Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/323830343a386439343a3a2f33322d313238203d3e20323733333636.roa
File:                     323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (raw, json)
Hash identifier:          1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=
Subject key identifier:   B1:8E:03:FB:AD:E4:71:07:47:89:71:97:84:B5:6A:4A:0E:D7:A5:A9
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       01E197C4D670257C4FDC1AA786CB12530BF73B5B
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/323830343a386439343a3a2f33322d313238203d3e20323733333636.roa
Signing time:             Thu 06 Mar 2025 14:09:19 +0000
ROA not before:           Thu 06 Mar 2025 14:04:19 +0000
ROA not after:            Thu 05 Mar 2026 14:09:19 +0000
asID:                     273366
IP address blocks:        2804:8d94::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e1:97:c4:d6:70:25:7c:4f:dc:1a:a7:86:cb:12:53:0b:f7:3b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Mar  6 14:04:19 2025 GMT
            Not After : Mar  5 14:09:19 2026 GMT
        Subject: CN=B18E03FBADE471074789719784B56A4A0ED7A5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:5c:54:20:6d:6f:dd:a8:e9:c3:f2:e4:e5:
                    54:0c:9d:aa:2d:00:16:d0:e0:d2:06:51:ca:5e:96:
                    70:e4:4d:db:c9:f0:52:cc:44:9d:b4:60:45:68:64:
                    bd:0f:93:45:26:a5:93:9e:03:81:59:c2:19:31:fe:
                    b7:5f:d7:f8:eb:03:00:26:1f:6e:f1:b1:58:5f:87:
                    6d:7c:b1:7f:18:0b:ec:7b:23:93:37:f9:6f:06:1f:
                    eb:81:30:4e:1a:26:e3:aa:88:9d:3d:16:3b:6f:85:
                    37:a1:17:5b:c1:07:21:fd:30:52:48:09:3c:ec:04:
                    13:98:8c:4e:9c:00:85:fe:08:2a:19:b1:3b:85:34:
                    c9:25:dc:90:b9:ca:9d:c7:b4:30:6a:c1:16:e5:c2:
                    1c:ab:72:8b:3b:d0:2b:ec:a4:1e:6a:22:91:e0:af:
                    dc:4a:cd:19:91:09:b8:a7:46:8a:5a:bd:ef:7e:3e:
                    65:43:1e:2f:2d:e7:df:a4:ae:51:b0:78:3d:95:59:
                    72:a6:33:da:96:fa:41:fd:16:3b:38:b3:99:fb:c2:
                    4e:78:ab:fc:8b:34:eb:62:85:09:da:b4:56:3e:20:
                    3b:8e:df:d1:f7:48:bf:1a:55:fc:8f:18:c7:2a:9e:
                    46:29:91:37:0c:5d:b8:2e:26:aa:6c:5d:9b:5b:d8:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:03:FB:AD:E4:71:07:47:89:71:97:84:B5:6A:4A:0E:D7:A5:A9
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/323830343a386439343a3a2f33322d313238203d3e20323733333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d94::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:c1:26:c1:2b:da:9b:f7:83:b2:c4:0d:a4:c2:05:e5:94:f4:
         64:22:1c:12:17:17:a1:97:d6:19:05:f6:c8:e0:3b:2b:8f:35:
         b7:ef:e6:3d:0f:2c:c8:2f:db:f7:54:bc:50:03:26:12:b0:9e:
         2e:72:ec:c3:5b:f4:ea:cc:01:8a:ac:95:8b:f1:bc:af:5a:4e:
         2f:f9:35:d0:c3:e5:57:ac:81:77:fd:d8:d1:07:7e:f2:76:cc:
         2e:d1:6f:2c:18:20:7f:36:36:53:e8:fd:5a:ad:14:a9:d7:0f:
         d3:06:a4:f6:54:82:6d:52:9b:01:f2:14:a4:ef:10:12:25:14:
         0a:df:b5:1c:9a:b5:d3:5f:ef:13:6c:55:28:66:d8:20:ee:c2:
         86:18:1a:b0:9f:94:9a:49:65:ea:33:ce:16:e8:1c:10:0e:7f:
         b8:91:02:30:63:b4:bc:50:d3:58:6f:7c:4e:1a:e6:b6:d7:b3:
         79:87:c4:b8:5a:49:cd:be:5e:c2:7f:29:e5:95:39:b1:95:d0:
         51:fa:cc:9a:7b:10:11:01:d6:a8:8a:7a:41:6a:88:e5:11:ff:
         26:91:f1:b0:3d:28:a0:76:b6:ec:4f:b2:eb:00:76:0f:94:0f:
         2e:c6:f0:50:25:21:f8:bc:6a:12:3b:e4:c0:19:bf:72:19:e6:
         a1:96:da:90
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUAeGXxNZwJXxP3BqnhssSUwv3O1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGODRCMjkzNEEyNEY2Q0ZEQkVDMzEyNDRCM0ZBMEM3
QTg1MkJGQjAeFw0yNTAzMDYxNDA0MTlaFw0yNjAzMDUxNDA5MTlaMDMxMTAvBgNV
BAMTKEIxOEUwM0ZCQURFNDcxMDc0Nzg5NzE5Nzg0QjU2QTRBMEVEN0E1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuFxUIG1v3ajpw/Lk5VQMnaot
ABbQ4NIGUcpelnDkTdvJ8FLMRJ20YEVoZL0Pk0UmpZOeA4FZwhkx/rdf1/jrAwAm
H27xsVhfh218sX8YC+x7I5M3+W8GH+uBME4aJuOqiJ09FjtvhTehF1vBByH9MFJI
CTzsBBOYjE6cAIX+CCoZsTuFNMkl3JC5yp3HtDBqwRblwhyrcos70CvspB5qIpHg
r9xKzRmRCbinRopave9+PmVDHi8t59+krlGweD2VWXKmM9qW+kH9Fjs4s5n7wk54
q/yLNOtihQnatFY+IDuO39H3SL8aVfyPGMcqnkYpkTcMXbguJqpsXZtb2LyHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUsY4D+63kcQdHiXGXhLVqSg7XpakwHwYDVR0j
BBgwFoAUwvhLKTSiT2z9vsMSRLP6DHqFK/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZ
QjUvMS9DMkY4NEIyOTM0QTI0RjZDRkRCRUMzMTI0NEIzRkEwQzdBODUyQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyRjg0QjI5MzRBMjRGNkNG
REJFQzMxMjQ0QjNGQTBDN0E4NTJCRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVweFJKbThEV0dBYzVpcUNveXNlbVdFcGNESGNGY3dIeWk4eDU0dmJ4WUI1LzEv
MzIzODMwMzQzYTM4NjQzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI2UMA0GCSqGSIb3DQEBCwUAA4IBAQBfwSbB
K9qb94OyxA2kwgXllPRkIhwSFxehl9YZBfbI4DsrjzW37+Y9DyzIL9v3VLxQAyYS
sJ4ucuzDW/TqzAGKrJWL8byvWk4v+TXQw+VXrIF3/djRB37ydswu0W8sGCB/NjZT
6P1arRSp1w/TBqT2VIJtUpsB8hSk7xASJRQK37UcmrXTX+8TbFUoZtgg7sKGGBqw
n5SaSWXqM84W6BwQDn+4kQIwY7S8UNNYb3xOGua217N5h8S4WknNvl7CfynllTmx
ldBR+syaexARAdaoinpBaojlEf8mkfGwPSigdrbsT7LrAHYPlA8uxvBQJSH4vGoS
O+TAGb9yGeahltqQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:35 2025 by rpki-client on console.sobornost.net