Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33322d3332203d3e20323637393931.roa (raw, json)
Hash identifier:          o9o/rjyA5rCxD17HnU9a/wdQ42qLnYm7RbNvMyDDPSw=
Subject key identifier:   C3:48:D6:39:2E:A7:91:B7:A5:B0:F4:2F:0D:A9:50:8A:AB:CC:48:52
Certificate issuer:       /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial:       0A8487005C5D6C2BDB22E9C528FBB3ED724F184E
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa
Signing time:             Mon 24 Mar 2025 20:44:52 +0000
ROA not before:           Mon 24 Mar 2025 20:39:52 +0000
ROA not after:            Mon 23 Mar 2026 20:44:52 +0000
asID:                     267991
IP address blocks:        2804:5654::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:84:87:00:5c:5d:6c:2b:db:22:e9:c5:28:fb:b3:ed:72:4f:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
        Validity
            Not Before: Mar 24 20:39:52 2025 GMT
            Not After : Mar 23 20:44:52 2026 GMT
        Subject: CN=C348D6392EA791B7A5B0F42F0DA9508AABCC4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:0a:cf:5a:97:3c:76:53:8c:16:6d:ac:f9:
                    80:4a:68:23:2b:fe:b9:4f:d5:3e:03:db:8c:dd:25:
                    4a:69:ca:30:a0:d2:b5:a4:9c:99:ca:f6:3d:6e:3f:
                    57:0d:d4:98:56:47:05:e7:c9:0b:30:09:de:99:42:
                    e1:1a:98:25:f2:41:fe:8d:e6:62:3b:37:ee:31:78:
                    83:c7:ba:ff:1e:d7:d6:9b:91:f1:c9:0f:10:ce:89:
                    bc:42:18:a3:ba:7f:33:a2:d3:80:d5:bd:68:fc:16:
                    27:f6:5c:2a:2d:28:be:7f:f0:a9:6b:4d:0b:c8:9f:
                    c2:9f:f4:dd:a2:69:14:3f:b7:18:28:5a:28:90:e3:
                    76:b9:f4:38:a1:c2:47:f9:75:a5:b8:e9:ea:66:3e:
                    7a:f9:b5:60:69:3e:70:95:55:77:9c:1f:8f:fd:da:
                    14:2f:c3:f5:e8:7d:e8:d6:cd:95:88:8b:b9:73:40:
                    3d:25:0b:d9:e1:98:68:ac:97:34:3d:a2:06:22:7d:
                    e3:c0:19:cd:8b:5a:9b:e1:b8:e2:b2:57:9b:0a:60:
                    23:a4:11:8b:a5:f5:d8:6f:34:b0:4d:70:2f:f6:96:
                    f3:b2:bf:34:31:5a:cb:1c:c3:50:84:15:98:23:4e:
                    b7:3f:c2:cb:35:3c:f8:3b:e3:a8:0b:b2:7f:28:d4:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:D6:39:2E:A7:91:B7:A5:B0:F4:2F:0D:A9:50:8A:AB:CC:48:52
            X509v3 Authority Key Identifier:
                keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d3332203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:22:67:82:1e:4d:c9:97:14:af:5c:76:ea:f1:41:b9:8d:a6:
         d6:d3:da:c1:27:06:a7:56:11:b3:67:c2:39:92:24:95:17:7e:
         03:99:c7:23:c7:04:27:87:fa:ea:fb:d9:5b:87:86:27:cb:e2:
         55:73:6f:21:e5:fd:31:bd:51:00:a4:30:e1:98:9c:e0:3a:79:
         aa:2f:3c:27:03:68:35:1c:51:c3:2d:cf:16:ca:cd:cf:76:45:
         11:b4:dd:ed:d7:be:a7:8c:5e:32:30:d9:6a:3b:65:40:60:dc:
         fa:37:cc:2e:2c:ef:7b:52:1b:83:90:43:f6:6d:96:94:9b:17:
         17:f3:aa:4f:d0:3f:23:f3:29:48:d6:6c:6f:2b:11:96:3e:1d:
         3b:b3:64:a4:8b:99:75:d3:50:c7:b3:34:35:23:f0:f6:2f:da:
         5b:0f:ad:54:64:ec:40:24:51:59:f7:99:50:ce:42:44:1f:29:
         42:ce:45:6a:9f:59:47:61:7d:48:dc:80:4d:d3:0d:46:1a:74:
         9e:75:83:a0:e7:aa:c8:eb:1f:e5:14:27:34:82:f5:1d:c0:59:
         57:16:e2:73:c7:1e:e3:df:18:a7:e0:d1:d7:a3:62:9c:1f:ad:
         71:a4:41:70:55:39:0f:39:12:e9:33:5c:2e:7d:a2:06:fe:e4:
         2a:d7:4a:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCoSHAFxdbCvbIunFKPuz7XJPGE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyNERDMkExNkY2RkRENUExRjBCN0IzOEJGN0M3NzA3
QUUzQkFBQTAeFw0yNTAzMjQyMDM5NTJaFw0yNjAzMjMyMDQ0NTJaMDMxMTAvBgNV
BAMTKEMzNDhENjM5MkVBNzkxQjdBNUIwRjQyRjBEQTk1MDhBQUJDQzQ4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ngrPWpc8dlOMFm2s+YBKaCMr
/rlP1T4D24zdJUppyjCg0rWknJnK9j1uP1cN1JhWRwXnyQswCd6ZQuEamCXyQf6N
5mI7N+4xeIPHuv8e19abkfHJDxDOibxCGKO6fzOi04DVvWj8Fif2XCotKL5/8Klr
TQvIn8Kf9N2iaRQ/txgoWiiQ43a59Dihwkf5daW46epmPnr5tWBpPnCVVXecH4/9
2hQvw/XofejWzZWIi7lzQD0lC9nhmGislzQ9ogYifePAGc2LWpvhuOKyV5sKYCOk
EYul9dhvNLBNcC/2lvOyvzQxWsscw1CEFZgjTrc/wss1PPg746gLsn8o1CzNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw0jWOS6nkbelsPQvDalQiqvMSFIwHwYDVR0j
BBgwFoAUzyTcKhb2/dWh8Lezi/fHcHrjuqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC9DRjI0REMyQTE2RjZGREQ1QTFGMEI3QjM4QkY3Qzc3MDdBRTNCQUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMjREQzJBMTZGNkZERDVB
MUYwQjdCMzhCRjdDNzcwN0FFM0JBQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWVDANBgkqhkiG9w0BAQsFAAOCAQEAESJngh5N
yZcUr1x26vFBuY2m1tPawScGp1YRs2fCOZIklRd+A5nHI8cEJ4f66vvZW4eGJ8vi
VXNvIeX9Mb1RAKQw4Zic4Dp5qi88JwNoNRxRwy3PFsrNz3ZFEbTd7de+p4xeMjDZ
ajtlQGDc+jfMLizve1Ibg5BD9m2WlJsXF/OqT9A/I/MpSNZsbysRlj4dO7NkpIuZ
ddNQx7M0NSPw9i/aWw+tVGTsQCRRWfeZUM5CRB8pQs5Fap9ZR2F9SNyATdMNRhp0
nnWDoOeqyOsf5RQnNIL1HcBZVxbic8ce498Yp+DR16NinB+tcaRBcFU5DzkS6TNc
Ln2iBv7kKtdKJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:25 2025 by rpki-client