Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa
File:                     323830343a353836343a3a2f33322d3438203d3e20323638313236.roa (raw, json)
Hash identifier:          3gAU31YrIDVENPQtBoAuObhVBQqRKDMQ9q2tY/YekYE=
Subject key identifier:   C2:9D:86:66:C6:51:C2:91:49:26:A1:9B:D6:03:4B:90:20:03:F5:4D
Certificate issuer:       /CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
Certificate serial:       3B3EE50D821655793D905AB589AD0632BEAFB573
Authority key identifier: AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa
Signing time:             Fri 11 Jul 2025 15:13:34 +0000
ROA not before:           Fri 11 Jul 2025 15:08:34 +0000
ROA not after:            Fri 10 Jul 2026 15:13:34 +0000
asID:                     268126
IP address blocks:        2804:5864::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl
                          rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 01:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3e:e5:0d:82:16:55:79:3d:90:5a:b5:89:ad:06:32:be:af:b5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5
        Validity
            Not Before: Jul 11 15:08:34 2025 GMT
            Not After : Jul 10 15:13:34 2026 GMT
        Subject: CN=C29D8666C651C2914926A19BD6034B902003F54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:57:e1:83:aa:b9:9a:99:d9:fb:a1:35:91:
                    37:e8:66:49:d6:fd:37:e2:a4:9c:ee:5b:ba:98:aa:
                    82:66:80:f1:03:08:33:f7:30:96:ea:9c:45:f5:1b:
                    ca:3a:02:99:df:f5:f1:89:08:3c:bd:77:81:21:2b:
                    94:1f:00:1c:2c:c4:2b:ee:bd:89:6f:94:9a:c6:56:
                    32:c5:5a:cd:54:8e:8e:89:ac:83:a4:51:29:e5:47:
                    16:fd:a5:8d:84:07:eb:28:9e:d8:33:2a:4e:4b:5d:
                    29:4c:67:85:34:7e:0f:be:be:12:6b:18:b3:46:a9:
                    b9:a0:29:78:54:62:20:0b:a3:59:cb:60:31:d2:a3:
                    fa:5f:81:ec:c9:3e:60:54:30:b0:40:c1:e0:dc:42:
                    f2:a2:6e:8c:aa:43:36:f8:6c:a1:7a:8a:44:88:19:
                    17:30:9a:c3:dc:b5:3e:c1:31:7d:a2:cc:58:d4:e0:
                    90:b5:ac:dd:f5:73:70:e7:d3:0d:0d:23:85:1b:a5:
                    e8:d1:e5:a4:82:57:19:04:84:77:01:d4:47:8c:49:
                    5f:bd:81:d2:56:8a:60:94:61:b3:a1:4c:3e:cf:1e:
                    ac:93:8c:1f:c5:6b:23:66:21:16:ae:2d:9a:20:1c:
                    91:bc:02:11:b1:0f:72:07:a2:02:03:c4:01:29:bf:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:86:66:C6:51:C2:91:49:26:A1:9B:D6:03:4B:90:20:03:F5:4D
            X509v3 Authority Key Identifier:
                keyid:AB:94:7F:B2:92:EA:C0:79:1D:C1:DB:5B:5D:0A:4C:4C:39:02:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB947FB292EAC0791DC1DB5B5D0A4C4C390241E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/323830343a353836343a3a2f33322d3438203d3e20323638313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5864::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:12:b7:22:6d:40:d5:2e:74:56:85:ea:2a:58:98:01:5f:fd:
         df:ff:3e:3f:13:92:90:cd:f5:3a:7c:4b:93:7e:16:e6:22:bf:
         5f:4b:8c:1b:d5:27:1c:27:af:10:00:2c:0d:aa:92:2f:04:fb:
         06:c1:3d:d9:7c:3e:17:f2:92:e2:16:d2:81:dd:2e:f0:f5:0d:
         35:d6:fa:30:f3:a6:60:7f:57:dc:96:b0:ae:70:06:67:df:f2:
         93:4e:36:b5:4c:96:7c:21:63:f5:b4:f1:fa:0b:61:a1:89:02:
         e3:5d:b0:0a:5a:17:a8:a3:74:aa:01:dd:82:0e:29:e2:4f:a3:
         77:93:b3:d5:e0:0a:ea:a3:34:80:8a:df:d7:fd:c6:66:85:f0:
         ae:1d:6b:a8:bf:17:06:51:bc:32:f3:b3:75:e2:e6:84:55:6d:
         68:8e:d5:8d:74:98:1c:06:f2:2e:52:80:a9:fb:4e:b3:4d:9b:
         46:a9:a0:8f:96:18:dd:29:39:04:72:ea:14:91:83:66:17:c1:
         31:19:86:1b:cd:a5:0b:61:9a:1e:53:14:d8:be:3c:28:38:92:
         8e:cb:d2:4a:40:99:13:38:08:9d:94:6b:d9:de:5d:88:0d:6d:
         12:46:39:80:ec:dd:6e:02:ca:9c:63:63:79:8e:1c:a7:03:0c:
         c6:2c:6a:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOz7lDYIWVXk9kFq1ia0GMr6vtXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5NDdGQjI5MkVBQzA3OTFEQzFEQjVCNUQwQTRDNEMz
OTAyNDFFNTAeFw0yNTA3MTExNTA4MzRaFw0yNjA3MTAxNTEzMzRaMDMxMTAvBgNV
BAMTKEMyOUQ4NjY2QzY1MUMyOTE0OTI2QTE5QkQ2MDM0QjkwMjAwM0Y1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Y1fhg6q5mpnZ+6E1kTfoZknW
/TfipJzuW7qYqoJmgPEDCDP3MJbqnEX1G8o6Apnf9fGJCDy9d4EhK5QfABwsxCvu
vYlvlJrGVjLFWs1Ujo6JrIOkUSnlRxb9pY2EB+sontgzKk5LXSlMZ4U0fg++vhJr
GLNGqbmgKXhUYiALo1nLYDHSo/pfgezJPmBUMLBAweDcQvKiboyqQzb4bKF6ikSI
GRcwmsPctT7BMX2izFjU4JC1rN31c3Dn0w0NI4UbpejR5aSCVxkEhHcB1EeMSV+9
gdJWimCUYbOhTD7PHqyTjB/FayNmIRauLZogHJG8AhGxD3IHogIDxAEpv//TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwp2GZsZRwpFJJqGb1gNLkCAD9U0wHwYDVR0j
BBgwFoAUq5R/spLqwHkdwdtbXQpMTDkCQeUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh
akEvMC9BQjk0N0ZCMjkyRUFDMDc5MURDMURCNUI1RDBBNEM0QzM5MDI0MUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOTQ3RkIyOTJFQUMwNzkx
REMxREI1QjVEMEE0QzRDMzkwMjQxRTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3TXFmellQSFlybWNrVWJQMWR0TVF5bjhUeDNRdWg1N05TYTJGZ2tVYWpBLzAv
MzIzODMwMzQzYTM1MzgzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYZDANBgkqhkiG9w0BAQsFAAOCAQEAiBK3Im1A
1S50VoXqKliYAV/93/8+PxOSkM31OnxLk34W5iK/X0uMG9UnHCevEAAsDaqSLwT7
BsE92Xw+F/KS4hbSgd0u8PUNNdb6MPOmYH9X3JawrnAGZ9/yk042tUyWfCFj9bTx
+gthoYkC412wCloXqKN0qgHdgg4p4k+jd5Oz1eAK6qM0gIrf1/3GZoXwrh1rqL8X
BlG8MvOzdeLmhFVtaI7VjXSYHAbyLlKAqftOs02bRqmgj5YY3Sk5BHLqFJGDZhfB
MRmGG82lC2GaHlMU2L48KDiSjsvSSkCZEzgInZRr2d5diA1tEkY5gOzdbgLKnGNj
eY4cpwMMxixqWA==
-----END CERTIFICATE-----
Generated at Sun Jul 13 07:23:51 2025 by rpki-client