Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa
File:                     323830343a346232343a3a2f33322d3438203d3e20323637323836.roa (raw, json)
Hash identifier:          +86fR/6zUDvEHqu8wzco41oJOMSvCX/lLIZUMRvsLss=
Subject key identifier:   9C:5B:47:8D:0F:5D:3D:B7:F0:EE:32:01:46:EC:A2:CE:33:5D:70:E3
Certificate issuer:       /CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
Certificate serial:       34F591269C5F7FE37E71B3722BDC7A92677E5021
Authority key identifier: BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa
Signing time:             Wed 07 May 2025 19:31:14 +0000
ROA not before:           Wed 07 May 2025 19:26:14 +0000
ROA not after:            Wed 06 May 2026 19:31:14 +0000
asID:                     267286
IP address blocks:        2804:4b24::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl
                          rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 03:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f5:91:26:9c:5f:7f:e3:7e:71:b3:72:2b:dc:7a:92:67:7e:50:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Validity
            Not Before: May  7 19:26:14 2025 GMT
            Not After : May  6 19:31:14 2026 GMT
        Subject: CN=9C5B478D0F5D3DB7F0EE320146ECA2CE335D70E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:2f:30:92:26:50:bd:f7:9c:27:be:36:58:
                    dc:15:50:76:13:7a:db:e9:20:d9:e6:d7:f3:b3:63:
                    84:93:b3:6b:ac:8c:e8:64:f7:30:e2:ab:69:3f:57:
                    05:5a:05:5f:33:04:be:24:e5:61:3f:4b:1e:bf:2a:
                    b8:d8:c0:30:3d:3f:0a:85:be:76:94:25:a6:e3:06:
                    c6:68:d2:12:c9:dd:bd:42:ec:53:08:40:45:c7:8f:
                    70:a3:60:ac:93:ba:36:aa:66:55:b2:51:45:b2:d3:
                    4f:93:36:93:46:fe:49:0d:ed:45:f5:52:83:4a:e2:
                    c0:05:23:6f:55:50:9f:b6:a9:17:ac:9d:38:6a:dc:
                    fc:e6:8f:7a:f5:31:1e:dc:f3:0b:36:d6:fe:2b:90:
                    48:97:29:3c:99:fd:e7:b1:ba:60:17:3c:eb:09:2b:
                    70:a9:62:a6:02:04:2a:bd:d3:29:4e:c7:ee:c7:1d:
                    a1:c1:7b:fd:b3:77:34:26:79:f3:d7:32:4d:68:17:
                    25:ab:40:05:13:62:69:a9:e4:fa:68:d4:5b:95:33:
                    6d:ee:0c:df:04:01:4b:35:ea:f0:ce:fa:4b:05:60:
                    bf:18:a6:7f:0f:04:aa:99:2f:7a:d3:72:08:04:0a:
                    2e:17:74:52:d3:fc:e2:54:db:0c:ba:e9:bb:96:12:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:47:8D:0F:5D:3D:B7:F0:EE:32:01:46:EC:A2:CE:33:5D:70:E3
            X509v3 Authority Key Identifier:
                keyid:BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/323830343a346232343a3a2f33322d3438203d3e20323637323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:91:18:a6:4d:5b:f1:1d:dd:32:21:46:ef:26:5a:36:11:
         81:ac:04:57:70:60:cc:2b:26:17:49:b7:aa:58:d6:f9:b1:49:
         f6:cd:c8:84:5c:19:3c:1e:7e:4c:12:ea:15:ed:a6:e8:c4:fe:
         d7:c0:84:aa:72:01:b1:ff:0d:8b:79:90:ef:b9:9d:29:5e:c1:
         79:0b:8f:70:99:fb:10:47:28:c4:13:50:e5:39:b1:aa:c3:36:
         71:6d:a6:ab:b3:fc:03:7a:e5:1e:00:32:34:d8:0b:7f:fe:dd:
         fe:ff:34:8a:bc:bd:99:e9:4a:ad:5e:a2:5e:34:42:18:1f:ad:
         3f:ca:4e:00:d1:30:f5:e6:9c:7a:ed:37:af:b5:f3:d2:89:0d:
         f8:07:a9:6e:76:af:ce:a6:bb:80:fd:b1:58:cd:71:90:66:14:
         1c:8b:e2:f1:92:cb:3e:e8:92:e9:43:89:1b:90:7f:7f:fc:f3:
         30:ca:b0:cb:e9:cf:56:15:c6:be:8a:1e:04:8e:4a:a3:fa:ed:
         b8:78:42:c9:59:b7:7d:c4:ec:c3:01:0d:b8:b1:36:ab:fd:93:
         ac:c2:c8:fb:79:89:f6:c2:60:5c:a7:ec:47:c8:6b:7f:da:f6:
         16:c9:14:24:b4:e9:e2:a6:e0:84:9c:87:a4:39:fb:2c:4c:84:
         2b:a1:30:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNPWRJpxff+N+cbNyK9x6kmd+UCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJBQzE5RTkyQjQ1ODdBM0FENThBRDQ0OTUxNkRGRDc2
QkIzQ0Q3MzAeFw0yNTA1MDcxOTI2MTRaFw0yNjA1MDYxOTMxMTRaMDMxMTAvBgNV
BAMTKDlDNUI0NzhEMEY1RDNEQjdGMEVFMzIwMTQ2RUNBMkNFMzM1RDcwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUi8wkiZQvfecJ742WNwVUHYT
etvpINnm1/OzY4STs2usjOhk9zDiq2k/VwVaBV8zBL4k5WE/Sx6/KrjYwDA9PwqF
vnaUJabjBsZo0hLJ3b1C7FMIQEXHj3CjYKyTujaqZlWyUUWy00+TNpNG/kkN7UX1
UoNK4sAFI29VUJ+2qResnThq3Pzmj3r1MR7c8ws21v4rkEiXKTyZ/eexumAXPOsJ
K3CpYqYCBCq90ylOx+7HHaHBe/2zdzQmefPXMk1oFyWrQAUTYmmp5Ppo1FuVM23u
DN8EAUs16vDO+ksFYL8Ypn8PBKqZL3rTcggECi4XdFLT/OJU2wy66buWEpxXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnFtHjQ9dPbfw7jIBRuyizjNdcOMwHwYDVR0j
BBgwFoAUu6wZ6StFh6OtWK1ElRbf12uzzXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVwb2NwS1VwMVE5ZkZGTDRRR2E5Q25zTEZaeXJKNFhuNHVGR2o4cXhU
N0UvMC9CQkFDMTlFOTJCNDU4N0EzQUQ1OEFENDQ5NTE2REZENzZCQjNDRDczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCQUMxOUU5MkI0NTg3QTNB
RDU4QUQ0NDk1MTZERkQ3NkJCM0NENzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcG9jcEtVcDFROWZGRkw0UUdhOUNuc0xGWnlySjRYbjR1RkdqOHF4VDdFLzAv
MzIzODMwMzQzYTM0NjIzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLJDANBgkqhkiG9w0BAQsFAAOCAQEABemRGKZN
W/Ed3TIhRu8mWjYRgawEV3BgzCsmF0m3qljW+bFJ9s3IhFwZPB5+TBLqFe2m6MT+
18CEqnIBsf8Ni3mQ77mdKV7BeQuPcJn7EEcoxBNQ5TmxqsM2cW2mq7P8A3rlHgAy
NNgLf/7d/v80iry9melKrV6iXjRCGB+tP8pOANEw9eaceu03r7Xz0okN+Aepbnav
zqa7gP2xWM1xkGYUHIvi8ZLLPuiS6UOJG5B/f/zzMMqwy+nPVhXGvooeBI5Ko/rt
uHhCyVm3fcTswwENuLE2q/2TrMLI+3mJ9sJgXKfsR8hrf9r2FskUJLTp4qbghJyH
pDn7LEyEK6EwWA==
-----END CERTIFICATE-----
Generated at Sat May 10 11:23:54 2025 by rpki-client