Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
File:                     323830343a6531303a3a2f33342d3334203d3e203532353430.roa (raw, json)
Hash identifier:          P0UB8rxd+Tb4FWAVu4OuNHpfB2Y0puYXW3qOd2dWlvw=
Subject key identifier:   8C:11:C1:FC:62:35:13:C6:BC:DA:9E:3C:44:0D:C8:C8:57:E9:11:E2
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       23988FCAD16AA38ECBD517FAD45559F6AE056CBC
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa
Signing time:             Wed 30 Apr 2025 12:58:56 +0000
ROA not before:           Wed 30 Apr 2025 12:53:56 +0000
ROA not after:            Wed 29 Apr 2026 12:58:56 +0000
asID:                     52540
IP address blocks:        2804:e10::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:98:8f:ca:d1:6a:a3:8e:cb:d5:17:fa:d4:55:59:f6:ae:05:6c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr 30 12:53:56 2025 GMT
            Not After : Apr 29 12:58:56 2026 GMT
        Subject: CN=8C11C1FC623513C6BCDA9E3C440DC8C857E911E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:eb:09:2c:fd:3d:9e:0d:e5:1c:b7:1e:ea:
                    1f:2d:d9:fb:32:1b:65:98:9b:3d:66:68:0b:39:a0:
                    30:84:d9:fe:52:93:b4:d1:e9:03:cb:c2:42:e3:d9:
                    70:89:b9:9c:75:72:32:6d:7e:0c:45:fe:10:44:61:
                    f0:71:d4:98:2c:d1:f1:7b:6a:99:78:85:35:66:bf:
                    d0:0c:54:72:0c:2f:83:16:b9:39:5d:a1:67:91:d0:
                    fa:8b:22:f7:2c:67:fd:ed:32:c7:63:7d:22:10:f9:
                    67:9b:b1:eb:bc:c7:60:b6:21:a2:aa:82:4e:c6:0d:
                    57:8a:d3:92:21:29:af:77:c3:4d:ef:51:9d:e4:d0:
                    33:9b:91:ba:9d:9e:c3:4a:70:57:26:22:97:41:41:
                    ce:0f:37:09:61:46:bd:c6:8c:80:9e:4f:44:5f:5e:
                    7e:65:e3:5c:9e:ac:82:49:eb:b8:ad:50:55:50:39:
                    f1:20:96:6e:02:74:d4:93:ec:3c:ef:18:6a:bb:25:
                    32:f6:51:84:5e:0a:34:4c:b3:53:a7:33:09:8d:f8:
                    be:30:1f:70:c4:a1:a9:c6:27:dd:05:aa:09:7c:03:
                    6e:e8:10:03:b4:d3:56:0c:2f:fb:02:8b:f0:c5:96:
                    8e:61:64:5d:78:a8:91:d0:cc:ee:a0:08:0a:2e:5e:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:11:C1:FC:62:35:13:C6:BC:DA:9E:3C:44:0D:C8:C8:57:E9:11:E2
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/323830343a6531303a3a2f33342d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:0b:d3:95:e0:c4:93:5c:29:63:ee:77:41:74:1d:d0:4f:
         9d:a2:b9:14:eb:eb:35:33:40:02:de:f1:31:a2:cb:be:39:98:
         91:24:3a:09:9f:8f:ce:40:31:8a:83:d6:ec:01:6d:2a:36:2e:
         b3:b0:c4:60:42:b2:b4:97:7c:cc:1c:23:f6:9b:02:d1:8e:e6:
         63:ca:6f:07:04:6b:6a:c0:70:1d:41:ab:30:6a:63:26:81:99:
         83:d1:53:5e:4b:73:38:11:2e:ac:94:27:06:45:4d:b8:94:4c:
         37:43:be:4b:60:38:2f:c3:37:1a:3d:04:72:d7:7b:42:08:87:
         d9:71:bb:24:fa:4b:d3:9c:12:32:5a:37:60:90:ef:e4:d5:b8:
         7f:a5:48:9c:8b:69:f5:0e:b7:ea:e8:32:1f:e9:09:c6:05:cb:
         cd:24:d3:eb:59:a1:8d:1e:20:da:be:98:f0:e3:cc:b5:82:fd:
         ac:d6:10:91:15:72:90:bd:6e:64:03:60:ce:04:47:b1:f3:d0:
         cc:eb:76:20:a4:d0:31:c3:a0:01:a2:fb:7e:5d:b6:71:4c:2f:
         e3:a6:28:e9:f6:4a:dd:95:d1:c1:ff:39:cc:8d:bc:0c:42:86:
         b1:95:20:24:7b:aa:2e:d7:9e:c8:a4:52:e2:24:be:d3:87:e7:
         86:6a:65:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI5iPytFqo47L1Rf61FVZ9q4FbLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBMjI4N0NFQUExMzE3NzgyMTg2NDVCMzc5ODU3NTQz
OTU1Q0EwNjAeFw0yNTA0MzAxMjUzNTZaFw0yNjA0MjkxMjU4NTZaMDMxMTAvBgNV
BAMTKDhDMTFDMUZDNjIzNTEzQzZCQ0RBOUUzQzQ0MERDOEM4NTdFOTExRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+esJLP09ng3lHLce6h8t2fsy
G2WYmz1maAs5oDCE2f5Sk7TR6QPLwkLj2XCJuZx1cjJtfgxF/hBEYfBx1Jgs0fF7
apl4hTVmv9AMVHIML4MWuTldoWeR0PqLIvcsZ/3tMsdjfSIQ+Webseu8x2C2IaKq
gk7GDVeK05IhKa93w03vUZ3k0DObkbqdnsNKcFcmIpdBQc4PNwlhRr3GjICeT0Rf
Xn5l41yerIJJ67itUFVQOfEglm4CdNST7DzvGGq7JTL2UYReCjRMs1OnMwmN+L4w
H3DEoanGJ90Fqgl8A27oEAO001YML/sCi/DFlo5hZF14qJHQzO6gCAouXttLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUjBHB/GI1E8a82p48RA3IyFfpEeIwHwYDVR0j
BBgwFoAUsaIofOqhMXeCGGRbN5hXVDlVygYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMi9CMUEyMjg3Q0VBQTEzMTc3ODIxODY0NUIzNzk4NTc1NDM5NTVDQTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQTIyODdDRUFBMTMxNzc4
MjE4NjQ1QjM3OTg1NzU0Mzk1NUNBMDYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzIv
MzIzODMwMzQzYTY1MzEzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDM1MzIzNTM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgYoBA4QADANBgkqhkiG9w0BAQsFAAOCAQEAWesL05XgxJNc
KWPud0F0HdBPnaK5FOvrNTNAAt7xMaLLvjmYkSQ6CZ+PzkAxioPW7AFtKjYus7DE
YEKytJd8zBwj9psC0Y7mY8pvBwRrasBwHUGrMGpjJoGZg9FTXktzOBEurJQnBkVN
uJRMN0O+S2A4L8M3Gj0Ectd7QgiH2XG7JPpL05wSMlo3YJDv5NW4f6VInItp9Q63
6ugyH+kJxgXLzSTT61mhjR4g2r6Y8OPMtYL9rNYQkRVykL1uZANgzgRHsfPQzOt2
IKTQMcOgAaL7fl22cUwv46Yo6fZK3ZXRwf85zI28DEKGsZUgJHuqLteeyKRS4iS+
04fnhmplkA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:07:24 2025 by rpki-client