Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa
File:                     323830343a333332633a3a2f33332d3333203d3e20323635333739.roa (raw, json)
Hash identifier:          ZLqiOvc84guY5T8KN3/3CdJQhoKYiIwogtznZw9Cc+Y=
Subject key identifier:   94:D9:7E:ED:AF:28:E7:50:E7:55:E1:2A:D6:F9:8C:BF:C9:A0:50:0A
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       7FC6246E57C92A2CC434BE5F54AA0DC03097A82F
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     265379
IP address blocks:        2804:332c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c6:24:6e:57:c9:2a:2c:c4:34:be:5f:54:aa:0d:c0:30:97:a8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=94D97EEDAF28E750E755E12AD6F98CBFC9A0500A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:bb:72:a3:63:28:ff:50:a9:88:94:33:9a:
                    cd:19:da:22:0d:11:bb:d9:e5:ca:8f:e2:96:ef:92:
                    9c:31:47:af:fd:36:34:6b:0c:21:29:71:27:d0:42:
                    e1:93:32:53:8f:b1:44:9d:05:e9:80:4a:5e:7e:89:
                    6c:71:f1:f2:b8:b3:62:03:0d:f1:7f:d9:e1:dd:ff:
                    bf:bb:ef:c7:50:d0:7a:7c:a8:b5:ab:d5:c9:d6:a0:
                    e0:51:e9:74:40:19:ca:38:bb:75:6c:47:06:dd:53:
                    74:e1:70:d2:bb:83:ff:03:09:df:9f:6d:a2:6f:75:
                    ab:1c:23:0e:48:73:26:5b:66:ea:25:fe:23:8c:fa:
                    46:32:42:09:8b:97:27:48:14:e5:e8:23:cf:a8:22:
                    d4:ec:2e:6e:23:3d:87:ee:06:ca:72:f1:f7:f2:15:
                    3d:45:bc:ff:c1:43:34:da:e7:1c:74:94:b2:c8:82:
                    94:7b:13:2c:4f:5a:1b:dd:1d:b8:93:e3:1e:44:3b:
                    22:a3:ce:cc:b0:0b:08:7c:34:e9:a8:75:74:8e:59:
                    20:92:6f:5b:fe:93:43:22:3b:70:07:dd:5b:d2:3d:
                    48:f6:a0:ea:5b:d5:1b:cc:1e:66:52:ab:a6:56:f3:
                    f3:c6:ec:10:d1:6d:4f:94:2e:16:9f:91:d2:44:5a:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D9:7E:ED:AF:28:E7:50:E7:55:E1:2A:D6:F9:8C:BF:C9:A0:50:0A
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33332d3333203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:332c::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:30:15:a2:a9:a0:78:6a:12:8d:db:a4:aa:f6:55:00:d7:7b:
         ae:bd:f7:49:26:e3:f4:34:d7:ae:01:5f:b7:63:ba:e3:3b:6a:
         14:35:66:a5:b7:f8:82:25:1c:06:5f:81:c9:eb:f8:77:fb:7b:
         a0:0e:db:8f:a5:59:aa:c6:12:67:be:3f:79:69:d3:cb:64:c7:
         88:07:f1:81:7a:ee:5d:63:c7:17:02:46:36:6f:ac:d7:d1:b1:
         6f:85:6c:c6:8f:ec:b2:0b:27:bc:8a:b0:cb:2a:f1:e0:f1:60:
         f3:ae:25:8c:5f:98:0d:7f:69:ea:56:16:5f:bf:b9:6d:7d:07:
         ed:e1:7b:d8:8a:bb:2d:d2:b3:49:1a:c8:07:a5:06:00:fb:72:
         eb:61:f4:1d:39:81:b3:8e:26:6f:30:f0:b8:1c:db:3e:91:35:
         63:7a:2f:75:bb:8a:4e:d8:71:44:15:22:db:34:03:d3:a7:ff:
         2c:8c:66:2f:96:fe:6a:89:8b:0b:9a:c5:d0:4c:a4:cf:2b:86:
         a1:1e:f5:00:6a:86:11:f6:c2:25:b4:67:58:f6:c4:23:06:e8:
         66:04:0f:89:23:b2:7b:18:1e:5d:c0:a6:dd:c5:f5:90:c1:70:
         4f:0d:e9:7e:ee:d1:de:74:6a:e1:8a:74:10:f8:44:1a:b9:9a:
         9f:f1:dc:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf8YkblfJKizENL5fVKoNwDCXqC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyMDRGMzhCNkJBMDBFMDhGODkzODlCRUE4MjBDMjU1
RDAyNTE0QzAeFw0yNTAzMDUxODU1MTFaFw0yNjAzMDQxOTAwMTFaMDMxMTAvBgNV
BAMTKDk0RDk3RUVEQUYyOEU3NTBFNzU1RTEyQUQ2Rjk4Q0JGQzlBMDUwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6btyo2Mo/1CpiJQzms0Z2iIN
EbvZ5cqP4pbvkpwxR6/9NjRrDCEpcSfQQuGTMlOPsUSdBemASl5+iWxx8fK4s2ID
DfF/2eHd/7+778dQ0Hp8qLWr1cnWoOBR6XRAGco4u3VsRwbdU3ThcNK7g/8DCd+f
baJvdascIw5IcyZbZuol/iOM+kYyQgmLlydIFOXoI8+oItTsLm4jPYfuBspy8ffy
FT1FvP/BQzTa5xx0lLLIgpR7EyxPWhvdHbiT4x5EOyKjzsywCwh8NOmodXSOWSCS
b1v+k0MiO3AH3VvSPUj2oOpb1RvMHmZSq6ZW8/PG7BDRbU+ULhafkdJEWr4xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlNl+7a8o51DnVeEq1vmMv8mgUAowHwYDVR0j
BBgwFoAUVCBPOLa6AOCPiTib6oIMJV0CUUwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFNQkVORkxIOW43NzRBN0d0QnBYMmlpRG92YkxaTTN2S1BjVjJjN1l3
cHAvMS81NDIwNEYzOEI2QkEwMEUwOEY4OTM4OUJFQTgyMEMyNTVEMDI1MTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjA0RjM4QjZCQTAwRTA4
Rjg5Mzg5QkVBODIwQzI1NUQwMjUxNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxTUJFTkZMSDluNzc0QTdHdEJwWDJpaURvdmJMWk0zdktQY1YyYzdZd3BwLzEv
MzIzODMwMzQzYTMzMzMzMjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzMzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQzLAAwDQYJKoZIhvcNAQELBQADggEBAAEwFaKp
oHhqEo3bpKr2VQDXe66990km4/Q0164BX7djuuM7ahQ1ZqW3+IIlHAZfgcnr+Hf7
e6AO24+lWarGEme+P3lp08tkx4gH8YF67l1jxxcCRjZvrNfRsW+FbMaP7LILJ7yK
sMsq8eDxYPOuJYxfmA1/aepWFl+/uW19B+3he9iKuy3Ss0kayAelBgD7cuth9B05
gbOOJm8w8Lgc2z6RNWN6L3W7ik7YcUQVIts0A9On/yyMZi+W/mqJiwuaxdBMpM8r
hqEe9QBqhhH2wiW0Z1j2xCMG6GYED4kjsnsYHl3Apt3F9ZDBcE8N6X7u0d50auGK
dBD4RBq5mp/x3Do=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:34 2025 by rpki-client