Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa
File:                     323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (raw, json)
Hash identifier:          CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=
Subject key identifier:   73:2F:73:26:73:09:0F:05:C4:B2:18:FA:AD:1B:6C:0D:87:EE:95:1D
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       76B9C094A956DA5E4A8D19CFF50FC4CA62D3CDBB
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa
Signing time:             Wed 04 Jun 2025 17:09:31 +0000
ROA not before:           Wed 04 Jun 2025 17:04:31 +0000
ROA not after:            Wed 03 Jun 2026 17:09:31 +0000
asID:                     263656
IP address blocks:        2804:10fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 20:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b9:c0:94:a9:56:da:5e:4a:8d:19:cf:f5:0f:c4:ca:62:d3:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Jun  4 17:04:31 2025 GMT
            Not After : Jun  3 17:09:31 2026 GMT
        Subject: CN=732F732673090F05C4B218FAAD1B6C0D87EE951D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:7d:c2:4f:16:d4:34:49:c7:b8:80:fd:6b:
                    7b:56:18:31:05:a5:b3:ba:62:99:87:97:bd:02:5c:
                    56:a4:d2:af:fe:ea:63:3c:6d:1e:94:91:2a:3b:af:
                    52:4a:03:d8:8c:f4:61:69:c0:54:d3:50:2d:54:eb:
                    a6:c6:80:7b:5c:fd:d4:51:06:4a:6e:ea:52:d8:26:
                    50:29:d1:99:b7:b8:e8:77:96:93:13:0f:f3:77:86:
                    1a:97:c6:8f:a0:3d:3f:79:e7:71:10:8e:31:bd:9f:
                    4f:1d:f7:76:f2:f1:97:b7:96:07:ca:d6:8f:23:a3:
                    84:37:40:08:f4:ad:db:00:ae:bd:ab:c3:64:58:e5:
                    a8:c6:a8:a6:17:16:de:03:66:21:6b:d1:39:44:0d:
                    a0:4d:0c:10:3b:fb:48:82:8e:0d:ea:38:56:2e:90:
                    f3:48:46:22:a2:ba:49:40:10:4b:60:e8:11:d4:20:
                    8b:b2:f4:e1:59:05:b9:01:24:cf:0a:9d:80:d4:55:
                    9d:22:74:0d:db:b9:b3:9c:c1:84:79:2c:74:ef:b9:
                    88:f8:05:d0:07:fc:97:50:cb:41:80:9b:3f:4f:14:
                    00:cb:78:21:71:7b:ba:a1:51:d1:09:a6:bf:fe:a1:
                    56:8d:ce:32:1e:16:e7:5f:d5:c6:46:17:51:7d:a8:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:73:26:73:09:0F:05:C4:B2:18:FA:AD:1B:6C:0D:87:EE:95:1D
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3438203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:20:39:68:0b:57:26:5e:50:87:55:fc:b3:15:ea:75:84:
         73:c8:e5:3a:7c:62:cb:53:7d:ca:38:e7:0a:4c:cc:ea:54:1f:
         77:1a:f5:39:e1:32:1a:1b:4e:e4:df:85:b2:9a:98:43:fd:96:
         32:fd:bb:82:33:39:42:8c:23:4b:5a:c4:c1:89:36:b6:04:be:
         06:c8:e8:bb:d3:4b:a4:e3:cb:3f:a9:86:6c:31:20:52:3c:ce:
         bb:cb:c1:49:57:a5:65:e0:97:4c:9c:23:99:54:90:01:8e:02:
         6a:98:d4:15:45:ba:e9:94:59:b0:01:70:45:5a:dc:cf:c0:2f:
         a7:d1:0b:a7:5d:9b:a6:e7:1e:94:41:53:de:f8:51:95:b5:09:
         ca:5a:6a:e7:23:52:c0:27:3b:f5:08:64:a2:93:7a:c8:c5:c8:
         4b:91:c0:0a:dd:9f:4a:3c:c3:29:93:a3:63:05:06:fa:68:21:
         61:38:33:56:4d:90:56:d5:52:25:30:6a:98:1f:fc:be:a9:7f:
         43:d6:9b:cd:bc:8c:46:89:80:88:6b:d1:2a:c0:5d:a7:95:ac:
         27:5c:29:70:2d:04:a2:71:b6:b5:d7:92:ad:46:50:61:f7:b0:
         72:7f:7a:9f:7d:91:9e:8f:bb:15:a6:28:38:cf:1a:c1:3c:61:
         62:cc:34:08
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdrnAlKlW2l5KjRnP9Q/EymLTzbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2
M0Q3QkM4NzAeFw0yNTA2MDQxNzA0MzFaFw0yNjA2MDMxNzA5MzFaMDMxMTAvBgNV
BAMTKDczMkY3MzI2NzMwOTBGMDVDNEIyMThGQUFEMUI2QzBEODdFRTk1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwX3CTxbUNEnHuID9a3tWGDEF
pbO6YpmHl70CXFak0q/+6mM8bR6UkSo7r1JKA9iM9GFpwFTTUC1U66bGgHtc/dRR
Bkpu6lLYJlAp0Zm3uOh3lpMTD/N3hhqXxo+gPT9553EQjjG9n08d93by8Ze3lgfK
1o8jo4Q3QAj0rdsArr2rw2RY5ajGqKYXFt4DZiFr0TlEDaBNDBA7+0iCjg3qOFYu
kPNIRiKiuklAEEtg6BHUIIuy9OFZBbkBJM8KnYDUVZ0idA3bubOcwYR5LHTvuYj4
BdAH/JdQy0GAmz9PFADLeCFxe7qhUdEJpr/+oVaNzjIeFudf1cZGF1F9qBhFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcy9zJnMJDwXEshj6rRtsDYfulR0wHwYDVR0j
BBgwFoAUQYfo+fs8w9JIVGccWowIMGPXvIcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LaUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4
LzAvNDE4N0U4RjlGQjNDQzNEMjQ4NTQ2NzFDNUE4QzA4MzA2M0Q3QkM4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MTg3RThGOUZCM0NDM0QyNDg1
NDY3MUM1QThDMDgzMDYzRDdCQzg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
aUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4LzAvMzIz
ODMwMzQzYTMxMzA2NjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMzMzYz
NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQQ/DANBgkqhkiG9w0BAQsFAAOCAQEAqJkgOWgLVyZe
UIdV/LMV6nWEc8jlOnxiy1N9yjjnCkzM6lQfdxr1OeEyGhtO5N+FspqYQ/2WMv27
gjM5QowjS1rEwYk2tgS+Bsjou9NLpOPLP6mGbDEgUjzOu8vBSVelZeCXTJwjmVSQ
AY4CapjUFUW66ZRZsAFwRVrcz8Avp9ELp12bpucelEFT3vhRlbUJylpq5yNSwCc7
9QhkopN6yMXIS5HACt2fSjzDKZOjYwUG+mghYTgzVk2QVtVSJTBqmB/8vql/Q9ab
zbyMRomAiGvRKsBdp5WsJ1wpcC0EonG2tdeSrUZQYfewcn96n32Rno+7FaYoOM8a
wTxhYsw0CA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:03 2025 by rpki-client