Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/323830343a336235383a3a2f33322d3438203d3e20323636313433.roa
File:                     323830343a336235383a3a2f33322d3438203d3e20323636313433.roa (raw, json)
Hash identifier:          YrJVt/+CP945BO5Kr5+xUkFP3RBB6Iw2yWnCDr5yJEc=
Subject key identifier:   B7:F3:64:2C:17:D3:BE:CE:E4:71:87:9D:BB:8C:B8:1D:73:1A:5D:67
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       3CA5F1E91D2B42CCE1453416C9E503FBDF51A6E6
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/323830343a336235383a3a2f33322d3438203d3e20323636313433.roa
Signing time:             Wed 07 May 2025 20:31:24 +0000
ROA not before:           Wed 07 May 2025 20:26:24 +0000
ROA not after:            Wed 06 May 2026 20:31:24 +0000
asID:                     266143
IP address blocks:        2804:3b58::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl
                          rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 20:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:f1:e9:1d:2b:42:cc:e1:45:34:16:c9:e5:03:fb:df:51:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: May  7 20:26:24 2025 GMT
            Not After : May  6 20:31:24 2026 GMT
        Subject: CN=B7F3642C17D3BECEE471879DBB8CB81D731A5D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:ed:4e:0d:f8:66:f1:0d:f9:b2:9a:4b:b8:
                    85:8d:82:ab:92:07:85:f1:10:38:a9:4b:5e:8a:72:
                    87:7e:f3:8e:33:b9:34:99:65:28:dd:2a:12:54:27:
                    28:88:57:ed:06:be:a8:78:35:a7:bc:1d:3a:f4:9f:
                    39:0d:b3:82:ea:9b:a9:37:74:52:02:f7:42:aa:4a:
                    91:49:6d:28:b1:8d:e9:04:20:3f:57:61:dd:6e:92:
                    61:27:85:5a:fb:ef:83:37:1b:df:bb:b1:e6:fd:0e:
                    9d:94:7f:91:b2:3d:8d:a5:48:e7:f4:27:49:cb:0c:
                    e7:7c:e6:6f:86:27:90:5c:94:8f:be:33:32:aa:e2:
                    f3:e2:f0:6d:b3:d0:7c:e1:0f:00:12:74:94:aa:4e:
                    d9:67:bf:39:bb:36:9e:6c:66:70:62:09:f2:67:46:
                    ae:ac:7a:1a:cb:49:c5:78:f3:1f:9c:c7:27:cc:a5:
                    52:5d:b1:30:eb:59:14:d3:ee:72:44:18:a6:27:e9:
                    27:ad:93:c4:0d:22:bd:58:a7:39:57:d2:3b:1e:c6:
                    39:47:7c:f4:4d:ae:3d:6d:a0:cc:88:af:d1:79:58:
                    7e:28:6f:04:ce:2d:d7:32:11:b2:bd:1b:c0:ee:13:
                    2e:91:ad:5c:7e:6b:61:21:01:b4:f7:34:f9:7c:51:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F3:64:2C:17:D3:BE:CE:E4:71:87:9D:BB:8C:B8:1D:73:1A:5D:67
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/323830343a336235383a3a2f33322d3438203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:79:21:25:36:43:f8:0b:0f:ba:c0:d8:6a:86:d2:6e:c0:7d:
         73:05:c3:a2:5d:aa:87:d0:91:68:ee:cb:5a:06:fe:d4:15:98:
         c0:46:9b:b6:89:a7:b0:3d:78:d4:fa:8a:17:ff:45:a5:57:02:
         12:5e:91:d1:c3:05:9b:2e:fe:d0:cc:e6:d3:ba:3b:a5:53:24:
         2b:ea:aa:3c:c3:67:ab:0a:1b:59:94:2f:21:ab:03:1e:7e:d2:
         1f:bc:0f:b2:bc:31:e9:d0:ea:75:2c:b2:b5:94:c6:9d:b1:d4:
         77:1a:ba:29:6e:b6:00:0b:f5:ea:3e:53:2a:a9:cd:71:05:9c:
         04:dc:17:b3:4e:1c:ff:ab:f0:b9:f6:6c:9d:eb:b0:70:13:d4:
         53:30:57:13:c3:60:2a:b5:5a:30:49:e6:19:cd:ea:45:8f:d9:
         fb:bc:c2:3d:7a:06:bb:2c:d5:ba:fe:6c:0f:46:c5:02:24:43:
         e7:3f:de:10:19:dc:e8:a6:ec:9c:81:db:8f:f7:15:68:5b:6c:
         5a:8a:0d:99:7b:19:d1:f8:e9:3a:c6:74:cf:8b:dd:32:75:7d:
         df:07:75:09:39:ea:8c:6d:8f:47:ea:4f:e3:06:6c:a8:4f:bc:
         56:25:38:cc:c4:ed:29:25:41:57:04:c8:11:bc:eb:03:33:40:
         f2:af:6d:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPKXx6R0rQszhRTQWyeUD+99RpuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwMjJGOUM2QTAwNkFBNkNGMEY2QzNBRjVDMEEyNEJC
RTE0QjBBMjAeFw0yNTA1MDcyMDI2MjRaFw0yNjA1MDYyMDMxMjRaMDMxMTAvBgNV
BAMTKEI3RjM2NDJDMTdEM0JFQ0VFNDcxODc5REJCOENCODFENzMxQTVENjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM++1ODfhm8Q35sppLuIWNgquS
B4XxEDipS16Kcod+844zuTSZZSjdKhJUJyiIV+0Gvqh4Nae8HTr0nzkNs4Lqm6k3
dFIC90KqSpFJbSixjekEID9XYd1ukmEnhVr774M3G9+7seb9Dp2Uf5GyPY2lSOf0
J0nLDOd85m+GJ5BclI++MzKq4vPi8G2z0HzhDwASdJSqTtlnvzm7Np5sZnBiCfJn
Rq6sehrLScV48x+cxyfMpVJdsTDrWRTT7nJEGKYn6Setk8QNIr1YpzlX0jsexjlH
fPRNrj1toMyIr9F5WH4obwTOLdcyEbK9G8DuEy6RrVx+a2EhAbT3NPl8UZJbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUt/NkLBfTvs7kcYedu4y4HXMaXWcwHwYDVR0j
BBgwFoAUtAIvnGoAaqbPD2w69cCiS74UsKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEw1bXBMak15NTNnUlBqOUFDbUxMNG1MUDEzdGJmNjROOUVlMThzVWpL
VGQvMC9CNDAyMkY5QzZBMDA2QUE2Q0YwRjZDM0FGNUMwQTI0QkJFMTRCMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MDIyRjlDNkEwMDZBQTZD
RjBGNkMzQUY1QzBBMjRCQkUxNEIwQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRMNW1wTGpNeTUzZ1JQajlBQ21MTDRtTFAxM3RiZjY0TjlFZTE4c1VqS1RkLzAv
MzIzODMwMzQzYTMzNjIzNTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7WDANBgkqhkiG9w0BAQsFAAOCAQEAFnkhJTZD
+AsPusDYaobSbsB9cwXDol2qh9CRaO7LWgb+1BWYwEabtomnsD141PqKF/9FpVcC
El6R0cMFmy7+0Mzm07o7pVMkK+qqPMNnqwobWZQvIasDHn7SH7wPsrwx6dDqdSyy
tZTGnbHUdxq6KW62AAv16j5TKqnNcQWcBNwXs04c/6vwufZsneuwcBPUUzBXE8Ng
KrVaMEnmGc3qRY/Z+7zCPXoGuyzVuv5sD0bFAiRD5z/eEBnc6KbsnIHbj/cVaFts
WooNmXsZ0fjpOsZ0z4vdMnV93wd1CTnqjG2PR+pP4wZsqE+8ViU4zMTtKSVBVwTI
EbzrAzNA8q9txg==
-----END CERTIFICATE-----
Generated at Mon May 12 03:55:38 2025 by rpki-client