:a5:11:40:b1:3c:c6:5b:51:99:42:50:ef:
         af:bf:ee:d2:bf:54:04:0a:cc:e2:93:a6:40:ef:de:2c:b1:bb:
         45:e9:20:60:51:7e:cb:80:82:55:ff:9f:2f:96:11:62:b1:c9:
         65:d6:b9:04:84:56:fa:1f:ba:20:c6:63:b3:e1:66:82:79:f5:
         be:d5:6f:5b:d5:ec:fb:15:9e:3f:1c:47:3e:1c:2d:ab:fc:94:
         1d:99:ea:d4:ec:b6:ca:1e:a8:a7:0f:13:0b:c0:e2:66:be:17:
         ca:1b:a4:22:c2:c8:61:8e:57:ad:81:ac:35:fc:29:18:87:37:
         ab:0e:ce:96:d6:96:8c:75:1b:b1:e7:4b:f2:dc:80:ef:97:cf:
         22:85:de:9e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBThPuy6ighDGaDkvB8G4YacMJBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE
QUUwNDdEODAeFw0yNTAzMDYwNzUwMzBaFw0yNjAzMDUwNzU1MzBaMDMxMTAvBgNV
BAMTKDhCNjU5RkFCQjczODE4N0I5QzA1NURDMUREQTg4NjIzRkNDQkM2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qBy1dEf2oq7X42L9pRusOh7u
2K6oqN/t4MKXdxFcpAJVgy0PJlcAHA1545C+uP+oplFt84wF2yqZkxPQDpO0wuQF
u3e3Ewi2C8aQZPLPz1YFIggSeaZizYsBtGodMd5lEEk1cfXAHO4Qj+A6M3D9jh9M
EYsnj4tmUEmXXzbABd3d9oM3YyvO/ZIxUJ3Pcgi9NfSuOgk6m+tSs667Qluk7FPt
CZU4YThqOXuCJ+gsZs0pJfz4+fACUxkYyil4cZLeWdreh2aj+HMlIgY21UboTANy
ndxkosc3rNSNYowJs0kpShIXSrlilnQ0cTHOuJYc4U4nwBi/DmvNKI2OoKSlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUi2Wfq7c4GHucBV3B3aiGI/zLxvowHwYDVR0j
BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky
Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv
MzIzODMwMzQzYTM1NjUzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMDMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBF4oMA0GCSqGSIb3DQEBCwUAA4IBAQAgTlZc
QtMEwnOliBmOOophAzmT1vh+E50dOvkMIIOTrVKOXfqAFyF9iiSHJJhQHFQnZMlp
Rwy/vJRsksU8hLDu8t8X4mFEgc9aiYIrV/gCDtDEj+7R6sJNv0bOLYhc48Uzdw1W
kbDvMfSJtCNWF52CApelEUCxPMZbUZlCUO+vv+7Sv1QECszik6ZA794ssbtF6SBg
UX7LgIJV/58vlhFiscll1rkEhFb6H7ogxmOz4WaCefW+1W9b1ez7FZ4/HEc+HC2r
/JQdmerU7LbKHqinDxMLwOJmvhfKG6Qiwshhjletgaw1/CkYhzerDs6W1paMdRux
50vy3IDvl88ihd6e
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:02:31 2025 by rpki-client