Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
File:                     323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (raw, json)
Hash identifier:          cXUKgwkHmIVs0YsO9hKZSLfuZAgMe8nKbeE7rT1Twos=
Subject key identifier:   27:E8:48:3E:71:06:9D:48:C9:55:3D:72:AA:4D:02:05:DC:8A:73:FA
Certificate issuer:       /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
Certificate serial:       568E46BD481C2D800E14C012C451F808989E941C
Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
Signing time:             Thu 06 Mar 2025 03:05:59 +0000
ROA not before:           Thu 06 Mar 2025 03:00:59 +0000
ROA not after:            Thu 05 Mar 2026 03:05:59 +0000
asID:                     263566
IP address blocks:        2804:f18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl
                          rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8e:46:bd:48:1c:2d:80:0e:14:c0:12:c4:51:f8:08:98:9e:94:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
        Validity
            Not Before: Mar  6 03:00:59 2025 GMT
            Not After : Mar  5 03:05:59 2026 GMT
        Subject: CN=27E8483E71069D48C9553D72AA4D0205DC8A73FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:ef:eb:4f:47:b3:be:70:45:59:4f:bf:ab:
                    e0:22:7e:a4:68:a1:b3:27:59:e1:7d:e3:d6:3f:ca:
                    72:23:31:a5:2b:f1:27:a0:56:7e:f1:64:66:1a:bd:
                    f1:c0:23:3c:dd:66:4f:0a:55:18:4d:e1:f6:62:8e:
                    ea:33:7e:f5:7b:5a:0a:fe:4d:9f:07:42:6f:6c:19:
                    ae:62:4c:39:f3:f9:ee:81:ce:82:68:bc:f7:67:41:
                    65:3d:48:cd:97:69:e0:4b:03:d6:a2:f4:73:2a:bc:
                    db:5e:2a:c3:e7:48:a4:f3:2c:a4:87:38:33:64:07:
                    32:9a:5a:37:e4:32:a5:f3:16:47:1c:e7:91:25:a7:
                    1e:a9:07:e7:6c:09:9d:b0:5e:12:2d:bb:28:f1:89:
                    e3:e7:84:2a:2d:b9:b7:63:39:90:5b:5a:b8:fb:c9:
                    0a:68:b9:2b:fb:ed:ac:97:e6:49:17:9d:60:35:ef:
                    62:c7:19:d7:62:49:99:09:17:fe:e7:67:27:66:5f:
                    94:52:01:d1:69:7f:6d:59:bc:ef:cf:44:36:2c:fa:
                    63:da:17:74:6f:5b:60:8d:3f:ee:11:8a:c9:00:df:
                    6d:7f:5b:ac:a5:94:12:48:48:83:a7:32:7e:d8:86:
                    3e:2a:d4:28:d2:82:28:b6:f1:82:19:60:60:b2:91:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:48:3E:71:06:9D:48:C9:55:3D:72:AA:4D:02:05:DC:8A:73:FA
            X509v3 Authority Key Identifier:
                keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:33:2f:54:d4:b1:85:d0:57:a6:4f:69:6e:4b:af:8d:9b:e3:
         68:f1:7a:ba:8b:1b:71:ba:95:f1:4e:49:55:80:47:a6:9a:3a:
         08:d0:ea:50:51:96:70:2a:03:eb:ca:5f:7c:77:98:ed:3e:28:
         df:d6:d5:e6:0c:24:c6:45:2f:d9:c5:e7:b9:fc:d5:80:33:6a:
         9b:2e:c0:36:ed:b5:a0:42:72:cc:96:f0:fb:84:dd:92:36:f8:
         22:55:6a:82:d6:32:06:79:07:76:a7:16:5c:f5:04:f7:e9:78:
         ff:4a:75:77:6a:bb:fa:0c:c1:0f:e0:e0:70:a4:c4:fd:95:85:
         dc:3b:65:6f:0a:67:a3:84:f5:f9:e0:c9:4b:58:0a:01:e8:f5:
         f2:96:81:41:02:c4:63:0c:6d:71:f6:5b:df:f8:60:c3:8c:61:
         7c:35:fd:3d:f4:86:30:15:bb:bf:8b:57:fd:a9:48:81:e6:36:
         d3:72:c2:ef:17:7a:9d:b0:e0:4c:65:ee:f2:70:4d:95:de:e3:
         ba:f0:8d:d6:2f:38:ba:ce:61:2a:30:7f:c0:96:aa:a0:bf:0f:
         fc:40:a7:e0:95:87:41:e4:9d:92:c6:18:b9:be:12:dc:51:37:
         ca:fd:47:d0:d5:31:3d:ee:4c:6a:c2:90:16:a7:7c:ac:03:9a:
         23:4b:6f:df
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVo5GvUgcLYAOFMASxFH4CJielBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3M0FGQ0YwNzlCMDVEREE1NUI5RjkwOUNDOTMwNjNC
N0QxQzFBMjAeFw0yNTAzMDYwMzAwNTlaFw0yNjAzMDUwMzA1NTlaMDMxMTAvBgNV
BAMTKDI3RTg0ODNFNzEwNjlENDhDOTU1M0Q3MkFBNEQwMjA1REM4QTczRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eO/rT0ezvnBFWU+/q+AifqRo
obMnWeF949Y/ynIjMaUr8SegVn7xZGYavfHAIzzdZk8KVRhN4fZijuozfvV7Wgr+
TZ8HQm9sGa5iTDnz+e6BzoJovPdnQWU9SM2XaeBLA9ai9HMqvNteKsPnSKTzLKSH
ODNkBzKaWjfkMqXzFkcc55Elpx6pB+dsCZ2wXhItuyjxiePnhCotubdjOZBbWrj7
yQpouSv77ayX5kkXnWA172LHGddiSZkJF/7nZydmX5RSAdFpf21ZvO/PRDYs+mPa
F3RvW2CNP+4RiskA321/W6yllBJISIOnMn7Yhj4q1CjSgii28YIZYGCykfBPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUJ+hIPnEGnUjJVT1yqk0CBdyKc/owHwYDVR0j
BBgwFoAUD3OvzwebBd2lW5+QnMkwY7fRwaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw
c2QvMS8wRjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzNBRkNGMDc5QjA1RERB
NTVCOUY5MDlDQzkzMDYzQjdEMUMxQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0YWZYcmVQZVltYlJDMmlpZVVOWHliRlV3cHdlOHFudHZ2MmkyckpBcHNkLzEv
MzIzODMwMzQzYTY2MzEzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDxgwDQYJKoZIhvcNAQELBQADggEBAAIzL1TUsYXQ
V6ZPaW5Lr42b42jxerqLG3G6lfFOSVWAR6aaOgjQ6lBRlnAqA+vKX3x3mO0+KN/W
1eYMJMZFL9nF57n81YAzapsuwDbttaBCcsyW8PuE3ZI2+CJVaoLWMgZ5B3anFlz1
BPfpeP9KdXdqu/oMwQ/g4HCkxP2Vhdw7ZW8KZ6OE9fngyUtYCgHo9fKWgUECxGMM
bXH2W9/4YMOMYXw1/T30hjAVu7+LV/2pSIHmNtNywu8Xep2w4Exl7vJwTZXe47rw
jdYvOLrOYSowf8CWqqC/D/xAp+CVh0HknZLGGLm+EtxRN8r9R9DVMT3uTGrCkBan
fKwDmiNLb98=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:24:00 2025 by rpki-client