Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa
File:                     323830343a316136383a3a2f33322d3438203d3e20323632343230.roa (raw, json)
Hash identifier:          LlkZ591xz040ibzvcAdsTxakHfPDHZeCq7xMRK8NuQk=
Subject key identifier:   55:F0:6D:BB:EE:15:61:9A:6C:CE:D0:E2:BD:F8:DD:FC:7C:F2:54:C2
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       7DC80CDD2583603D028970CBC9E84C1C3C23C958
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa
Signing time:             Mon 10 Feb 2025 14:31:16 +0000
ROA not before:           Mon 10 Feb 2025 14:26:16 +0000
ROA not after:            Mon 09 Feb 2026 14:31:16 +0000
asID:                     262420
IP address blocks:        2804:1a68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c8:0c:dd:25:83:60:3d:02:89:70:cb:c9:e8:4c:1c:3c:23:c9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:26:16 2025 GMT
            Not After : Feb  9 14:31:16 2026 GMT
        Subject: CN=55F06DBBEE15619A6CCED0E2BDF8DDFC7CF254C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:c2:32:33:14:5d:f3:95:09:c2:62:21:b3:
                    b6:78:b2:8e:c8:5a:a4:67:d1:cb:b3:dc:ad:4d:ab:
                    f2:61:99:65:19:0b:19:e0:2e:43:9a:79:be:be:d9:
                    f5:73:9c:81:ad:8f:4a:d6:6f:4f:2c:d2:e0:68:a0:
                    20:2c:d0:ee:9f:a2:7a:44:8c:9b:ca:c1:e9:48:9f:
                    bb:3d:90:75:cb:80:28:85:82:a0:43:25:aa:48:53:
                    ba:72:bf:fb:93:33:11:62:16:aa:67:5b:7a:3b:a7:
                    2a:1f:42:ff:ad:17:6c:ba:fa:c1:73:58:34:8c:c4:
                    57:35:b7:0e:77:b7:5a:9d:c7:05:d7:ab:7e:c8:11:
                    3e:8f:09:a6:f7:69:1b:76:56:89:9c:35:98:17:ef:
                    0b:67:68:23:61:93:f9:31:54:ae:76:37:64:3a:06:
                    bd:6f:a0:f9:da:d7:63:39:65:b9:dd:06:06:9a:73:
                    18:5b:40:53:13:b4:03:22:64:63:5d:9a:a1:3a:5b:
                    5c:fc:3b:12:fe:7b:51:82:51:0a:d7:21:10:bd:12:
                    5e:b5:c2:b7:bb:ea:8b:04:ef:c3:fc:ef:54:59:79:
                    89:17:bc:e0:f4:14:15:6c:7a:82:5f:3f:0f:cb:88:
                    5d:1b:34:8d:7d:f4:9b:f2:e5:bb:de:9c:54:20:e3:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:6D:BB:EE:15:61:9A:6C:CE:D0:E2:BD:F8:DD:FC:7C:F2:54:C2
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a3a2f33322d3438203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a68::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:58:6d:ea:c3:73:ad:70:3c:da:ef:d7:28:5a:0d:79:1e:b2:
         c4:34:1a:e7:05:7d:8d:eb:96:5c:0c:c9:79:93:1b:9c:84:db:
         4f:66:0b:7c:52:50:7b:6f:cb:bb:e3:e6:cc:aa:4a:3e:64:4b:
         9c:55:51:3f:de:38:c7:81:78:61:9c:09:d1:ae:18:ba:9a:db:
         f6:94:fe:a7:36:16:64:64:14:79:63:b9:22:ec:11:ce:ee:b0:
         93:65:a6:5b:85:7e:3d:37:7c:eb:98:cd:33:de:03:7d:6d:d1:
         7b:7b:e9:bb:e4:e1:d6:55:5d:a6:81:82:45:be:cb:f8:ad:40:
         36:03:e8:b8:8a:56:fb:42:40:44:01:fa:cd:1c:d0:20:b3:94:
         41:d1:29:a0:c4:c1:1a:fd:04:e1:ba:0e:cd:a2:02:18:32:99:
         d2:89:28:43:57:10:4a:70:90:cd:97:ae:a3:de:3f:4c:cf:ac:
         11:d8:81:47:83:a5:f8:18:b3:d4:94:78:16:f6:6f:c0:7a:c2:
         c3:59:43:77:37:86:c5:a4:25:4b:4f:f2:27:b0:97:68:42:bf:
         4d:df:1d:95:59:18:fc:d9:32:70:fd:a0:bc:ae:36:31:87:c1:
         57:0d:2a:0f:1b:33:66:25:42:14:bc:b5:61:ed:02:86:a4:14:
         cc:9f:bf:39
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfcgM3SWDYD0CiXDLyehMHDwjyVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDI2MTZaFw0yNjAyMDkxNDMxMTZaMDMxMTAvBgNV
BAMTKDU1RjA2REJCRUUxNTYxOUE2Q0NFRDBFMkJERjhEREZDN0NGMjU0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERcIyMxRd85UJwmIhs7Z4so7I
WqRn0cuz3K1Nq/JhmWUZCxngLkOaeb6+2fVznIGtj0rWb08s0uBooCAs0O6fonpE
jJvKwelIn7s9kHXLgCiFgqBDJapIU7pyv/uTMxFiFqpnW3o7pyofQv+tF2y6+sFz
WDSMxFc1tw53t1qdxwXXq37IET6PCab3aRt2VomcNZgX7wtnaCNhk/kxVK52N2Q6
Br1voPna12M5ZbndBgaacxhbQFMTtAMiZGNdmqE6W1z8OxL+e1GCUQrXIRC9El61
wre76osE78P871RZeYkXvOD0FBVseoJfPw/LiF0bNI199Jvy5bvenFQg4yVfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUVfBtu+4VYZpsztDivfjd/HzyVMIwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzIzODMwMzQzYTMxNjEzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzQzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQaaDANBgkqhkiG9w0BAQsFAAOCAQEAg1ht6sNz
rXA82u/XKFoNeR6yxDQa5wV9jeuWXAzJeZMbnITbT2YLfFJQe2/Lu+PmzKpKPmRL
nFVRP944x4F4YZwJ0a4Yuprb9pT+pzYWZGQUeWO5IuwRzu6wk2WmW4V+PTd865jN
M94DfW3Re3vpu+Th1lVdpoGCRb7L+K1ANgPouIpW+0JARAH6zRzQILOUQdEpoMTB
Gv0E4boOzaICGDKZ0okoQ1cQSnCQzZeuo94/TM+sEdiBR4Ol+Biz1JR4FvZvwHrC
w1lDdzeGxaQlS0/yJ7CXaEK/Td8dlVkY/NkycP2gvK42MYfBVw0qDxszZiVCFLy1
Ye0ChqQUzJ+/OQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 11:31:34 2025 by rpki-client