Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
File:                     323830343a353939343a3a2f33322d313238203d3e20323638373131.roa (raw, json)
Hash identifier:          FuYyv9eWwcbGmiBAmTY9GHW9rSIJB8PbveBWKQ2Gk6I=
Subject key identifier:   F8:82:35:23:94:26:5D:A2:36:41:5E:30:38:FF:29:58:72:A3:C4:B4
Certificate issuer:       /CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
Certificate serial:       580DE0BCC316FC6BB7A44D5B6DECEBDABC9DA9CF
Authority key identifier: C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
Signing time:             Tue 27 May 2025 13:31:58 +0000
ROA not before:           Tue 27 May 2025 13:26:58 +0000
ROA not after:            Tue 26 May 2026 13:31:58 +0000
asID:                     268711
IP address blocks:        2804:5994::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0d:e0:bc:c3:16:fc:6b:b7:a4:4d:5b:6d:ec:eb:da:bc:9d:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
        Validity
            Not Before: May 27 13:26:58 2025 GMT
            Not After : May 26 13:31:58 2026 GMT
        Subject: CN=F882352394265DA236415E3038FF295872A3C4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:06:b0:6b:0c:43:d8:ab:19:45:bd:28:75:
                    07:a1:82:35:7b:3b:67:fa:36:dc:a5:d1:42:fe:56:
                    7e:e9:dc:01:49:04:14:f1:8f:75:05:ef:7f:45:dd:
                    96:b0:0f:c4:83:9a:2f:97:03:84:80:2f:19:5d:86:
                    f2:91:14:01:e3:44:80:3a:47:73:ba:91:d4:a5:02:
                    57:d2:51:54:a6:7d:10:61:fe:2b:59:37:75:5b:da:
                    94:cc:ee:b7:4c:a3:60:20:ae:df:40:6d:09:11:ff:
                    b9:39:8c:e4:58:e2:42:49:a1:3f:ae:60:21:27:6a:
                    56:6f:45:0a:26:d2:35:5a:fb:73:be:36:0d:d0:49:
                    b0:60:af:b3:09:35:f2:cf:b4:52:15:cd:0d:0f:a0:
                    0d:89:f2:04:3d:51:96:b9:40:10:a0:2b:e4:5c:f7:
                    d8:7c:12:61:15:45:02:92:58:b8:2d:9a:8f:c1:f3:
                    db:63:22:50:24:30:d1:64:35:67:b4:33:b0:e9:4c:
                    ea:c9:73:da:8d:f2:e2:a1:b8:0c:ad:fb:64:6a:e8:
                    2f:60:1e:8c:87:b5:29:f0:1c:c7:bb:3b:f7:7c:27:
                    f1:0a:bd:1b:4d:cc:c9:0d:76:93:c1:45:72:41:ed:
                    4f:aa:ec:2c:cf:0b:91:fd:3f:39:5a:ab:77:10:ca:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:35:23:94:26:5D:A2:36:41:5E:30:38:FF:29:58:72:A3:C4:B4
            X509v3 Authority Key Identifier:
                keyid:C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5994::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:df:3d:b0:dd:6f:3a:5e:1c:8e:5b:ba:09:73:88:a8:83:
         f5:80:30:ca:c6:84:29:cd:07:6d:8a:87:3b:0b:c7:98:c7:8d:
         de:50:00:e5:d5:5e:1c:e8:bb:c0:4c:fa:6f:40:6e:35:d3:7b:
         cc:67:46:58:67:64:1b:97:01:fe:ca:79:9f:2f:c4:3c:a3:8f:
         de:25:36:9d:2e:9e:f9:bf:ac:e5:56:66:a2:b6:ed:8e:4c:30:
         9f:65:31:bc:4f:75:18:7e:13:ff:9b:f8:56:00:dc:5b:50:9f:
         3f:a8:40:70:d9:4d:f7:b6:27:f4:86:ff:9f:0e:78:2a:cc:55:
         61:72:9f:40:8e:73:e4:86:5c:62:a0:15:47:30:ad:49:91:60:
         5c:d6:b6:73:65:36:29:12:4e:57:be:8d:6c:68:bc:4c:2e:2f:
         d9:fd:ab:9a:16:e2:f6:b6:53:14:48:cb:01:e7:de:89:a6:64:
         b8:5f:ca:76:65:74:28:aa:7c:76:07:92:c0:42:6e:87:e3:39:
         99:04:92:17:0a:be:ef:73:45:59:2f:fd:d5:59:ae:1c:e2:a7:
         c7:fc:cb:c3:bc:98:c8:7c:b3:11:c1:59:98:c4:03:61:10:91:
         30:90:57:36:d8:dd:d8:ce:81:ae:0e:88:a2:c5:35:50:1f:0d:
         fe:d6:15:23
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWA3gvMMW/Gu3pE1bbezr2rydqc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRBNjQ2NkQ5MzE1RjAyMjE1MkIyQTc1RUYwRTRFMzY4
MEY5NTkzQzAeFw0yNTA1MjcxMzI2NThaFw0yNjA1MjYxMzMxNThaMDMxMTAvBgNV
BAMTKEY4ODIzNTIzOTQyNjVEQTIzNjQxNUUzMDM4RkYyOTU4NzJBM0M0QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoQawawxD2KsZRb0odQehgjV7
O2f6Ntyl0UL+Vn7p3AFJBBTxj3UF739F3ZawD8SDmi+XA4SALxldhvKRFAHjRIA6
R3O6kdSlAlfSUVSmfRBh/itZN3Vb2pTM7rdMo2Agrt9AbQkR/7k5jORY4kJJoT+u
YCEnalZvRQom0jVa+3O+Ng3QSbBgr7MJNfLPtFIVzQ0PoA2J8gQ9UZa5QBCgK+Rc
99h8EmEVRQKSWLgtmo/B89tjIlAkMNFkNWe0M7DpTOrJc9qN8uKhuAyt+2Rq6C9g
HoyHtSnwHMe7O/d8J/EKvRtNzMkNdpPBRXJB7U+q7CzPC5H9Pzlaq3cQymaNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+II1I5QmXaI2QV4wOP8pWHKjxLQwHwYDVR0j
BBgwFoAUxKZGbZMV8CIVKyp17w5ONoD5WTwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRD
RWEvMC9DNEE2NDY2RDkzMTVGMDIyMTUyQjJBNzVFRjBFNEUzNjgwRjk1OTNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QTY0NjZEOTMxNUYwMjIx
NTJCMkE3NUVGMEU0RTM2ODBGOTU5M0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAv
MzIzODMwMzQzYTM1MzkzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFmUMA0GCSqGSIb3DQEBCwUAA4IBAQBc7989
sN1vOl4cjlu6CXOIqIP1gDDKxoQpzQdtioc7C8eYx43eUADl1V4c6LvATPpvQG41
03vMZ0ZYZ2QblwH+ynmfL8Q8o4/eJTadLp75v6zlVmaitu2OTDCfZTG8T3UYfhP/
m/hWANxbUJ8/qEBw2U33tif0hv+fDngqzFVhcp9AjnPkhlxioBVHMK1JkWBc1rZz
ZTYpEk5Xvo1saLxMLi/Z/auaFuL2tlMUSMsB596JpmS4X8p2ZXQoqnx2B5LAQm6H
4zmZBJIXCr7vc0VZL/3VWa4c4qfH/MvDvJjIfLMRwVmYxANhEJEwkFc22N3YzoGu
DoiixTVQHw3+1hUj
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:30:39 2025 by rpki-client