Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa
File:                     323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (raw, json)
Hash identifier:          DvcsaLp8E0Ouamb2Fwv0KT11deEDA6WBjUoErFqzlgc=
Subject key identifier:   AA:49:FE:9C:E7:DF:63:36:E7:4A:AF:AE:7E:B4:3B:35:A4:6B:56:73
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       47B8BBAADE7D54860166A897C55AFC926D125256
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa
Signing time:             Fri 14 Feb 2025 17:48:24 +0000
ROA not before:           Fri 14 Feb 2025 17:43:24 +0000
ROA not after:            Fri 13 Feb 2026 17:48:24 +0000
asID:                     266544
IP address blocks:        2804:3da4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b8:bb:aa:de:7d:54:86:01:66:a8:97:c5:5a:fc:92:6d:12:52:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Feb 14 17:43:24 2025 GMT
            Not After : Feb 13 17:48:24 2026 GMT
        Subject: CN=AA49FE9CE7DF6336E74AAFAE7EB43B35A46B5673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:e4:95:2b:fa:ae:49:8d:93:5c:b1:f3:53:
                    9f:b8:c8:62:d2:f7:17:7a:65:a7:75:4c:19:63:da:
                    73:8c:fd:ca:e0:98:c3:75:bd:ab:62:aa:96:25:e8:
                    7c:4e:1d:e9:f5:c4:42:28:90:40:7c:cb:30:ea:cc:
                    d0:07:ea:39:59:c1:e5:3f:6e:84:81:ca:79:7e:f6:
                    13:4d:f4:b0:e4:ae:a6:91:ca:fa:07:5d:29:b0:c9:
                    c5:d1:47:f3:03:24:25:c2:69:34:ca:5c:a2:2f:b6:
                    19:21:23:c7:01:2b:b8:9e:09:23:b4:8f:dd:5f:63:
                    66:9e:e8:1d:b7:2e:a4:39:6a:2f:c2:b9:23:90:5c:
                    b8:73:5e:0d:c2:f1:41:ee:c0:22:24:08:cb:34:55:
                    3b:fc:39:e7:1e:f2:34:3e:d8:4e:f9:64:d9:6c:13:
                    bc:f5:09:98:23:6b:cd:8e:29:73:b4:30:a7:4d:a8:
                    89:a7:bc:95:fa:46:01:5d:bc:70:f6:ad:46:a7:15:
                    41:18:3d:e8:9b:27:38:d8:2f:40:b8:16:11:75:26:
                    15:b0:ca:da:d4:ab:01:9d:03:2b:6e:93:f9:58:a9:
                    b9:90:d7:91:01:82:d9:89:80:72:84:5d:93:ce:3b:
                    f7:51:09:47:46:40:59:38:1f:4a:53:50:12:9e:49:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:49:FE:9C:E7:DF:63:36:E7:4A:AF:AE:7E:B4:3B:35:A4:6B:56:73
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:c2:0f:3a:4e:0c:45:c4:f1:2d:94:92:c5:f2:cb:ea:94:
         93:0f:06:2f:ed:c5:ce:05:b2:d4:b8:bb:3e:ea:5d:f5:2d:88:
         89:d4:06:cb:25:7b:dd:e7:87:4d:21:f4:ac:ba:06:9f:a2:f1:
         4c:cc:69:14:8e:01:36:5d:3e:46:3e:8d:b4:1f:3f:9f:dd:80:
         bf:4e:6c:1b:2a:2b:3b:13:0e:e6:a4:ff:4b:06:9a:11:7a:0c:
         f6:a4:dd:29:28:06:6d:97:4b:93:a1:65:35:59:84:b4:dc:a5:
         a3:c3:6f:4d:fd:28:1c:57:d6:7f:fe:f3:07:85:cf:bb:41:65:
         c1:e6:69:16:b8:21:ee:51:7a:29:d2:a9:50:2c:23:4b:ce:7b:
         82:ed:c1:ca:11:bd:95:98:12:32:18:e3:6a:22:d5:d4:bb:80:
         1e:1f:05:3a:8e:b9:c9:8a:29:fb:5d:14:19:41:fa:01:77:db:
         c2:f1:fb:be:0b:a8:dc:a3:f0:68:7e:72:90:c2:a3:4d:d4:81:
         4f:9d:c6:1f:cf:17:5c:fe:95:5a:66:86:1e:46:6f:c7:cf:77:
         92:98:0e:9a:f4:00:c5:92:33:fb:37:97:a2:51:fd:f0:9d:4c:
         10:b6:f2:4f:cf:58:72:0b:4f:43:21:e1:55:56:d8:99:53:38:
         a4:a0:32:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR7i7qt59VIYBZqiXxVr8km0SUlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQkMzN0Q4NDdENTFGQzc2Nzc2QThFMkEzMkM4NTFC
MzkxRERFRjAeFw0yNTAyMTQxNzQzMjRaFw0yNjAyMTMxNzQ4MjRaMDMxMTAvBgNV
BAMTKEFBNDlGRTlDRTdERjYzMzZFNzRBQUZBRTdFQjQzQjM1QTQ2QjU2NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7+SVK/quSY2TXLHzU5+4yGLS
9xd6Zad1TBlj2nOM/crgmMN1vatiqpYl6HxOHen1xEIokEB8yzDqzNAH6jlZweU/
boSBynl+9hNN9LDkrqaRyvoHXSmwycXRR/MDJCXCaTTKXKIvthkhI8cBK7ieCSO0
j91fY2ae6B23LqQ5ai/CuSOQXLhzXg3C8UHuwCIkCMs0VTv8Oece8jQ+2E75ZNls
E7z1CZgja82OKXO0MKdNqImnvJX6RgFdvHD2rUanFUEYPeibJzjYL0C4FhF1JhWw
ytrUqwGdAytuk/lYqbmQ15EBgtmJgHKEXZPOO/dRCUdGQFk4H0pTUBKeSRYzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqkn+nOffYzbnSq+ufrQ7NaRrVnMwHwYDVR0j
BBgwFoAULRvDfYR9Ufx2d2qOKjLIUbOR3e8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4
TG4vMC8yRDFCQzM3RDg0N0Q1MUZDNzY3NzZBOEUyQTMyQzg1MUIzOTFEREVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUJDMzdEODQ3RDUxRkM3
Njc3NkE4RTJBMzJDODUxQjM5MURERUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYNUw3VmVIY0h0TjE5cEVacld1TDZHaWYzRHZNUm8zQVFTSjlnTFk2eExuLzAv
MzIzODMwMzQzYTMzNjQ2MTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9pDANBgkqhkiG9w0BAQsFAAOCAQEACcHCDzpO
DEXE8S2UksXyy+qUkw8GL+3FzgWy1Li7Pupd9S2IidQGyyV73eeHTSH0rLoGn6Lx
TMxpFI4BNl0+Rj6NtB8/n92Av05sGyorOxMO5qT/SwaaEXoM9qTdKSgGbZdLk6Fl
NVmEtNylo8NvTf0oHFfWf/7zB4XPu0FlweZpFrgh7lF6KdKpUCwjS857gu3ByhG9
lZgSMhjjaiLV1LuAHh8FOo65yYop+10UGUH6AXfbwvH7vguo3KPwaH5ykMKjTdSB
T53GH88XXP6VWmaGHkZvx893kpgOmvQAxZIz+zeXolH98J1MELbyT89YcgtPQyHh
VVbYmVM4pKAyWA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net