Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa
File:                     323830343a326564343a3a2f33322d313238203d3e20323635333639.roa (raw, json)
Hash identifier:          CMPuVa43M/mtSeZmA5q7/xTl8XIpukeF40GbTH+b8DU=
Subject key identifier:   F8:29:88:CC:4E:49:71:88:4E:E2:B7:14:D5:8B:F5:BF:2E:13:06:42
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       7983CCEEF03EE0FAF106FC09FD4150443A4EDFEA
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa
Signing time:             Thu 29 May 2025 20:22:01 +0000
ROA not before:           Thu 29 May 2025 20:17:01 +0000
ROA not after:            Thu 28 May 2026 20:22:01 +0000
asID:                     265369
IP address blocks:        2804:2ed4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 12:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:cc:ee:f0:3e:e0:fa:f1:06:fc:09:fd:41:50:44:3a:4e:df:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: May 29 20:17:01 2025 GMT
            Not After : May 28 20:22:01 2026 GMT
        Subject: CN=F82988CC4E4971884EE2B714D58BF5BF2E130642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:52:38:a7:a3:da:74:1d:cc:71:8b:4e:46:
                    84:f4:c0:d1:10:f4:bf:c0:b0:5b:5e:1a:64:52:23:
                    52:1d:94:93:21:20:98:53:30:cd:55:42:63:5d:2d:
                    67:e6:f4:4b:45:41:41:1f:62:5d:a9:d6:35:91:71:
                    75:ab:44:78:b4:0f:d3:2c:04:6f:85:c7:e6:f6:86:
                    c9:bf:ef:21:8c:d6:c2:d6:45:0a:65:6c:12:fe:c6:
                    77:be:21:11:f4:7f:61:1c:e5:29:da:f7:5d:ac:52:
                    6f:b1:12:1e:be:ff:57:6e:82:18:ca:be:ed:5a:f9:
                    bf:b6:73:a1:81:66:5f:02:96:4d:37:d6:6f:55:30:
                    04:2d:75:2f:0e:09:a6:81:ae:4b:83:2f:78:a5:82:
                    bd:99:7c:06:68:56:2f:40:b6:03:a8:f2:01:63:83:
                    ac:62:d3:3d:74:ee:d1:87:57:6d:1c:67:71:03:81:
                    30:c5:3f:ff:92:42:22:25:dc:b2:12:76:0a:f6:81:
                    33:98:3f:56:70:f9:ab:56:84:69:c3:87:51:c1:d1:
                    80:54:d0:5d:fe:f9:4d:db:6d:67:39:38:9a:18:db:
                    e3:bb:0d:fc:cb:53:2a:d3:fa:ef:4c:68:6a:b3:5d:
                    b6:91:c3:23:67:5d:96:5a:b2:4c:17:ea:97:a9:a2:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:29:88:CC:4E:49:71:88:4E:E2:B7:14:D5:8B:F5:BF:2E:13:06:42
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/323830343a326564343a3a2f33322d313238203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:31:c4:62:20:ee:77:40:1b:2e:4a:48:40:53:a3:7e:9d:9c:
         2a:9a:f4:e6:43:29:72:db:ab:24:0c:3f:11:e1:68:f4:03:db:
         1d:77:8c:d3:c9:0c:af:09:c6:8a:6f:a0:65:94:75:da:b4:1c:
         58:ee:46:5a:1b:d7:56:09:1b:56:c7:00:89:57:2e:07:58:4a:
         34:7d:b5:80:93:e9:ea:c9:6d:a1:23:aa:d4:a0:a0:ee:63:60:
         13:b5:3d:3e:c1:54:15:b0:71:7a:af:66:f6:e6:d2:e6:b3:83:
         ca:61:c9:61:a4:b8:72:47:cb:32:d8:f0:a9:63:f8:50:ad:a0:
         ab:90:16:6b:16:6c:24:ae:19:06:ab:83:37:d8:2b:f8:33:1f:
         36:05:a9:b0:8c:b6:93:08:6a:4c:49:bf:f7:0f:30:39:65:f0:
         44:73:ae:c8:74:bf:8a:e9:8d:ab:cc:0d:71:27:30:be:7b:7b:
         9d:bc:13:eb:39:93:78:52:6e:3d:77:85:9a:22:0a:a5:31:6c:
         e8:e0:e9:ee:0b:38:d5:8a:9b:b4:60:21:88:49:6e:4f:6e:0a:
         c7:2e:4a:d0:17:a3:53:eb:36:22:4b:41:a3:52:1e:90:05:26:
         cc:64:bf:be:60:89:8f:4e:9d:24:11:d2:0a:23:17:8b:02:ee:
         63:24:67:a8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeYPM7vA+4PrxBvwJ/UFQRDpO3+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4QjQ1NEJDNTk0QzVBMTgwMDEzNEUzNzVCNDY1RDkx
QzA3MERGRDAeFw0yNTA1MjkyMDE3MDFaFw0yNjA1MjgyMDIyMDFaMDMxMTAvBgNV
BAMTKEY4Mjk4OENDNEU0OTcxODg0RUUyQjcxNEQ1OEJGNUJGMkUxMzA2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCVI4p6PadB3McYtORoT0wNEQ
9L/AsFteGmRSI1IdlJMhIJhTMM1VQmNdLWfm9EtFQUEfYl2p1jWRcXWrRHi0D9Ms
BG+Fx+b2hsm/7yGM1sLWRQplbBL+xne+IRH0f2Ec5Sna912sUm+xEh6+/1dughjK
vu1a+b+2c6GBZl8Clk031m9VMAQtdS8OCaaBrkuDL3ilgr2ZfAZoVi9AtgOo8gFj
g6xi0z107tGHV20cZ3EDgTDFP/+SQiIl3LISdgr2gTOYP1Zw+atWhGnDh1HB0YBU
0F3++U3bbWc5OJoY2+O7DfzLUyrT+u9MaGqzXbaRwyNnXZZaskwX6pepomPtAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+CmIzE5JcYhO4rcU1Yv1vy4TBkIwHwYDVR0j
BBgwFoAU2ItFS8WUxaGAATTjdbRl2RwHDf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlN1MkRMaXU2dnlKUkpwTDViWWlqajJlcXFTdmU5dVdzY3ZpWFFhc3lU
Mm4vMC9EODhCNDU0QkM1OTRDNUExODAwMTM0RTM3NUI0NjVEOTFDMDcwREZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4OEI0NTRCQzU5NEM1QTE4
MDAxMzRFMzc1QjQ2NUQ5MUMwNzBERkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTdTJETGl1NnZ5SlJKcEw1YllpamoyZXFxU3ZlOXVXc2N2aVhRYXN5VDJuLzAv
MzIzODMwMzQzYTMyNjU2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC7UMA0GCSqGSIb3DQEBCwUAA4IBAQCbMcRi
IO53QBsuSkhAU6N+nZwqmvTmQyly26skDD8R4Wj0A9sdd4zTyQyvCcaKb6BllHXa
tBxY7kZaG9dWCRtWxwCJVy4HWEo0fbWAk+nqyW2hI6rUoKDuY2ATtT0+wVQVsHF6
r2b25tLms4PKYclhpLhyR8sy2PCpY/hQraCrkBZrFmwkrhkGq4M32Cv4Mx82Bamw
jLaTCGpMSb/3DzA5ZfBEc67IdL+K6Y2rzA1xJzC+e3udvBPrOZN4Um49d4WaIgql
MWzo4OnuCzjVipu0YCGISW5PbgrHLkrQF6NT6zYiS0GjUh6QBSbMZL++YImPTp0k
EdIKIxeLAu5jJGeo
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:29 2025 by rpki-client