Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa
File:                     323830343a313662303a3a2f33322d3438203d3e203631393130.roa (raw, json)
Hash identifier:          Xjc1+FVOpeF46yKHBEhIOGvLIwRAZZPjfVgdZSSgN5Q=
Subject key identifier:   B5:AA:4A:23:F5:4F:64:93:6B:6F:EC:6E:DA:E7:8D:7A:7E:DC:D2:BD
Certificate issuer:       /CN=18330DC0F98F298BD4E31F45E07E665325C9862F
Certificate serial:       0EE96416C6120F3AE4DDA3061DA8322DADFDAF60
Authority key identifier: 18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa
Signing time:             Fri 24 Jan 2025 18:24:14 +0000
ROA not before:           Fri 24 Jan 2025 18:19:14 +0000
ROA not after:            Fri 23 Jan 2026 18:24:14 +0000
asID:                     61910
IP address blocks:        2804:16b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl
                          rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e9:64:16:c6:12:0f:3a:e4:dd:a3:06:1d:a8:32:2d:ad:fd:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18330DC0F98F298BD4E31F45E07E665325C9862F
        Validity
            Not Before: Jan 24 18:19:14 2025 GMT
            Not After : Jan 23 18:24:14 2026 GMT
        Subject: CN=B5AA4A23F54F64936B6FEC6EDAE78D7A7EDCD2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:a5:92:36:c2:6b:2f:0c:dd:7a:ff:f9:0c:
                    0b:b3:01:57:4d:af:66:59:a1:05:58:fa:07:5b:b8:
                    c5:bb:45:2c:b1:b4:2b:03:2a:61:4f:02:e9:25:c4:
                    2d:c7:ae:29:6d:12:a0:f0:cf:88:31:6d:21:7a:0b:
                    77:57:fc:f4:7e:0d:53:c5:f3:2e:20:cd:fd:65:28:
                    82:17:a8:98:dd:07:e0:49:55:d8:f4:50:8e:2e:55:
                    51:c2:bc:58:a9:d4:b0:60:f1:2e:0a:d8:22:07:f7:
                    a4:7b:95:da:3e:93:b7:5c:22:a7:44:0b:92:0f:0c:
                    21:82:a4:8c:21:a7:6c:e0:9f:f9:10:da:c3:cf:10:
                    15:b4:1e:4b:a2:53:04:62:82:06:4d:30:a2:bd:32:
                    f5:0e:17:1a:bc:e1:92:77:0e:29:4f:ff:7f:a7:92:
                    cf:42:f7:91:6b:5f:22:ab:73:4e:55:38:f2:2b:aa:
                    6e:14:14:ae:2f:2d:4d:50:87:5b:a3:f5:88:dc:2c:
                    97:96:c5:18:ff:8c:6b:ad:1f:e5:95:e0:3a:05:e5:
                    46:96:1c:8a:8f:6a:1b:c0:7d:9a:42:14:c9:49:b9:
                    1f:84:61:09:8e:0c:9f:06:84:75:9d:a1:15:1c:56:
                    12:9a:29:47:09:ad:91:25:e1:1a:5c:41:0b:e1:47:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:4A:23:F5:4F:64:93:6B:6F:EC:6E:DA:E7:8D:7A:7E:DC:D2:BD
            X509v3 Authority Key Identifier:
                keyid:18:33:0D:C0:F9:8F:29:8B:D4:E3:1F:45:E0:7E:66:53:25:C9:86:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/18330DC0F98F298BD4E31F45E07E665325C9862F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18330DC0F98F298BD4E31F45E07E665325C9862F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/0/323830343a313662303a3a2f33322d3438203d3e203631393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:e3:ef:39:5a:70:97:59:28:c6:3b:3c:60:5c:a9:a8:47:
         24:ae:7e:ab:0a:2b:bb:9a:96:17:07:5f:4b:1d:6b:38:83:e6:
         54:83:7b:4f:ef:3a:ae:97:21:86:04:07:89:a1:d2:ae:83:3c:
         0e:73:b8:2e:fe:3e:dd:fc:2f:2e:36:86:81:db:b3:3e:21:2d:
         cc:42:1d:78:84:de:58:d4:dc:ab:6d:0a:8c:e1:a3:bc:e9:1a:
         b4:00:92:c8:4d:e6:e0:2b:6a:2e:2e:bf:63:1f:75:4d:59:1f:
         dd:1f:dd:9d:cf:d1:fb:21:b6:00:46:08:33:08:0d:c5:cf:47:
         4b:d4:fe:d6:f4:cd:31:a0:99:99:1d:91:82:a8:d8:cf:04:ea:
         7a:8b:c1:1d:da:0a:17:9b:03:c0:25:21:66:3f:8d:06:95:c0:
         c3:30:1b:a0:34:dd:c3:6b:19:6c:b0:a2:3e:4a:cd:2b:62:47:
         9e:08:cf:30:83:cf:c7:35:83:af:9b:6a:61:a9:07:74:0f:f8:
         6b:8a:92:d4:29:a1:6e:c5:ef:48:79:93:6d:44:76:a8:ad:61:
         24:a5:a7:e1:d2:88:8f:fa:7d:de:eb:79:53:f7:c8:76:fb:f2:
         50:9b:99:4e:c8:9a:c7:bf:62:18:25:89:ef:47:b0:1d:9e:55:
         bd:ce:0e:5c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDulkFsYSDzrk3aMGHagyLa39r2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgzMzBEQzBGOThGMjk4QkQ0RTMxRjQ1RTA3RTY2NTMy
NUM5ODYyRjAeFw0yNTAxMjQxODE5MTRaFw0yNjAxMjMxODI0MTRaMDMxMTAvBgNV
BAMTKEI1QUE0QTIzRjU0RjY0OTM2QjZGRUM2RURBRTc4RDdBN0VEQ0QyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUKWSNsJrLwzdev/5DAuzAVdN
r2ZZoQVY+gdbuMW7RSyxtCsDKmFPAuklxC3HriltEqDwz4gxbSF6C3dX/PR+DVPF
8y4gzf1lKIIXqJjdB+BJVdj0UI4uVVHCvFip1LBg8S4K2CIH96R7ldo+k7dcIqdE
C5IPDCGCpIwhp2zgn/kQ2sPPEBW0HkuiUwRiggZNMKK9MvUOFxq84ZJ3DilP/3+n
ks9C95FrXyKrc05VOPIrqm4UFK4vLU1Qh1uj9YjcLJeWxRj/jGutH+WV4DoF5UaW
HIqPahvAfZpCFMlJuR+EYQmODJ8GhHWdoRUcVhKaKUcJrZEl4RpcQQvhR965AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUtapKI/VPZJNrb+xu2ueNen7c0r0wHwYDVR0j
BBgwFoAUGDMNwPmPKYvU4x9F4H5mUyXJhi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZvaDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldr
aWsvMC8xODMzMERDMEY5OEYyOThCRDRFMzFGNDVFMDdFNjY1MzI1Qzk4NjJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MzMwREMwRjk4RjI5OEJE
NEUzMUY0NUUwN0U2NjUzMjVDOTg2MkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jmb2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzAv
MzIzODMwMzQzYTMxMzY2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM5
MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFrAwDQYJKoZIhvcNAQELBQADggEBAKS24+85WnCX
WSjGOzxgXKmoRySufqsKK7ualhcHX0sdaziD5lSDe0/vOq6XIYYEB4mh0q6DPA5z
uC7+Pt38Ly42hoHbsz4hLcxCHXiE3ljU3KttCozho7zpGrQAkshN5uArai4uv2Mf
dU1ZH90f3Z3P0fshtgBGCDMIDcXPR0vU/tb0zTGgmZkdkYKo2M8E6nqLwR3aCheb
A8AlIWY/jQaVwMMwG6A03cNrGWywoj5KzStiR54IzzCDz8c1g6+bamGpB3QP+GuK
ktQpoW7F70h5k21EdqitYSSlp+HSiI/6fd7reVP3yHb78lCbmU7Imse/Yhglie9H
sB2eVb3ODlw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:16 2025 by rpki-client