Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa
File:                     323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa (raw, json)
Hash identifier:          kxu+gbqo4jZErJDfxpZdxYj75w+jso9t/3p82DBZBig=
Subject key identifier:   BE:04:0B:D8:76:3C:4C:DD:D2:5A:0B:DC:6C:53:11:AF:D0:04:A5:BE
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       3A15E5ED88C7F5AF4158E7D67B94E4CA5F558177
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:49 +0000
ROA not before:           Mon 07 Apr 2025 20:46:49 +0000
ROA not after:            Mon 06 Apr 2026 20:51:49 +0000
asID:                     268308
IP address blocks:        2804:4f28:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:15:e5:ed:88:c7:f5:af:41:58:e7:d6:7b:94:e4:ca:5f:55:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:49 2025 GMT
            Not After : Apr  6 20:51:49 2026 GMT
        Subject: CN=BE040BD8763C4CDDD25A0BDC6C5311AFD004A5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:fb:f2:4b:3e:dd:21:a5:f4:e1:2c:b3:9c:
                    c4:eb:b9:f3:97:e9:ec:cf:f0:8c:69:16:ee:e9:77:
                    c6:81:3d:30:6a:3b:64:c1:cd:83:1a:f8:3e:f2:e4:
                    a0:0b:8b:e3:fc:14:94:48:06:b2:e6:58:e3:53:b4:
                    7c:88:3f:f7:67:4a:af:a2:2f:66:59:d9:18:a7:fd:
                    71:ce:e4:ba:fb:f3:44:67:32:d8:65:d8:57:0d:66:
                    2b:a3:ff:ef:c2:dc:10:43:ae:fe:b8:29:bd:36:6e:
                    0c:30:43:ff:ca:ec:f7:78:3f:ac:70:30:df:38:da:
                    db:5e:a0:4a:2c:3f:76:5f:4a:11:c5:55:9e:1b:04:
                    f4:f8:9f:bb:85:47:91:15:29:60:ce:0b:8a:11:20:
                    cb:b8:3f:3e:d7:dd:d5:1b:d6:ef:2e:07:cd:83:6e:
                    4b:a7:d6:f6:4a:4e:7d:4a:a5:a3:13:7e:a9:9f:e6:
                    4d:c7:1c:a6:eb:08:61:28:97:91:83:11:dd:d6:d2:
                    ac:5b:32:4c:39:30:d9:f6:d7:7c:83:ac:db:86:fe:
                    5a:81:11:34:01:6a:66:43:85:1f:db:87:a9:9a:5f:
                    78:7c:6a:5e:b3:de:25:d0:82:90:ab:19:51:6f:4d:
                    f4:9e:2e:be:23:dd:0d:a1:88:d9:a6:23:c6:01:59:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:04:0B:D8:76:3C:4C:DD:D2:5A:0B:DC:6C:53:11:AF:D0:04:A5:BE
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:8d:a9:26:c0:02:8c:2d:d2:48:e4:a4:92:48:c1:a1:1c:
         f6:cb:94:05:c6:77:be:31:e3:fb:a7:e6:2a:7d:03:0d:50:df:
         c4:b9:43:a6:83:f4:25:ec:ac:70:3b:f5:36:1e:83:d9:0d:4a:
         b0:53:9f:fb:88:c6:6d:82:6e:1f:f1:e2:d8:4a:46:23:16:fb:
         19:ed:71:bc:01:b7:f1:0d:49:1a:c9:e2:96:a9:e9:92:dd:7a:
         0f:65:78:9f:3a:cc:78:c1:76:2c:09:55:e9:e1:db:3f:59:e5:
         56:14:39:7d:f5:46:88:e9:66:17:d6:68:20:9e:10:c1:5f:7a:
         d5:c4:90:4a:a4:72:31:bc:45:10:9d:3f:78:00:9f:68:a7:32:
         65:e3:2e:6d:7c:ab:4e:14:c4:c1:2f:ac:cd:54:6d:cf:70:83:
         05:e3:90:6b:f2:bc:0a:54:63:1e:e8:18:16:1e:43:58:e3:4c:
         06:18:cc:c6:b4:c7:de:9f:e1:78:fe:31:49:fb:0e:8d:0d:fb:
         55:28:96:88:37:4b:8b:34:64:1b:65:00:33:d2:b8:fc:fd:56:
         05:28:74:89:e7:1c:5f:f8:e9:c5:28:43:cd:25:01:b3:bd:80:
         ef:2e:5e:ac:a4:d8:23:c2:48:da:d9:49:13:4e:d8:ab:3b:77:
         b5:47:b2:e9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOhXl7YjH9a9BWOfWe5Tkyl9VgXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc5RDA1N0I4MkRBQjdEM0IyN0RGOEMwRTMxMEZGQUQ1
MzVCMThBODAeFw0yNTA0MDcyMDQ2NDlaFw0yNjA0MDYyMDUxNDlaMDMxMTAvBgNV
BAMTKEJFMDQwQkQ4NzYzQzRDREREMjVBMEJEQzZDNTMxMUFGRDAwNEE1QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41vvySz7dIaX04SyznMTrufOX
6ezP8IxpFu7pd8aBPTBqO2TBzYMa+D7y5KALi+P8FJRIBrLmWONTtHyIP/dnSq+i
L2ZZ2Rin/XHO5Lr780RnMthl2FcNZiuj/+/C3BBDrv64Kb02bgwwQ//K7Pd4P6xw
MN842tteoEosP3ZfShHFVZ4bBPT4n7uFR5EVKWDOC4oRIMu4Pz7X3dUb1u8uB82D
bkun1vZKTn1KpaMTfqmf5k3HHKbrCGEol5GDEd3W0qxbMkw5MNn213yDrNuG/lqB
ETQBamZDhR/bh6maX3h8al6z3iXQgpCrGVFvTfSeLr4j3Q2hiNmmI8YBWdYVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvgQL2HY8TN3SWgvcbFMRr9AEpb4wHwYDVR0j
BBgwFoAUh50Fe4Lat9OyffjA4xD/rVNbGKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84NzlEMDU3QjgyREFCN0QzQjI3REY4QzBFMzEwRkZBRDUzNUIxOEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3OUQwNTdCODJEQUI3RDNC
MjdERjhDMEUzMTBGRkFENTM1QjE4QTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzIzODMwMzQzYTM0NjYzMjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODMzMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigETyhAMA0GCSqGSIb3DQEBCwUA
A4IBAQCAXo2pJsACjC3SSOSkkkjBoRz2y5QFxne+MeP7p+YqfQMNUN/EuUOmg/Ql
7KxwO/U2HoPZDUqwU5/7iMZtgm4f8eLYSkYjFvsZ7XG8AbfxDUkayeKWqemS3XoP
ZXifOsx4wXYsCVXp4ds/WeVWFDl99UaI6WYX1mggnhDBX3rVxJBKpHIxvEUQnT94
AJ9opzJl4y5tfKtOFMTBL6zNVG3PcIMF45Br8rwKVGMe6BgWHkNY40wGGMzGtMfe
n+F4/jFJ+w6NDftVKJaIN0uLNGQbZQAz0rj8/VYFKHSJ5xxf+OnFKEPNJQGzvYDv
Ll6spNgjwkja2UkTTtirO3e1R7Lp
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:05:06 2025 by rpki-client