Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa
File:                     323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa (raw, json)
Hash identifier:          ffgKzqIE6nlwYTlM9NsagO1ODEwmK8Jvo/7LCXDOCZM=
Subject key identifier:   70:59:E5:58:94:A8:5B:75:58:78:EB:AA:6F:3D:6F:C1:29:1A:5F:DB
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       13A892FD40741267D03EFFF06034CDCDAE58D1B9
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa
Signing time:             Wed 26 Mar 2025 21:46:59 +0000
ROA not before:           Wed 26 Mar 2025 21:41:59 +0000
ROA not after:            Wed 25 Mar 2026 21:46:59 +0000
asID:                     28328
IP address blocks:        2804:674:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a8:92:fd:40:74:12:67:d0:3e:ff:f0:60:34:cd:cd:ae:58:d1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Mar 26 21:41:59 2025 GMT
            Not After : Mar 25 21:46:59 2026 GMT
        Subject: CN=7059E55894A85B755878EBAA6F3D6FC1291A5FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:90:53:8c:b0:4e:da:92:a3:71:10:01:ab:
                    8d:11:07:fa:32:20:7f:f2:1c:23:08:c5:e1:f2:07:
                    cc:12:2c:81:fb:1e:b6:d9:64:da:dd:cf:9a:f9:7a:
                    55:37:5f:75:6d:d9:c5:0a:8c:79:81:d1:55:c3:3a:
                    4a:89:9c:2f:27:f2:c5:eb:43:1d:4a:e2:03:5f:ed:
                    30:97:8f:e1:fb:a3:83:f1:8d:49:4b:02:99:2b:db:
                    70:0f:04:f0:34:b1:40:26:fd:5c:f8:4d:68:17:d1:
                    73:62:51:48:f1:ac:2c:8c:78:4a:6a:bf:cd:78:f9:
                    8f:49:88:bf:fe:53:9f:d4:2c:97:78:eb:51:30:f5:
                    8d:14:9b:43:21:7a:8d:4c:49:26:f9:9a:f9:05:ec:
                    e3:36:29:d2:b2:dd:fc:12:76:8c:c9:8a:85:7d:5e:
                    ba:7d:e9:4f:f8:28:ea:80:64:b7:fa:e9:d1:ad:86:
                    b8:5d:40:91:30:6b:56:d0:f3:e3:c6:ce:d5:69:e7:
                    ce:64:71:de:c4:a6:17:d0:e8:20:19:89:e7:79:67:
                    0f:f2:07:93:51:5c:25:a0:94:55:7f:9b:b5:57:a7:
                    a0:97:67:e1:29:86:89:23:3b:d9:4e:ee:b8:77:f2:
                    94:8e:c3:e9:eb:de:e8:bb:f5:6b:b6:e7:3f:6f:ad:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:E5:58:94:A8:5B:75:58:78:EB:AA:6F:3D:6F:C1:29:1A:5F:DB
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3130303a3a2f34302d3430203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:23:bc:bd:e4:f0:21:86:d7:9b:0b:18:a8:81:20:0f:d5:e9:
         98:da:68:56:36:51:43:57:1e:e4:cb:bd:69:34:b8:77:a6:52:
         6b:05:89:c3:50:88:d7:25:66:b6:5c:91:5e:9c:0f:46:85:88:
         aa:8a:d6:70:8e:72:a9:8d:7b:63:38:20:98:93:49:c7:31:e0:
         81:bb:93:9f:e3:3d:bf:ed:46:bf:48:b0:7b:54:ef:57:a1:bc:
         f8:b7:a8:ec:0c:31:82:36:7f:23:f3:28:30:cd:8f:19:1f:00:
         52:41:35:12:13:ac:aa:bd:11:dc:20:f3:a0:99:12:fe:44:e7:
         56:68:b3:fd:1a:26:f1:8f:e0:6c:9b:f5:4d:2d:eb:00:19:66:
         09:8c:d6:0f:9c:50:a9:82:2e:ee:88:c2:49:29:07:e7:df:c8:
         57:3e:e4:80:fd:ab:fa:f3:49:14:fb:95:c7:c0:8d:a1:be:16:
         b6:3d:b9:8a:53:e9:86:29:6a:39:dd:9e:bf:67:60:f9:08:f7:
         81:04:11:ae:c8:9a:66:57:4c:1c:1c:b0:f9:bd:5f:b6:02:96:
         7e:82:c8:50:d6:53:c7:f4:9e:c5:6c:aa:53:9c:c2:ae:d9:0e:
         18:80:40:2a:3c:df:19:a3:75:ab:10:61:16:c4:1d:26:62:ee:
         1e:ec:6d:c1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUE6iS/UB0EmfQPv/wYDTNza5Y0bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2
QkY2NTc4NTAeFw0yNTAzMjYyMTQxNTlaFw0yNjAzMjUyMTQ2NTlaMDMxMTAvBgNV
BAMTKDcwNTlFNTU4OTRBODVCNzU1ODc4RUJBQTZGM0Q2RkMxMjkxQTVGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKpBTjLBO2pKjcRABq40RB/oy
IH/yHCMIxeHyB8wSLIH7HrbZZNrdz5r5elU3X3Vt2cUKjHmB0VXDOkqJnC8n8sXr
Qx1K4gNf7TCXj+H7o4PxjUlLApkr23APBPA0sUAm/Vz4TWgX0XNiUUjxrCyMeEpq
v814+Y9JiL/+U5/ULJd461Ew9Y0Um0Mheo1MSSb5mvkF7OM2KdKy3fwSdozJioV9
Xrp96U/4KOqAZLf66dGthrhdQJEwa1bQ8+PGztVp585kcd7EphfQ6CAZied5Zw/y
B5NRXCWglFV/m7VXp6CXZ+EphokjO9lO7rh38pSOw+nr3ui79Wu25z9vra55AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcFnlWJSoW3VYeOuqbz1vwSkaX9swHwYDVR0j
BBgwFoAUWy0t8Kkto3M91yJVFaY+PWv2V4UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YV1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZI
LzAvNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2QkY2NTc4NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QjJEMkRGMEE5MkRBMzczM0RE
NzIyNTUxNUE2M0UzRDZCRjY1Nzg1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
V1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZILzAvMzIz
ODMwMzQzYTM2MzczNDNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz
ODMzMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGACgEBnQBMA0GCSqGSIb3DQEBCwUAA4IBAQCSI7y9
5PAhhtebCxiogSAP1emY2mhWNlFDVx7ky71pNLh3plJrBYnDUIjXJWa2XJFenA9G
hYiqitZwjnKpjXtjOCCYk0nHMeCBu5Of4z2/7Ua/SLB7VO9Xobz4t6jsDDGCNn8j
8ygwzY8ZHwBSQTUSE6yqvRHcIPOgmRL+ROdWaLP9Gibxj+Bsm/VNLesAGWYJjNYP
nFCpgi7uiMJJKQfn38hXPuSA/av680kU+5XHwI2hvha2PbmKU+mGKWo53Z6/Z2D5
CPeBBBGuyJpmV0wcHLD5vV+2ApZ+gshQ1lPH9J7FbKpTnMKu2Q4YgEAqPN8Zo3Wr
EGEWxB0mYu4e7G3B
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:10 2025 by rpki-client