Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
File:                     323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (raw, json)
Hash identifier:          O5lDJAGa/1XEPXAo82R4hgC3bbIo0b4QsYTQy2riaY8=
Subject key identifier:   0D:C7:E3:80:6F:ED:DB:2C:A7:06:CB:CE:CD:BA:7E:08:4D:5C:48:EA
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       1C28132A9C80D4B2D2098B1D0FD8CB873B678AA0
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa
Signing time:             Tue 06 May 2025 18:38:08 +0000
ROA not before:           Tue 06 May 2025 18:33:08 +0000
ROA not after:            Tue 05 May 2026 18:38:08 +0000
asID:                     268425
IP address blocks:        2804:5104::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 22:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:13:2a:9c:80:d4:b2:d2:09:8b:1d:0f:d8:cb:87:3b:67:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: May  6 18:33:08 2025 GMT
            Not After : May  5 18:38:08 2026 GMT
        Subject: CN=0DC7E3806FEDDB2CA706CBCECDBA7E084D5C48EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:d9:9f:08:18:41:8b:d8:81:20:ee:28:82:
                    8f:dd:23:45:45:a5:63:92:4e:94:2d:25:a1:8a:d2:
                    8c:ce:30:54:59:b8:e3:17:c5:c5:eb:4a:a8:ed:72:
                    95:52:1b:65:b5:0b:77:dc:ac:ef:c2:f4:c1:1a:2f:
                    4a:81:5f:8f:ba:3b:43:4c:ad:21:3f:28:c1:2e:78:
                    14:81:0c:e5:11:f0:04:cf:00:4a:da:36:37:fe:d0:
                    48:81:4c:f7:ad:b0:84:33:3b:e0:9a:47:27:94:73:
                    65:d9:d1:83:fa:62:35:56:09:31:9c:ad:d1:0b:ed:
                    57:39:77:95:00:bb:ea:d9:3e:e4:1e:64:b9:a6:90:
                    ba:b0:f0:80:fe:54:8a:dd:ee:e5:f3:a5:92:9e:df:
                    e6:21:ae:1a:98:2d:1c:63:ee:ea:dd:30:11:01:cb:
                    71:3c:89:08:ef:16:65:dd:30:dd:8d:c6:78:45:9c:
                    7d:5a:28:a8:0a:37:2b:87:2b:b2:5a:58:1b:4f:a7:
                    ba:18:43:1f:2b:c9:27:38:aa:c4:4e:45:3d:96:e9:
                    05:44:0d:f8:ab:c7:6a:50:bc:eb:27:14:42:7a:bb:
                    b5:11:58:2f:98:b7:23:35:d8:41:e2:de:1e:6b:13:
                    d1:a2:57:58:50:94:20:f7:56:56:aa:5b:9c:c1:47:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:E3:80:6F:ED:DB:2C:A7:06:CB:CE:CD:BA:7E:08:4D:5C:48:EA
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3a2f33332d3333203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104::/33

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:30:f9:18:d5:c1:82:79:eb:fe:70:7c:9e:c8:bf:a9:eb:
         cf:69:7d:72:39:94:8e:62:76:ea:ba:3e:3a:63:20:0d:cd:a6:
         96:88:35:fc:fb:39:e1:70:95:3f:78:3c:7d:5a:ad:fe:d3:85:
         0b:66:06:dc:72:55:23:e0:a2:95:51:dc:46:6c:93:7a:86:fb:
         18:13:e4:a9:18:3d:a4:b6:5a:d4:38:26:03:62:7b:68:9c:fd:
         80:41:ee:18:79:b2:fe:d9:a5:8a:e6:36:57:bb:f8:c7:68:83:
         33:f4:fb:6c:8d:4a:73:63:3c:86:d8:0e:71:81:d1:69:29:b8:
         44:f6:74:19:e3:67:82:17:9a:90:a5:4c:53:50:46:68:24:6a:
         71:7c:f7:be:7e:80:e0:73:8a:11:92:3a:86:60:72:0d:8d:4b:
         8a:52:59:39:bd:2f:a2:6f:c3:29:cc:d0:7b:18:89:8e:d5:bb:
         96:60:b3:83:0b:69:92:9a:2c:8e:25:0b:57:dc:e8:4c:4d:ae:
         d1:d2:83:8e:c4:89:6b:93:31:7f:e5:16:e7:25:f4:dd:65:1c:
         34:38:46:25:7f:64:63:ec:d8:00:27:37:8e:b5:e1:1f:98:9c:
         72:06:3e:74:50:67:08:82:57:51:e9:0d:cc:38:6a:e0:90:d8:
         2c:94:b7:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHCgTKpyA1LLSCYsdD9jLhztniqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk2OEYwOEMzQkQwQTgyMTExMkJEQkQ4NjkxNEVENTk2
NEExRkYyOTAeFw0yNTA1MDYxODMzMDhaFw0yNjA1MDUxODM4MDhaMDMxMTAvBgNV
BAMTKDBEQzdFMzgwNkZFRERCMkNBNzA2Q0JDRUNEQkE3RTA4NEQ1QzQ4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbAdmfCBhBi9iBIO4ogo/dI0VF
pWOSTpQtJaGK0ozOMFRZuOMXxcXrSqjtcpVSG2W1C3fcrO/C9MEaL0qBX4+6O0NM
rSE/KMEueBSBDOUR8ATPAEraNjf+0EiBTPetsIQzO+CaRyeUc2XZ0YP6YjVWCTGc
rdEL7Vc5d5UAu+rZPuQeZLmmkLqw8ID+VIrd7uXzpZKe3+YhrhqYLRxj7urdMBEB
y3E8iQjvFmXdMN2NxnhFnH1aKKgKNyuHK7JaWBtPp7oYQx8rySc4qsRORT2W6QVE
Dfirx2pQvOsnFEJ6u7URWC+YtyM12EHi3h5rE9GiV1hQlCD3VlaqW5zBRyb7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDcfjgG/t2yynBsvOzbp+CE1cSOowHwYDVR0j
BBgwFoAU6WjwjDvQqCERK9vYaRTtWWSh/ykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlAyVzVUR3liU0Y3QVdXSzlBS2tBZE5Ob0JTVnVmeWp5NjMydXZYU0NN
Vk4vMC9FOTY4RjA4QzNCRDBBODIxMTEyQkRCRDg2OTE0RUQ1OTY0QTFGRjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5NjhGMDhDM0JEMEE4MjEx
MTJCREJEODY5MTRFRDU5NjRBMUZGMjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQMlc1VEd5YlNGN0FXV0s5QUtrQWROTm9CU1Z1ZnlqeTYzMnV2WFNDTVZOLzAv
MzIzODMwMzQzYTM1MzEzMDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARRBAAwDQYJKoZIhvcNAQELBQADggEBALFlMPkY
1cGCeev+cHyeyL+p689pfXI5lI5iduq6PjpjIA3NppaINfz7OeFwlT94PH1arf7T
hQtmBtxyVSPgopVR3EZsk3qG+xgT5KkYPaS2WtQ4JgNie2ic/YBB7hh5sv7ZpYrm
Nle7+MdogzP0+2yNSnNjPIbYDnGB0WkpuET2dBnjZ4IXmpClTFNQRmgkanF8975+
gOBzihGSOoZgcg2NS4pSWTm9L6JvwynM0HsYiY7Vu5Zgs4MLaZKaLI4lC1fc6ExN
rtHSg47EiWuTMX/lFucl9N1lHDQ4RiV/ZGPs2AAnN4614R+YnHIGPnRQZwiCV1Hp
Dcw4auCQ2CyUt0I=
-----END CERTIFICATE-----
Generated at Wed May 14 01:11:11 2025 by rpki-client