Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
File:                     323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (raw, json)
Hash identifier:          r7EBQ/G32l24X8r8G4Bt2g4N/+RKHvvtAJyodmIPIWM=
Subject key identifier:   A7:29:B5:F3:EE:A9:A7:ED:7B:B5:02:45:A8:D7:35:A2:B6:CB:E8:A2
Certificate issuer:       /CN=DDC98962EC146863E8B05E80D2B3A033070B822A
Certificate serial:       1DF1DFE000B866EE9E479342454D421430B9ED82
Authority key identifier: DD:C9:89:62:EC:14:68:63:E8:B0:5E:80:D2:B3:A0:33:07:0B:82:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa
Signing time:             Thu 15 May 2025 09:54:18 +0000
ROA not before:           Thu 15 May 2025 09:49:18 +0000
ROA not after:            Thu 14 May 2026 09:54:18 +0000
asID:                     264055
IP address blocks:        2804:2a14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f1:df:e0:00:b8:66:ee:9e:47:93:42:45:4d:42:14:30:b9:ed:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDC98962EC146863E8B05E80D2B3A033070B822A
        Validity
            Not Before: May 15 09:49:18 2025 GMT
            Not After : May 14 09:54:18 2026 GMT
        Subject: CN=A729B5F3EEA9A7ED7BB50245A8D735A2B6CBE8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d6:92:c8:d7:8a:f4:1c:8d:60:c8:08:97:b8:
                    9b:fc:c3:aa:cc:6c:63:0d:14:10:17:dd:de:94:04:
                    af:4f:62:8f:36:6e:e7:60:f9:6f:27:39:05:25:2b:
                    83:39:3c:af:ce:4c:bd:6d:d7:4f:0c:09:91:b3:7e:
                    69:18:52:2a:08:70:c5:ce:28:56:ed:a4:b5:43:a1:
                    9e:54:ea:75:e4:2d:6d:d0:65:fa:5c:8b:41:2e:94:
                    6b:9e:90:03:1c:46:1f:6a:dc:12:09:cf:d5:b3:fb:
                    ad:57:09:95:8f:f4:9b:7d:c7:e3:7c:d6:d4:5d:08:
                    12:31:70:f7:e2:37:d4:ea:25:0d:15:38:dc:ec:af:
                    c4:62:3b:14:8e:b2:68:5b:65:e8:4d:08:f0:1f:66:
                    d7:3e:09:6f:39:ee:d3:6a:ba:a6:d7:9d:c8:0a:cc:
                    f9:ec:e6:bd:0f:22:17:04:4e:2f:c9:29:99:ad:77:
                    23:90:ba:3e:5a:6e:1b:48:24:65:41:c5:4e:1c:0f:
                    9b:b3:2e:5f:ab:3c:d2:2a:19:11:75:af:f2:72:11:
                    4a:d4:ea:9f:57:80:ba:83:f2:87:80:64:de:2d:e0:
                    ee:12:26:36:4d:bf:c1:b6:c3:c4:b1:3c:50:18:53:
                    4b:85:72:db:61:a2:fe:c1:b0:11:17:60:47:95:3a:
                    06:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:B5:F3:EE:A9:A7:ED:7B:B5:02:45:A8:D7:35:A2:B6:CB:E8:A2
            X509v3 Authority Key Identifier:
                keyid:DD:C9:89:62:EC:14:68:63:E8:B0:5E:80:D2:B3:A0:33:07:0B:82:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/323830343a326131343a3a2f33322d313238203d3e20323634303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:ce:51:87:28:7d:73:e6:86:9d:01:bd:b1:85:8f:51:cc:
         1e:40:a8:d3:5d:50:1c:83:11:db:a5:ab:51:06:67:f9:4e:42:
         c4:f4:07:7a:e6:48:75:16:8e:43:1c:2d:85:f1:78:29:ce:cc:
         61:06:fd:b2:24:85:97:71:f6:a6:73:ca:29:60:dc:c3:56:1f:
         24:34:50:0c:c3:36:b6:8e:86:a5:c0:64:f0:01:80:35:82:fa:
         96:fa:39:0e:f1:54:84:0b:4b:99:59:91:ed:f1:2d:cd:c8:bb:
         1c:03:62:f1:2c:a6:34:78:1f:0a:be:2a:44:e4:ff:07:91:4b:
         fc:d7:c5:24:af:58:df:12:97:b1:3e:c8:2b:9e:c5:d8:e2:cf:
         34:73:92:5d:8f:be:3e:1c:b8:64:a8:d6:c0:4e:62:3f:2b:b1:
         f7:dd:fd:9e:75:c2:72:a3:bb:af:74:af:9f:77:51:3a:dd:84:
         01:ff:06:22:1a:26:98:11:ff:43:d1:eb:d1:dc:8e:0f:b8:fe:
         3d:55:c4:c2:ce:3d:71:fe:a1:fe:fe:ce:fd:a4:10:6b:35:16:
         79:cf:41:09:6a:ef:f1:94:f1:37:14:f0:a5:53:36:ca:dd:3f:
         84:4d:61:e9:6f:fb:b4:ee:a4:6f:7c:5f:3d:b1:91:d4:a8:95:
         b4:22:92:04
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHfHf4AC4Zu6eR5NCRU1CFDC57YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERDOTg5NjJFQzE0Njg2M0U4QjA1RTgwRDJCM0EwMzMw
NzBCODIyQTAeFw0yNTA1MTUwOTQ5MThaFw0yNjA1MTQwOTU0MThaMDMxMTAvBgNV
BAMTKEE3MjlCNUYzRUVBOUE3RUQ3QkI1MDI0NUE4RDczNUEyQjZDQkU4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp1pLI14r0HI1gyAiXuJv8w6rM
bGMNFBAX3d6UBK9PYo82budg+W8nOQUlK4M5PK/OTL1t108MCZGzfmkYUioIcMXO
KFbtpLVDoZ5U6nXkLW3QZfpci0EulGuekAMcRh9q3BIJz9Wz+61XCZWP9Jt9x+N8
1tRdCBIxcPfiN9TqJQ0VONzsr8RiOxSOsmhbZehNCPAfZtc+CW857tNquqbXncgK
zPns5r0PIhcETi/JKZmtdyOQuj5abhtIJGVBxU4cD5uzLl+rPNIqGRF1r/JyEUrU
6p9XgLqD8oeAZN4t4O4SJjZNv8G2w8SxPFAYU0uFctthov7BsBEXYEeVOgbDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUpym18+6pp+17tQJFqNc1orbL6KIwHwYDVR0j
BBgwFoAU3cmJYuwUaGPosF6A0rOgMwcLgiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVh0VVFvYXJLd0tmVjJraURpcGF5dnpNZnhZVXZ3SGJ5cG96ZHhDTDNx
aDEvMC9EREM5ODk2MkVDMTQ2ODYzRThCMDVFODBEMkIzQTAzMzA3MEI4MjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQzk4OTYyRUMxNDY4NjNF
OEIwNUU4MEQyQjNBMDMzMDcwQjgyMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYdFVRb2FyS3dLZlYya2lEaXBheXZ6TWZ4WVV2d0hieXBvemR4Q0wzcWgxLzAv
MzIzODMwMzQzYTMyNjEzMTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCoUMA0GCSqGSIb3DQEBCwUAA4IBAQCVTM5R
hyh9c+aGnQG9sYWPUcweQKjTXVAcgxHbpatRBmf5TkLE9Ad65kh1Fo5DHC2F8Xgp
zsxhBv2yJIWXcfamc8opYNzDVh8kNFAMwza2joalwGTwAYA1gvqW+jkO8VSEC0uZ
WZHt8S3NyLscA2LxLKY0eB8KvipE5P8HkUv818Ukr1jfEpexPsgrnsXY4s80c5Jd
j74+HLhkqNbATmI/K7H33f2edcJyo7uvdK+fd1E63YQB/wYiGiaYEf9D0evR3I4P
uP49VcTCzj1x/qH+/s79pBBrNRZ5z0EJau/xlPE3FPClUzbK3T+ETWHpb/u07qRv
fF89sZHUqJW0IpIE
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:51:34 2025 by rpki-client