Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
File:                     323830343a313431633a3a2f33322d313238203d3e203533313330.roa (raw, json)
Hash identifier:          cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=
Subject key identifier:   3B:4B:13:F3:5A:9C:F0:D5:1C:8A:30:E3:A1:74:98:74:5B:6D:6D:4D
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       7588CE0292BDB12FBF986915C82C0EAB47A7CFAC
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
Signing time:             Thu 06 Mar 2025 05:59:43 +0000
ROA not before:           Thu 06 Mar 2025 05:54:43 +0000
ROA not after:            Thu 05 Mar 2026 05:59:43 +0000
asID:                     53130
IP address blocks:        2804:141c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:ce:02:92:bd:b1:2f:bf:98:69:15:c8:2c:0e:ab:47:a7:cf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Mar  6 05:54:43 2025 GMT
            Not After : Mar  5 05:59:43 2026 GMT
        Subject: CN=3B4B13F35A9CF0D51C8A30E3A17498745B6D6D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:34:80:e5:6a:d3:ef:3f:2c:f9:23:6f:4d:
                    d3:50:25:94:5e:11:a6:9c:05:ca:68:70:69:8a:d6:
                    fd:42:b2:09:6c:f8:69:a9:75:18:25:d3:d6:f4:80:
                    8d:82:76:bb:ed:c5:5a:52:31:4c:e7:71:83:df:29:
                    2e:8c:d1:a6:22:93:eb:03:3b:bb:02:c3:23:22:50:
                    89:ef:b3:de:c2:fa:b0:dc:3a:cf:ae:7d:d9:62:39:
                    3b:05:8b:46:16:cf:f3:d0:ff:76:0a:cf:a6:92:7c:
                    75:0a:d8:40:69:dd:db:2b:a7:d1:0a:4a:87:0a:f9:
                    ee:fc:7d:50:d2:79:24:e7:a8:4d:ea:9d:51:98:15:
                    f3:9a:0d:a8:b2:65:2a:7f:3c:8f:c5:12:da:6a:ea:
                    51:62:d6:93:58:99:bf:d6:d3:37:1a:25:ce:54:08:
                    97:53:41:88:2c:42:34:1c:af:6c:13:40:79:cd:35:
                    fa:3c:dd:34:02:8d:1c:f3:8e:3f:c8:12:a3:d3:10:
                    a5:03:28:21:69:69:76:db:08:5f:71:4f:fa:c4:be:
                    bc:5b:92:20:af:98:eb:d3:38:62:18:87:56:15:1d:
                    3a:95:67:d2:8f:15:7c:39:e0:60:65:cb:a6:88:2f:
                    11:0b:af:cf:06:fc:7c:5a:4b:e4:17:eb:e2:96:1b:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:13:F3:5A:9C:F0:D5:1C:8A:30:E3:A1:74:98:74:5B:6D:6D:4D
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:141c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:f7:26:5e:59:a7:44:55:a2:64:fe:bc:07:45:f2:31:f6:
         9e:19:69:70:21:51:ac:27:c9:ee:80:ad:53:2a:fa:48:94:9d:
         4c:13:7e:90:61:62:9f:1e:a6:35:cb:c5:58:64:a7:c5:7f:13:
         28:91:55:db:b1:72:74:97:eb:c9:d7:de:ae:f2:6b:f7:1a:d3:
         73:72:5a:da:2b:ea:a2:4f:5e:07:01:15:97:ac:20:67:b0:af:
         35:37:07:21:96:1f:31:16:37:08:58:29:27:be:45:cc:b3:80:
         0a:51:3a:ff:ee:0f:17:6a:d7:35:f3:ca:1b:3c:6b:d1:11:57:
         28:1e:4b:e2:31:46:e0:65:4b:1a:fe:60:72:f9:fe:e2:77:68:
         aa:9c:32:d4:77:7f:d4:5f:68:0c:fb:0c:ba:b8:07:cb:4d:ce:
         e6:3c:31:37:c7:bd:1c:75:e5:dc:08:d2:db:62:4f:78:c4:d9:
         b5:6d:66:3b:98:65:f5:e3:9e:10:87:d6:c6:05:29:ee:14:39:
         5c:33:e8:56:29:36:0a:63:f1:0d:23:99:2c:93:be:2b:a2:3f:
         9b:f0:64:6b:d3:7b:8b:7e:46:22:85:6f:97:76:29:f4:0a:2b:
         83:82:16:9e:9d:54:17:8c:bf:fe:5f:b9:27:48:18:70:e4:fd:
         ef:ea:1b:14
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdYjOApK9sS+/mGkVyCwOq0enz6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4
MjFCRjZFRDAeFw0yNTAzMDYwNTU0NDNaFw0yNjAzMDUwNTU5NDNaMDMxMTAvBgNV
BAMTKDNCNEIxM0YzNUE5Q0YwRDUxQzhBMzBFM0ExNzQ5ODc0NUI2RDZENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdjSA5WrT7z8s+SNvTdNQJZRe
EaacBcpocGmK1v1Csgls+GmpdRgl09b0gI2CdrvtxVpSMUzncYPfKS6M0aYik+sD
O7sCwyMiUInvs97C+rDcOs+ufdliOTsFi0YWz/PQ/3YKz6aSfHUK2EBp3dsrp9EK
SocK+e78fVDSeSTnqE3qnVGYFfOaDaiyZSp/PI/FEtpq6lFi1pNYmb/W0zcaJc5U
CJdTQYgsQjQcr2wTQHnNNfo83TQCjRzzjj/IEqPTEKUDKCFpaXbbCF9xT/rEvrxb
kiCvmOvTOGIYh1YVHTqVZ9KPFXw54GBly6aILxELr88G/HxaS+QX6+KWG7H1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUO0sT81qc8NUcijDjoXSYdFttbU0wHwYDVR0j
BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM
NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD
NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RSOEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzEv
MzIzODMwMzQzYTMxMzQzMTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMz
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUHDANBgkqhkiG9w0BAQsFAAOCAQEAO+f3Jl5Z
p0RVomT+vAdF8jH2nhlpcCFRrCfJ7oCtUyr6SJSdTBN+kGFinx6mNcvFWGSnxX8T
KJFV27FydJfrydfervJr9xrTc3Ja2ivqok9eBwEVl6wgZ7CvNTcHIZYfMRY3CFgp
J75FzLOAClE6/+4PF2rXNfPKGzxr0RFXKB5L4jFG4GVLGv5gcvn+4ndoqpwy1Hd/
1F9oDPsMurgHy03O5jwxN8e9HHXl3AjS22JPeMTZtW1mO5hl9eOeEIfWxgUp7hQ5
XDPoVik2CmPxDSOZLJO+K6I/m/Bka9N7i35GIoVvl3Yp9Aorg4IWnp1UF4y//l+5
J0gYcOT97+obFA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:19:07 2025 by rpki-client