Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
File:                     323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa (raw, json)
Hash identifier:          dD+879hWvzUDJFsOSrXuEO67HQYkh2kZhuj4n7tsbcY=
Subject key identifier:   1D:BC:31:E9:83:C7:B8:4C:BF:72:4E:88:2E:F5:22:24:99:B7:2B:53
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       49C5498344E7A4CB40A5E4E7E5868ADFBB435DA3
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa
Signing time:             Wed 30 Apr 2025 12:58:56 +0000
ROA not before:           Wed 30 Apr 2025 12:53:56 +0000
ROA not after:            Wed 29 Apr 2026 12:58:56 +0000
asID:                     52540
IP address blocks:        2804:e10:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:49:83:44:e7:a4:cb:40:a5:e4:e7:e5:86:8a:df:bb:43:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr 30 12:53:56 2025 GMT
            Not After : Apr 29 12:58:56 2026 GMT
        Subject: CN=1DBC31E983C7B84CBF724E882EF5222499B72B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:5d:1f:84:af:12:01:5e:79:e2:36:43:98:
                    9b:23:85:1f:eb:11:6a:c5:fe:5c:6f:f9:27:e0:ec:
                    87:a3:88:92:43:2c:08:d1:d4:50:cb:2b:29:0e:e3:
                    00:bd:bb:fc:a2:cb:0c:01:a2:6d:14:23:90:9e:d9:
                    19:7a:0d:0a:51:27:53:22:57:89:1d:80:a2:34:52:
                    25:70:ab:61:49:d1:b5:43:c2:6a:52:c6:da:6d:7c:
                    87:50:a4:70:6e:76:53:44:47:b8:87:e6:d3:65:f3:
                    23:18:65:de:ea:1e:46:c2:d9:ae:f0:fe:da:5e:6e:
                    8b:70:43:43:e9:f2:f8:c9:ee:83:12:33:3e:ef:b4:
                    e6:7e:1f:63:9d:7e:12:60:54:6b:7b:17:cf:89:49:
                    44:b9:75:9f:81:4f:e4:4d:11:13:77:78:7b:08:53:
                    67:36:9a:66:84:7e:02:2d:0d:7f:10:08:1f:30:cd:
                    68:1f:d8:22:29:88:b7:d3:c9:04:d6:b2:6e:ca:de:
                    29:55:18:55:83:cf:2e:72:a9:85:d5:53:68:46:c5:
                    f0:e0:57:c1:d2:57:02:73:bb:07:aa:5c:23:a4:64:
                    4a:6a:e4:ec:63:84:b7:5d:74:54:8d:df:9e:ce:c3:
                    4b:0f:5f:7f:7d:2b:3f:ff:65:39:bd:b7:2d:bc:ab:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:31:E9:83:C7:B8:4C:BF:72:4E:88:2E:F5:22:24:99:B7:2B:53
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a383030303a3a2f33332d3333203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:14:9c:eb:fc:b1:e5:99:9d:65:db:eb:c0:52:de:7a:d4:
         15:8a:49:a7:f0:25:ea:f8:45:42:3a:4f:d2:e1:57:f3:2a:c5:
         ed:c8:ab:9c:e1:a1:b6:df:98:7d:43:62:c9:cd:03:e1:74:64:
         f0:4c:c1:7b:8c:56:c6:dd:73:ac:77:0d:4a:eb:54:b4:4e:5b:
         2c:da:ac:88:07:40:02:1f:f4:d1:ee:65:34:79:0f:b9:fa:94:
         35:c7:31:c7:39:8f:68:e5:38:3d:c0:4f:48:90:88:71:f8:81:
         5e:47:c5:23:f0:5e:f7:f2:f6:26:08:33:b1:59:b3:cf:b1:8e:
         9d:f0:4e:0e:12:74:44:3d:ae:c6:85:d5:31:84:99:04:0f:08:
         2e:e1:00:e3:e9:88:a8:a6:d2:57:05:81:bf:00:2f:85:ca:fa:
         ad:e7:6a:81:59:9c:98:71:8b:ae:91:b5:97:b2:22:23:c9:ad:
         63:96:76:2e:c5:fb:dc:92:48:5d:77:e9:af:72:31:c8:e0:36:
         85:32:56:77:b1:41:8f:dc:7a:b4:0b:17:5b:37:5d:c5:ec:62:
         d7:55:e5:62:49:3e:af:ab:6b:56:fc:5c:62:ca:49:98:fc:22:
         65:fd:ae:04:0d:ed:f1:5f:09:8d:04:e4:27:e4:38:69:2a:42:
         74:d7:63:10
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUScVJg0TnpMtApeTn5YaK37tDXaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBMjI4N0NFQUExMzE3NzgyMTg2NDVCMzc5ODU3NTQz
OTU1Q0EwNjAeFw0yNTA0MzAxMjUzNTZaFw0yNjA0MjkxMjU4NTZaMDMxMTAvBgNV
BAMTKDFEQkMzMUU5ODNDN0I4NENCRjcyNEU4ODJFRjUyMjI0OTlCNzJCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6F0fhK8SAV554jZDmJsjhR/r
EWrF/lxv+Sfg7IejiJJDLAjR1FDLKykO4wC9u/yiywwBom0UI5Ce2Rl6DQpRJ1Mi
V4kdgKI0UiVwq2FJ0bVDwmpSxtptfIdQpHBudlNER7iH5tNl8yMYZd7qHkbC2a7w
/tpebotwQ0Pp8vjJ7oMSMz7vtOZ+H2OdfhJgVGt7F8+JSUS5dZ+BT+RNERN3eHsI
U2c2mmaEfgItDX8QCB8wzWgf2CIpiLfTyQTWsm7K3ilVGFWDzy5yqYXVU2hGxfDg
V8HSVwJzuweqXCOkZEpq5OxjhLdddFSN357Ow0sPX399Kz//ZTm9ty28qym7AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUHbwx6YPHuEy/ck6ILvUiJJm3K1MwHwYDVR0j
BBgwFoAUsaIofOqhMXeCGGRbN5hXVDlVygYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMi9CMUEyMjg3Q0VBQTEzMTc3ODIxODY0NUIzNzk4NTc1NDM5NTVDQTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQTIyODdDRUFBMTMxNzc4
MjE4NjQ1QjM3OTg1NzU0Mzk1NUNBMDYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzIv
MzIzODMwMzQzYTY1MzEzMDNhMzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNl
MjAzNTMyMzUzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKAQOEIAwDQYJKoZIhvcNAQELBQADggEB
AK9qFJzr/LHlmZ1l2+vAUt561BWKSafwJer4RUI6T9LhV/Mqxe3Iq5zhobbfmH1D
YsnNA+F0ZPBMwXuMVsbdc6x3DUrrVLROWyzarIgHQAIf9NHuZTR5D7n6lDXHMcc5
j2jlOD3AT0iQiHH4gV5HxSPwXvfy9iYIM7FZs8+xjp3wTg4SdEQ9rsaF1TGEmQQP
CC7hAOPpiKim0lcFgb8AL4XK+q3naoFZnJhxi66RtZeyIiPJrWOWdi7F+9ySSF13
6a9yMcjgNoUyVnexQY/cerQLF1s3XcXsYtdV5WJJPq+ra1b8XGLKSZj8ImX9rgQN
7fFfCY0E5CfkOGkqQnTXYxA=
-----END CERTIFICATE-----
Generated at Wed May 14 10:21:34 2025 by rpki-client