Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa
File:                     323830343a346262383a3a2f33322d3438203d3e20323637333236.roa (raw, json)
Hash identifier:          eVV9ymhkk5Fl9Ahr4ftcwuexgRJiJqnPiylo5pGxB6U=
Subject key identifier:   14:2A:CE:BD:EA:B7:03:4B:10:7E:26:F5:EC:27:BA:45:54:E2:09:F6
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       7D1A21CC5BD5263C7C56A3E693A78BF6ACC52D7C
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa
Signing time:             Thu 06 Mar 2025 03:20:11 +0000
ROA not before:           Thu 06 Mar 2025 03:15:11 +0000
ROA not after:            Thu 05 Mar 2026 03:20:11 +0000
asID:                     267326
IP address blocks:        2804:4bb8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 12:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:21:cc:5b:d5:26:3c:7c:56:a3:e6:93:a7:8b:f6:ac:c5:2d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Mar  6 03:15:11 2025 GMT
            Not After : Mar  5 03:20:11 2026 GMT
        Subject: CN=142ACEBDEAB7034B107E26F5EC27BA4554E209F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:fc:c2:ef:90:46:7e:e4:ea:b7:2d:9f:f2:
                    a1:11:c9:0a:b5:98:b6:db:23:c5:04:79:5d:ad:0c:
                    0a:19:e7:5e:74:c0:26:4d:01:35:36:88:9f:0b:93:
                    c2:07:8b:5c:53:46:b1:87:c3:18:9d:e4:db:98:cb:
                    ad:13:e8:36:f0:85:d8:77:fd:86:18:bb:0c:0c:1e:
                    cc:c9:e3:3a:b1:3f:a0:6a:36:cb:93:06:71:2f:2f:
                    a7:92:dc:a2:d9:7c:b3:f5:d1:1d:11:62:85:96:78:
                    b3:aa:5a:79:9a:6f:bd:84:f7:8b:28:55:95:2a:1f:
                    ab:80:9e:56:34:c1:18:cb:62:76:b0:21:e5:92:54:
                    02:10:44:ac:2f:a8:5d:d6:2c:fa:79:1a:5d:7b:28:
                    cc:d6:4e:b7:0b:45:26:bd:54:36:53:0a:d2:cb:87:
                    fb:a6:4e:ff:9c:5d:cf:9c:a1:83:32:89:f8:40:7b:
                    52:9f:d7:f0:41:88:6f:c5:95:fe:cf:20:1c:8f:22:
                    8b:dd:59:f3:0f:85:5e:12:78:21:8d:69:98:9c:d6:
                    72:39:44:6a:89:4d:7b:36:76:22:98:cb:0b:21:60:
                    31:c4:a1:2d:6a:19:8e:21:ae:f2:63:9d:9d:a7:7a:
                    83:a4:25:a4:35:ab:9b:f3:13:15:8a:39:7f:ed:06:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:CE:BD:EA:B7:03:4B:10:7E:26:F5:EC:27:BA:45:54:E2:09:F6
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:e9:88:ba:2b:cc:45:f2:95:1a:ca:1d:a5:42:ef:7e:c4:83:
         9b:ea:a0:e9:ba:2b:ee:bb:82:3a:cc:fc:1c:d5:c4:a0:1d:06:
         79:2e:94:c9:4e:cf:43:60:df:29:e9:84:f4:3a:3a:ed:51:83:
         f7:a8:7a:8b:0c:5d:af:1a:00:a8:2e:b3:6b:05:d1:b1:f0:e5:
         61:9f:39:88:33:88:cf:75:50:52:6b:21:69:bb:24:ac:2c:2d:
         2c:78:3e:21:3a:5a:44:92:a1:fe:a0:e1:86:12:06:15:ae:7c:
         b1:01:2a:72:d2:18:b9:99:81:6b:1a:82:e7:a1:d4:ad:35:bb:
         88:40:dd:2b:dc:d7:a6:d6:26:02:8f:e4:7d:6c:07:d1:c7:82:
         75:bb:5f:e5:a6:6e:d6:f1:64:09:af:b9:f8:33:3e:2d:e3:ee:
         45:9c:fd:d7:47:61:68:14:84:5a:33:9e:c4:16:4f:7b:b3:09:
         48:69:41:da:20:d5:b1:46:de:f9:04:c2:0a:d9:1a:5d:e4:9a:
         6a:c8:2b:12:eb:87:28:17:18:d6:61:bd:bb:b3:ae:56:e9:c0:
         ec:d3:7f:08:39:41:68:29:a7:28:59:96:dd:12:bc:bd:dd:52:
         30:31:21:48:6b:cd:0c:37:f1:ed:65:72:5a:19:1f:44:d9:e9:
         c1:bf:d2:16
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfRohzFvVJjx8VqPmk6eL9qzFLXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3QzgyRkNEOTFBMTFDRTVBOTVEQ0Y4MDcwNjk5MkNG
OUQyOTJFQzAeFw0yNTAzMDYwMzE1MTFaFw0yNjAzMDUwMzIwMTFaMDMxMTAvBgNV
BAMTKDE0MkFDRUJERUFCNzAzNEIxMDdFMjZGNUVDMjdCQTQ1NTRFMjA5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSfzC75BGfuTqty2f8qERyQq1
mLbbI8UEeV2tDAoZ5150wCZNATU2iJ8Lk8IHi1xTRrGHwxid5NuYy60T6Dbwhdh3
/YYYuwwMHszJ4zqxP6BqNsuTBnEvL6eS3KLZfLP10R0RYoWWeLOqWnmab72E94so
VZUqH6uAnlY0wRjLYnawIeWSVAIQRKwvqF3WLPp5Gl17KMzWTrcLRSa9VDZTCtLL
h/umTv+cXc+coYMyifhAe1Kf1/BBiG/Flf7PIByPIovdWfMPhV4SeCGNaZic1nI5
RGqJTXs2diKYywshYDHEoS1qGY4hrvJjnZ2neoOkJaQ1q5vzExWKOX/tBl6rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFCrOveq3A0sQfib17Ce6RVTiCfYwHwYDVR0j
BBgwFoAUvnyC/NkaEc5aldz4BwaZLPnSkuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzZkU4UzQ0ZjcxR01nN1FrajVKWEFrWG1kbXZHaFljTFo4c3pvQ2JE
OGMvMS9CRTdDODJGQ0Q5MUExMUNFNUE5NURDRjgwNzA2OTkyQ0Y5RDI5MkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFN0M4MkZDRDkxQTExQ0U1
QTk1RENGODA3MDY5OTJDRjlEMjkyRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2ZFOFM0NGY3MUdNZzdRa2o1SlhBa1htZG12R2hZY0xaOHN6b0NiRDhjLzEv
MzIzODMwMzQzYTM0NjI2MjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzMzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLuDANBgkqhkiG9w0BAQsFAAOCAQEAxemIuivM
RfKVGsodpULvfsSDm+qg6bor7ruCOsz8HNXEoB0GeS6UyU7PQ2DfKemE9Do67VGD
96h6iwxdrxoAqC6zawXRsfDlYZ85iDOIz3VQUmshabskrCwtLHg+ITpaRJKh/qDh
hhIGFa58sQEqctIYuZmBaxqC56HUrTW7iEDdK9zXptYmAo/kfWwH0ceCdbtf5aZu
1vFkCa+5+DM+LePuRZz910dhaBSEWjOexBZPe7MJSGlB2iDVsUbe+QTCCtkaXeSa
asgrEuuHKBcY1mG9u7OuVunA7NN/CDlBaCmnKFmW3RK8vd1SMDEhSGvNDDfx7WVy
WhkfRNnpwb/SFg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:24:58 2025 by rpki-client