Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
File:                     323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (raw, json)
Hash identifier:          /kAedHYVopNdZLn9e++mUNkwEtanf+bihA2mw/xxoCQ=
Subject key identifier:   FA:95:D1:7B:67:FC:93:62:9B:F5:50:F2:35:DA:16:EE:9A:3B:2C:DD
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       2438D7C7EA5944AA6C9D80D93B7E0ABC5AD41A1F
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa
Signing time:             Thu 06 Mar 2025 16:12:10 +0000
ROA not before:           Thu 06 Mar 2025 16:07:10 +0000
ROA not after:            Thu 05 Mar 2026 16:12:10 +0000
asID:                     268261
IP address blocks:        2804:4e70::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:d7:c7:ea:59:44:aa:6c:9d:80:d9:3b:7e:0a:bc:5a:d4:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Mar  6 16:07:10 2025 GMT
            Not After : Mar  5 16:12:10 2026 GMT
        Subject: CN=FA95D17B67FC93629BF550F235DA16EE9A3B2CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:da:e5:a4:f4:25:ae:39:ea:53:76:17:bc:
                    34:9c:c4:22:73:72:68:d8:61:18:e9:47:a0:58:e1:
                    93:4c:33:25:6f:79:5f:70:41:ac:ec:f2:e4:e6:8f:
                    38:d0:f4:18:6e:cb:8b:01:09:e2:49:fc:85:47:78:
                    f5:0f:d3:01:88:30:29:b8:74:2a:26:e7:08:46:7d:
                    18:07:c6:dd:b2:d3:8d:85:0f:3d:9c:eb:0f:90:ab:
                    1e:d5:75:64:c3:b7:6c:60:b2:5c:fd:4e:f4:5b:c6:
                    78:29:b7:3d:81:96:e6:de:e4:7f:85:1d:24:84:3b:
                    b3:d4:e9:6f:0c:10:5c:c8:4f:16:5c:6d:7b:e4:28:
                    94:d5:05:5f:a5:3c:54:3d:37:52:39:ea:f7:cc:19:
                    58:1c:ac:fa:62:4d:66:ab:04:0b:ca:74:04:88:bb:
                    df:5c:80:c6:de:71:7d:c1:99:06:20:0c:3a:0b:59:
                    5a:a4:4d:2d:1a:10:25:65:4a:7b:f8:c0:51:85:a2:
                    9c:4a:93:49:7b:f8:1e:0d:09:90:ad:99:fe:c5:10:
                    75:a2:e4:31:4f:fb:bd:a7:2c:c5:63:60:5a:bf:0f:
                    0f:f0:3d:eb:08:9e:dc:17:e4:25:31:c8:3f:1f:df:
                    1a:39:4e:de:18:61:83:56:e1:f6:9c:9d:a9:53:df:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:D1:7B:67:FC:93:62:9B:F5:50:F2:35:DA:16:EE:9A:3B:2C:DD
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a3a2f33332d3333203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:38:ba:a9:f1:7b:db:75:3b:a7:40:dd:74:9a:4d:2a:de:21:
         6f:ab:ad:23:31:50:cc:19:75:cb:df:f3:54:e6:45:89:78:58:
         01:d6:8e:29:ec:8f:76:7c:43:87:9c:54:c4:9b:f3:92:bc:e4:
         01:e2:4a:04:de:16:65:f6:a5:56:f4:db:a4:62:a6:81:5a:18:
         a2:e6:b9:3e:8b:00:18:e0:84:3a:41:58:11:52:99:a7:24:4c:
         52:a5:33:2b:43:f4:69:99:ce:ec:8f:95:29:6d:3c:51:72:5e:
         99:f1:f5:f4:89:81:c8:0a:25:bb:ac:2c:43:c2:0b:1f:f5:65:
         1f:3a:fe:9b:5a:34:b8:9d:48:83:6f:05:54:b6:02:14:1e:41:
         63:c8:c4:a0:28:38:ab:cb:58:14:ac:b2:6c:df:e4:d6:f8:21:
         bd:03:6b:23:b2:53:18:3d:fd:be:67:3f:c9:28:aa:5b:86:d1:
         93:06:21:f8:ab:87:a0:0f:fe:f1:9f:7a:7e:5f:84:a9:49:2f:
         ee:31:f0:93:00:07:6e:b8:44:6b:0b:ba:72:9f:8f:ec:b6:14:
         8a:e7:b4:da:8e:e2:0e:20:ab:98:79:c8:8f:67:a3:99:18:bd:
         b0:90:1d:3c:9c:5c:fa:5e:de:e6:cb:6c:9d:32:09:bb:e0:73:
         b1:24:75:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJDjXx+pZRKpsnYDZO34KvFrUGh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhFQTFCNDJGMTY2MUEwRUIwM0IyNDVENDcyMDVFNTIy
MEE1MUI2NTAeFw0yNTAzMDYxNjA3MTBaFw0yNjAzMDUxNjEyMTBaMDMxMTAvBgNV
BAMTKEZBOTVEMTdCNjdGQzkzNjI5QkY1NTBGMjM1REExNkVFOUEzQjJDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo9rlpPQlrjnqU3YXvDScxCJz
cmjYYRjpR6BY4ZNMMyVveV9wQazs8uTmjzjQ9Bhuy4sBCeJJ/IVHePUP0wGIMCm4
dCom5whGfRgHxt2y042FDz2c6w+Qqx7VdWTDt2xgslz9TvRbxngptz2Blube5H+F
HSSEO7PU6W8MEFzITxZcbXvkKJTVBV+lPFQ9N1I56vfMGVgcrPpiTWarBAvKdASI
u99cgMbecX3BmQYgDDoLWVqkTS0aECVlSnv4wFGFopxKk0l7+B4NCZCtmf7FEHWi
5DFP+72nLMVjYFq/Dw/wPesIntwX5CUxyD8f3xo5Tt4YYYNW4facnalT38HBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+pXRe2f8k2Kb9VDyNdoW7po7LN0wHwYDVR0j
BBgwFoAUSOobQvFmGg6wOyRdRyBeUiClG2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFc1WHRucXJRckxTVmtUQzFObVZNTFVxUm9YU1VHbm4yTEJYNm5yNzU3
V2cvMS80OEVBMUI0MkYxNjYxQTBFQjAzQjI0NUQ0NzIwNUU1MjIwQTUxQjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4RUExQjQyRjE2NjFBMEVC
MDNCMjQ1RDQ3MjA1RTUyMjBBNTFCNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXNVh0bnFyUXJMU1ZrVEMxTm1WTUxVcVJvWFNVR25uMkxCWDZucjc1N1dnLzEv
MzIzODMwMzQzYTM0NjUzNzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAROcAAwDQYJKoZIhvcNAQELBQADggEBALU4uqnx
e9t1O6dA3XSaTSreIW+rrSMxUMwZdcvf81TmRYl4WAHWjinsj3Z8Q4ecVMSb85K8
5AHiSgTeFmX2pVb026RipoFaGKLmuT6LABjghDpBWBFSmackTFKlMytD9GmZzuyP
lSltPFFyXpnx9fSJgcgKJbusLEPCCx/1ZR86/ptaNLidSINvBVS2AhQeQWPIxKAo
OKvLWBSssmzf5Nb4Ib0DayOyUxg9/b5nP8koqluG0ZMGIfirh6AP/vGfen5fhKlJ
L+4x8JMAB264RGsLunKfj+y2FIrntNqO4g4gq5h5yI9no5kYvbCQHTycXPpe3ubL
bJ0yCbvgc7EkdZ0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:25 2025 by rpki-client on console.sobornost.net