Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa
File:                     323830343a6462303a3a2f33322d3438203d3e203532383632.roa (raw, json)
Hash identifier:          iZ0Oh49gnD0xSG2rvxu7FOR0GNEJDSdowC5GzFVUaT8=
Subject key identifier:   F1:F0:BF:D5:EB:C4:24:C5:46:F2:0B:5A:EB:62:51:E6:4C:C8:FD:5E
Certificate issuer:       /CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
Certificate serial:       360F7EF8218B649FED197E091C0F9EE1CA218FE4
Authority key identifier: 5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa
Signing time:             Fri 16 May 2025 18:51:36 +0000
ROA not before:           Fri 16 May 2025 18:46:36 +0000
ROA not after:            Fri 15 May 2026 18:51:36 +0000
asID:                     52862
IP address blocks:        2804:db0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 05:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:7e:f8:21:8b:64:9f:ed:19:7e:09:1c:0f:9e:e1:ca:21:8f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
        Validity
            Not Before: May 16 18:46:36 2025 GMT
            Not After : May 15 18:51:36 2026 GMT
        Subject: CN=F1F0BFD5EBC424C546F20B5AEB6251E64CC8FD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:1e:dc:2e:0f:c6:2b:b1:5c:5f:97:9e:a7:
                    67:c1:61:6d:3c:55:c4:30:e4:50:62:f1:f3:a5:83:
                    cf:83:30:7f:94:f9:b7:64:0c:79:c2:92:ff:c2:3a:
                    b3:9c:4f:bc:73:e5:eb:0e:ef:cd:6a:d0:a8:77:6d:
                    e7:6b:72:89:1e:0d:45:e0:fd:f8:e6:cd:40:7e:fd:
                    fb:0a:ce:bb:2f:28:54:69:e1:e8:4a:71:ea:41:8d:
                    78:c1:7b:78:51:94:26:fa:27:71:17:37:eb:16:1a:
                    19:4b:32:a5:0e:3c:a4:7e:06:2c:b1:94:64:1f:56:
                    1c:38:14:8b:38:69:a4:c2:f5:01:da:67:cd:4b:8b:
                    2f:4a:81:29:bd:d3:2c:e2:dd:2d:fa:d3:f8:ad:8c:
                    5a:ea:0c:2f:13:2a:87:a7:d9:32:c0:6f:35:c2:b2:
                    3f:35:49:55:65:61:cb:71:9c:63:b2:68:37:b3:f7:
                    b3:9f:de:d0:43:86:e8:d3:06:db:31:10:4e:cb:f6:
                    b2:4a:ae:69:79:9a:06:13:e6:51:09:87:a2:49:65:
                    15:93:b7:02:77:59:05:95:be:bc:0f:2c:79:0f:4f:
                    ee:2f:70:df:88:58:7c:ba:d6:78:18:09:08:ad:f8:
                    91:3a:68:70:0b:d1:13:c6:3e:fc:8a:95:8d:a1:b0:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F0:BF:D5:EB:C4:24:C5:46:F2:0B:5A:EB:62:51:E6:4C:C8:FD:5E
            X509v3 Authority Key Identifier:
                keyid:5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a6462303a3a2f33322d3438203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:19:a9:9c:8e:6c:71:6d:73:0d:8c:23:c0:09:8a:01:09:f7:
         fd:51:6d:8d:0f:4d:c7:87:a4:6a:43:85:6b:e1:ab:97:1f:93:
         92:de:8e:8c:fa:f8:1b:83:38:f9:d3:ad:ab:42:51:bc:36:02:
         e1:a2:94:49:c0:40:ee:dd:a0:36:d5:e8:85:84:43:af:ec:88:
         65:a2:6a:a2:a4:02:6b:9c:d5:6b:90:67:29:57:56:a0:9f:c4:
         68:f9:4a:7b:fa:f2:09:82:08:9a:6e:1d:f8:4e:fd:39:b1:80:
         68:22:68:02:83:c6:b3:1d:d8:b0:17:33:a8:8c:54:7f:2a:f6:
         8a:06:d6:05:4c:7c:d9:d1:ef:99:ae:dc:bb:95:65:c9:eb:18:
         74:54:d7:7b:5e:0e:e2:86:3b:4d:1b:44:2c:e8:92:d4:b7:5e:
         25:6a:c4:b9:45:4a:c0:61:d3:23:9a:16:00:b2:4e:fe:90:99:
         55:50:2d:06:91:dc:63:9e:5e:4c:0e:d3:50:6a:41:94:39:bc:
         e7:14:be:38:5d:d9:dc:1c:e4:d9:7a:d3:ef:6c:30:86:1b:5d:
         a6:93:cd:5f:89:6b:11:d8:20:cb:41:d7:ef:a3:e0:26:9d:da:
         3f:5e:19:85:bd:f9:f6:cd:44:c4:be:e7:3f:e4:14:72:78:db:
         42:eb:4e:42
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNg9++CGLZJ/tGX4JHA+e4cohj+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1RjA0RjNDRDFERTNBODUzQzEzMDVFRjNFOTE4NUFB
QjFFNTFENTAeFw0yNTA1MTYxODQ2MzZaFw0yNjA1MTUxODUxMzZaMDMxMTAvBgNV
BAMTKEYxRjBCRkQ1RUJDNDI0QzU0NkYyMEI1QUVCNjI1MUU2NENDOEZENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lR7cLg/GK7FcX5eep2fBYW08
VcQw5FBi8fOlg8+DMH+U+bdkDHnCkv/COrOcT7xz5esO781q0Kh3bedrcokeDUXg
/fjmzUB+/fsKzrsvKFRp4ehKcepBjXjBe3hRlCb6J3EXN+sWGhlLMqUOPKR+Biyx
lGQfVhw4FIs4aaTC9QHaZ81Liy9KgSm90yzi3S360/itjFrqDC8TKoen2TLAbzXC
sj81SVVlYctxnGOyaDez97Of3tBDhujTBtsxEE7L9rJKrml5mgYT5lEJh6JJZRWT
twJ3WQWVvrwPLHkPT+4vcN+IWHy61ngYCQit+JE6aHAL0RPGPvyKlY2hsP0XAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU8fC/1evEJMVG8gta62JR5kzI/V4wHwYDVR0j
BBgwFoAUWl8E880d46hTwTBe8+kYWqseUdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC81QTVGMDRGM0NEMURFM0E4NTNDMTMwNUVGM0U5MTg1QUFCMUU1MUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNUYwNEYzQ0QxREUzQTg1
M0MxMzA1RUYzRTkxODVBQUIxRTUxRDUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzIzODMwMzQzYTY0NjIzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzODM2
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA2wMA0GCSqGSIb3DQEBCwUAA4IBAQBmGamcjmxxbXMN
jCPACYoBCff9UW2ND03Hh6RqQ4Vr4auXH5OS3o6M+vgbgzj5062rQlG8NgLhopRJ
wEDu3aA21eiFhEOv7IhlomqipAJrnNVrkGcpV1agn8Ro+Up7+vIJggiabh34Tv05
sYBoImgCg8azHdiwFzOojFR/KvaKBtYFTHzZ0e+Zrty7lWXJ6xh0VNd7Xg7ihjtN
G0Qs6JLUt14lasS5RUrAYdMjmhYAsk7+kJlVUC0Gkdxjnl5MDtNQakGUObznFL44
XdncHOTZetPvbDCGG12mk81fiWsR2CDLQdfvo+Amndo/XhmFvfn2zUTEvuc/5BRy
eNtC605C
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:06:26 2025 by rpki-client