Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
File:                     323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (raw, json)
Hash identifier:          hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=
Subject key identifier:   CB:05:80:A7:9D:7A:B8:35:7F:22:C4:34:9B:D0:AB:14:BA:2F:6F:A7
Certificate issuer:       /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial:       67D7ECA0DCC6C4C71E3FEE89A58D3A1B7EC9E49C
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa
Signing time:             Thu 06 Mar 2025 18:35:32 +0000
ROA not before:           Thu 06 Mar 2025 18:30:32 +0000
ROA not after:            Thu 05 Mar 2026 18:35:32 +0000
asID:                     264921
IP address blocks:        2804:2ff0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
                          rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 04:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d7:ec:a0:dc:c6:c4:c7:1e:3f:ee:89:a5:8d:3a:1b:7e:c9:e4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
        Validity
            Not Before: Mar  6 18:30:32 2025 GMT
            Not After : Mar  5 18:35:32 2026 GMT
        Subject: CN=CB0580A79D7AB8357F22C4349BD0AB14BA2F6FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:f9:3e:da:e5:c0:0d:0f:c7:5d:54:34:ea:
                    50:a2:e2:b9:9c:3b:63:2b:69:9d:72:f1:46:a5:6c:
                    1a:fd:0d:e2:4c:e9:50:3d:10:8d:c3:76:49:d4:e0:
                    59:4d:c2:8a:a5:7c:4e:4c:90:4e:8d:98:e3:59:29:
                    d2:e7:f1:95:86:5b:27:35:e8:ef:17:72:c7:2a:d9:
                    51:21:6d:c7:3e:71:1c:10:e5:b6:b1:17:51:a0:4c:
                    ab:cf:9a:ff:52:7d:a8:e4:0d:ac:8a:ea:0b:8c:24:
                    60:97:dc:e3:f8:ab:28:25:c6:79:3b:0c:98:96:ef:
                    0e:19:f5:c7:42:e4:da:e0:51:82:0b:fb:c1:7f:ad:
                    de:ca:ec:9b:4f:cc:3b:eb:18:8e:28:6a:e7:dd:54:
                    61:d2:7b:4b:55:31:b9:0f:5b:0c:98:74:31:1f:00:
                    66:26:07:dd:fc:53:ff:33:7a:2d:e5:a1:b3:0c:24:
                    97:bd:8d:46:dd:07:8c:7d:26:b9:38:50:41:45:17:
                    2f:ff:70:7f:97:1f:05:0b:24:a6:a1:30:44:9c:da:
                    2e:96:72:be:be:0a:67:f2:2f:38:62:3e:b1:9c:10:
                    35:e9:c2:26:5b:cf:ea:a4:4d:05:cb:01:18:0f:38:
                    82:8a:ca:0b:7c:90:25:ab:f4:e0:51:2f:2f:54:09:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:80:A7:9D:7A:B8:35:7F:22:C4:34:9B:D0:AB:14:BA:2F:6F:A7
            X509v3 Authority Key Identifier:
                keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/323830343a326666303a3a2f33322d3438203d3e20323634393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ff0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:1a:03:0d:d7:02:eb:54:2a:00:10:a0:85:b4:f1:0a:1b:
         0d:5f:57:d5:6a:f0:5d:07:d7:fc:0f:ee:13:61:59:f0:d6:e3:
         05:9f:32:3f:45:e0:65:04:76:63:8a:18:c0:3e:42:7f:16:62:
         8a:1f:9b:bd:05:dc:f9:c2:85:75:64:dc:4f:98:61:bb:3d:67:
         43:f9:7d:4e:1d:ba:9b:e1:78:55:69:bf:ee:3d:9c:fd:0f:d4:
         13:1c:ff:86:41:44:72:27:77:c6:0b:50:32:07:e2:f7:92:c9:
         90:fb:30:fd:a0:d6:e7:81:59:b4:4f:a4:e2:ca:cf:b9:0a:57:
         48:93:7d:8d:58:08:fa:78:d0:7e:2f:ea:37:65:4b:64:c4:c7:
         4c:e1:36:ea:2e:40:d8:c5:a9:4d:3a:98:d0:df:51:62:66:16:
         b5:5b:f9:ca:72:25:fc:a7:e2:e2:e6:d1:59:05:41:46:62:60:
         c5:e4:c4:90:37:22:d9:3a:c8:c2:13:80:d7:e3:b6:17:a7:f1:
         d7:62:9c:ed:7c:df:4d:94:0b:0c:7a:9e:fd:eb:50:b5:c3:ad:
         59:b8:a6:15:47:ef:e2:52:c9:12:2a:aa:6f:7e:56:6b:c7:89:
         83:c3:5c:11:21:fc:26:98:17:d7:98:ef:70:4e:93:62:54:f0:
         7b:05:75:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ9fsoNzGxMceP+6JpY06G37J5JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0
MTAyNDUyNjAeFw0yNTAzMDYxODMwMzJaFw0yNjAzMDUxODM1MzJaMDMxMTAvBgNV
BAMTKENCMDU4MEE3OUQ3QUI4MzU3RjIyQzQzNDlCRDBBQjE0QkEyRjZGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0/k+2uXADQ/HXVQ06lCi4rmc
O2MraZ1y8UalbBr9DeJM6VA9EI3DdknU4FlNwoqlfE5MkE6NmONZKdLn8ZWGWyc1
6O8Xcscq2VEhbcc+cRwQ5baxF1GgTKvPmv9SfajkDayK6guMJGCX3OP4qyglxnk7
DJiW7w4Z9cdC5NrgUYIL+8F/rd7K7JtPzDvrGI4oaufdVGHSe0tVMbkPWwyYdDEf
AGYmB938U/8zei3lobMMJJe9jUbdB4x9Jrk4UEFFFy//cH+XHwULJKahMESc2i6W
cr6+CmfyLzhiPrGcEDXpwiZbz+qkTQXLARgPOIKKygt8kCWr9OBRLy9UCTQVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUywWAp516uDV/IsQ0m9CrFLovb6cwHwYDVR0j
BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho
ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0
NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUY25hZW5VaHl1a1pnVmVZWkFYQlBMdjR1amJNdXNmWkNxYjVDM0dIaGVZLzEv
MzIzODMwMzQzYTMyNjY2NjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQv8DANBgkqhkiG9w0BAQsFAAOCAQEAoGcaAw3X
AutUKgAQoIW08QobDV9X1WrwXQfX/A/uE2FZ8NbjBZ8yP0XgZQR2Y4oYwD5CfxZi
ih+bvQXc+cKFdWTcT5hhuz1nQ/l9Th26m+F4VWm/7j2c/Q/UExz/hkFEcid3xgtQ
Mgfi95LJkPsw/aDW54FZtE+k4srPuQpXSJN9jVgI+njQfi/qN2VLZMTHTOE26i5A
2MWpTTqY0N9RYmYWtVv5ynIl/Kfi4ubRWQVBRmJgxeTEkDci2TrIwhOA1+O2F6fx
12Kc7XzfTZQLDHqe/etQtcOtWbimFUfv4lLJEiqqb35Wa8eJg8NcESH8JpgX15jv
cE6TYlTwewV1OA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:07 2025 by rpki-client