Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e20323634303332.roa
File:                     323830343a323963303a3a2f33322d313238203d3e20323634303332.roa (raw, json)
Hash identifier:          qn6kN0RjbCKGpLIqN8hn+nKkeVGrZIaTyhHi4o5Cjuk=
Subject key identifier:   CF:34:BC:C9:E1:85:AC:3D:AD:4E:25:70:BE:14:FE:10:7D:C3:85:A3
Certificate issuer:       /CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3
Certificate serial:       1564F77406FB94FBAC956C861AE151111A674ED1
Authority key identifier: DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e20323634303332.roa
Signing time:             Mon 31 Mar 2025 22:52:18 +0000
ROA not before:           Mon 31 Mar 2025 22:47:18 +0000
ROA not after:            Mon 30 Mar 2026 22:52:18 +0000
asID:                     264032
IP address blocks:        2804:29c0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl
                          rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:f7:74:06:fb:94:fb:ac:95:6c:86:1a:e1:51:11:1a:67:4e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3
        Validity
            Not Before: Mar 31 22:47:18 2025 GMT
            Not After : Mar 30 22:52:18 2026 GMT
        Subject: CN=CF34BCC9E185AC3DAD4E2570BE14FE107DC385A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:35:c7:d3:fe:e6:be:59:e6:9d:0e:20:78:
                    d3:43:0a:8f:1a:77:16:05:a3:3c:c6:db:7c:9f:70:
                    76:7f:b8:b6:33:38:b5:01:e4:4d:f3:5d:06:ca:2d:
                    b7:b0:59:8c:e8:5e:18:c3:cb:86:31:84:0e:af:a5:
                    3b:d4:26:85:38:0d:28:2e:8e:34:e2:c9:22:c7:d1:
                    19:b6:ec:cf:89:04:01:27:2b:d8:bf:e2:58:15:a1:
                    b7:54:c8:88:1c:68:20:92:91:a3:46:f1:bd:51:73:
                    e8:41:c5:7c:ae:33:12:4b:f6:53:5e:ee:6d:15:7b:
                    9a:1f:30:68:eb:47:ae:a1:60:e0:e0:a4:ce:81:2c:
                    3e:39:fc:c0:d3:8e:84:ca:fe:3f:5e:c0:b2:ef:f0:
                    a9:22:d1:52:da:d5:31:7e:ee:9c:34:07:35:6c:77:
                    99:03:82:e3:2d:af:8a:d5:71:c2:e4:b3:b8:e0:9f:
                    81:ac:8f:8f:f5:73:5c:51:90:fb:87:84:6f:84:44:
                    b5:0e:b5:e8:4b:b2:fa:3c:43:f8:24:3b:e8:74:7e:
                    cd:bf:9b:1f:c0:34:48:8b:26:32:f7:f8:c7:fd:54:
                    9f:3e:54:ad:19:f6:5c:7f:a8:33:c0:7d:c9:28:c9:
                    27:ef:37:fe:08:ec:1a:54:eb:ad:97:69:fd:e7:55:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:BC:C9:E1:85:AC:3D:AD:4E:25:70:BE:14:FE:10:7D:C3:85:A3
            X509v3 Authority Key Identifier:
                keyid:DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e20323634303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:79:d4:f2:de:cc:ea:91:e2:17:b6:49:bb:9b:08:e7:07:
         15:2b:d1:59:d9:81:f2:59:13:83:90:e9:5d:20:1b:3d:69:76:
         b0:cc:f0:38:f7:a1:7d:a4:4e:3a:f3:8b:86:47:9a:8f:4d:1f:
         1a:e0:1c:48:80:f6:ce:0f:52:c1:4e:b4:c6:4b:03:25:bd:60:
         c4:c0:9c:97:b7:c1:1c:d6:27:f2:9a:12:a3:0b:a3:7f:c6:d5:
         ef:ac:d4:86:55:6d:9d:cc:ef:db:a3:1d:10:ad:5f:73:05:cd:
         3d:cc:f9:c5:00:ab:d3:0b:9e:88:22:eb:ee:7d:88:71:10:2e:
         a7:23:d5:9a:16:13:04:ed:7a:5b:ee:e0:46:5c:3f:41:fc:2a:
         d4:10:02:0a:db:29:97:b4:14:9d:3a:5d:9d:a6:79:fd:48:72:
         b9:bd:5e:14:b0:72:9b:64:43:96:23:47:ea:99:54:26:06:65:
         7e:87:f4:c8:d4:b9:09:e4:d8:aa:73:d3:03:e4:4e:f0:39:4c:
         8c:4c:d8:06:15:62:3b:25:54:b4:94:8c:09:e1:6b:be:a9:e3:
         e0:f3:8d:ef:29:19:a8:98:7e:c6:cc:a9:0c:57:98:f1:9b:89:
         0e:b0:80:d4:fe:a8:4c:d0:0c:b0:28:91:8b:17:6f:f3:a7:fb:
         d7:eb:a2:bc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUFWT3dAb7lPuslWyGGuFRERpnTtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI5OUYzQjIyQzRENDU5N0JBMUI4Mzc3QzQ1Rjc1MTkz
NDI0NDRFMzAeFw0yNTAzMzEyMjQ3MThaFw0yNjAzMzAyMjUyMThaMDMxMTAvBgNV
BAMTKENGMzRCQ0M5RTE4NUFDM0RBRDRFMjU3MEJFMTRGRTEwN0RDMzg1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5TXH0/7mvlnmnQ4geNNDCo8a
dxYFozzG23yfcHZ/uLYzOLUB5E3zXQbKLbewWYzoXhjDy4YxhA6vpTvUJoU4DSgu
jjTiySLH0Rm27M+JBAEnK9i/4lgVobdUyIgcaCCSkaNG8b1Rc+hBxXyuMxJL9lNe
7m0Ve5ofMGjrR66hYODgpM6BLD45/MDTjoTK/j9ewLLv8Kki0VLa1TF+7pw0BzVs
d5kDguMtr4rVccLks7jgn4Gsj4/1c1xRkPuHhG+ERLUOtehLsvo8Q/gkO+h0fs2/
mx/ANEiLJjL3+Mf9VJ8+VK0Z9lx/qDPAfckoySfvN/4I7BpU662Xaf3nVYCRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUzzS8yeGFrD2tTiVwvhT+EH3DhaMwHwYDVR0j
BBgwFoAU25nzsixNRZe6G4N3xF91GTQkROMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRktaUXlubU5pV3FKS0JQck01MVVNeUJmV3BDejJxQUFNU1VteU1VcUFG
TWMvMC9EQjk5RjNCMjJDNEQ0NTk3QkExQjgzNzdDNDVGNzUxOTM0MjQ0NEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCOTlGM0IyMkM0RDQ1OTdC
QTFCODM3N0M0NUY3NTE5MzQyNDQ0RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZLWlF5bm1OaVdxSktCUHJNNTFVTXlCZldwQ3oycUFBTVNVbXlNVXFBRk1jLzAv
MzIzODMwMzQzYTMyMzk2MzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCnAMA0GCSqGSIb3DQEBCwUAA4IBAQAKNnnU
8t7M6pHiF7ZJu5sI5wcVK9FZ2YHyWRODkOldIBs9aXawzPA496F9pE4684uGR5qP
TR8a4BxIgPbOD1LBTrTGSwMlvWDEwJyXt8Ec1ifymhKjC6N/xtXvrNSGVW2dzO/b
ox0QrV9zBc09zPnFAKvTC56IIuvufYhxEC6nI9WaFhME7Xpb7uBGXD9B/CrUEAIK
2ymXtBSdOl2dpnn9SHK5vV4UsHKbZEOWI0fqmVQmBmV+h/TI1LkJ5Niqc9MD5E7w
OUyMTNgGFWI7JVS0lIwJ4Wu+qePg843vKRmomH7GzKkMV5jxm4kOsIDU/qhM0Ayw
KJGLF2/zp/vX66K8
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net