Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          BFXtbz4DuSR+540h2SLMlJNxEfHFTqxzFBv1Wef2kb0=
Subject key identifier:   30:A5:82:A4:DF:AF:2F:75:DC:31:44:E0:63:61:53:D0:CA:78:7D:F6
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       5090FAAC48298C0E1A79873A32737DF3FFACD2E2
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:03 +0000
ROA not before:           Tue 22 Apr 2025 20:55:03 +0000
ROA not after:            Tue 21 Apr 2026 21:00:03 +0000
asID:                     262687
IP address blocks:        2804:385c:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:90:fa:ac:48:29:8c:0e:1a:79:87:3a:32:73:7d:f3:ff:ac:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:03 2025 GMT
            Not After : Apr 21 21:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:d1:5d:87:91:b8:8d:b0:20:c9:1a:fe:f6:
                    f7:f4:b8:53:84:4b:c3:46:8d:7a:b7:cd:b1:05:8e:
                    75:46:b1:7b:25:c0:9e:8e:a9:f8:5a:69:49:19:14:
                    ba:1d:61:16:69:05:2f:81:c1:79:67:38:0d:d0:85:
                    6b:c2:39:84:31:6f:44:2e:4f:e3:51:40:e0:d3:7f:
                    25:1c:27:9c:8a:71:f8:a7:8a:30:70:85:1c:0c:4e:
                    9f:f7:24:1a:da:d1:86:46:b9:87:08:1a:5e:49:7e:
                    39:56:5e:b9:45:fe:20:e3:30:e0:77:3f:85:2f:f4:
                    5c:bf:a5:b7:80:58:10:13:07:4c:69:48:f2:76:96:
                    e8:f0:ba:ac:ca:d4:b6:a0:d6:9a:ec:4d:55:73:6f:
                    36:4f:b2:15:3e:b9:8c:c2:29:78:70:e3:48:7f:8c:
                    2f:96:86:45:3d:79:9d:95:14:e4:2d:de:cb:ed:f9:
                    ef:ac:ea:cc:07:2d:c5:64:80:51:82:d4:3f:82:92:
                    e9:1a:38:3e:43:7e:d0:0b:5e:0c:07:33:a0:e3:a9:
                    2d:a6:10:6d:03:cf:e8:66:7b:6a:a7:5c:9c:23:91:
                    d8:83:24:33:1c:4d:59:af:ca:5f:39:b5:35:90:cc:
                    03:66:3c:15:6f:7e:d9:bd:51:f6:1c:c5:ee:e9:92:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:82:A4:DF:AF:2F:75:DC:31:44:E0:63:61:53:D0:CA:78:7D:F6
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:98:15:04:68:c7:6c:4b:d2:d1:3c:f2:38:e9:da:f2:e7:
         19:1e:05:a2:fc:04:6d:a9:38:0d:a2:77:f0:2a:ff:dd:41:a6:
         dc:c5:c3:72:4e:16:38:29:90:dd:5e:46:81:7f:0e:15:31:94:
         b8:79:88:50:93:a9:d1:43:36:1d:95:4e:1f:c1:2f:e4:9c:73:
         f7:93:b8:e5:99:37:3c:22:01:1b:44:ce:4d:5e:80:11:20:af:
         17:af:79:b7:dc:b4:ff:2b:13:01:04:7a:65:cb:cc:85:e3:58:
         11:ed:04:e4:fe:06:0b:0f:95:5b:c2:e6:ec:18:d9:6e:65:09:
         fa:dd:cb:5c:b2:cf:82:67:46:f9:7b:17:ae:61:31:96:09:9d:
         e3:2f:cc:43:4f:73:2e:dc:4e:df:b1:8c:30:d0:e5:8b:0e:04:
         76:c6:74:59:97:2d:59:6f:cc:31:2a:9d:86:9f:d0:68:4a:81:
         6a:17:ba:cd:eb:60:ed:d0:68:4c:71:97:99:3f:5f:3d:fb:38:
         0b:b0:f2:58:be:6a:90:cb:b9:29:96:04:4e:29:69:5f:a1:cd:
         50:ec:5e:e6:41:a9:f6:69:e7:a5:17:bf:76:60:5b:b3:c4:82:
         46:c9:11:50:2f:7e:b2:78:4f:bc:19:bb:0e:7a:f2:66:97:10:
         8e:a4:77:65
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUUJD6rEgpjA4aeYc6MnN98/+s0uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZENUY1NjJCMzI3MkU0NEE1MTI4MjkxMTk4NkVBMDM4
QzVENjkxOTAeFw0yNTA0MjIyMDU1MDNaFw0yNjA0MjEyMTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdCOEQxNUQ4NzkxQjg4REIw
MjBDOTFBRkVGNkY3RjRCODUzODQ0QkMzNDY4RDdBQjdDREIxMDU4RTc1NDZCMTdC
MjVDMDlFOEVBOUY4NUE2OTQ5MTkxNEJBMUQ2MTE2NjkwNTJGODFDMTc5NjczODBE
RDA4NTZCQzIzOTg0MzE2RjQ0MkU0RkUzNTE0MEUwRDM3RjI1MUMyNzlDOEE3MUY4
QTc4QTMwNzA4NTFDMEM0RTlGRjcyNDFBREFEMTg2NDZCOTg3MDgxQTVFNDk3RTM5
NTY1RUI5NDVGRTIwRTMzMEUwNzczRjg1MkZGNDVDQkZBNUI3ODA1ODEwMTMwNzRD
Njk0OEYyNzY5NkU4RjBCQUFDQ0FENEI2QTBENjlBRUM0RDU1NzM2RjM2NEZCMjE1
M0VCOThDQzIyOTc4NzBFMzQ4N0Y4QzJGOTY4NjQ1M0Q3OTlEOTUxNEU0MkRERUNC
RURGOUVGQUNFQUNDMDcyREM1NjQ4MDUxODJENDNGODI5MkU5MUEzODNFNDM3RUQw
MEI1RTBDMDczM0EwRTNBOTJEQTYxMDZEMDNDRkU4NjY3QjZBQTc1QzlDMjM5MUQ4
ODMyNDMzMUM0RDU5QUZDQTVGMzlCNTM1OTBDQzAzNjYzQzE1NkY3RUQ5QkQ1MUY2
MUNDNUVFRTk5MkU3NjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt7jRXYeRuI2wIMka/vb39LhThEvDRo16t82xBY51RrF7JcCejqn4
WmlJGRS6HWEWaQUvgcF5ZzgN0IVrwjmEMW9ELk/jUUDg038lHCecinH4p4owcIUc
DE6f9yQa2tGGRrmHCBpeSX45Vl65Rf4g4zDgdz+FL/Rcv6W3gFgQEwdMaUjydpbo
8LqsytS2oNaa7E1Vc282T7IVPrmMwil4cONIf4wvloZFPXmdlRTkLd7L7fnvrOrM
By3FZIBRgtQ/gpLpGjg+Q37QC14MBzOg46ktphBtA8/oZntqp1ycI5HYgyQzHE1Z
r8pfObU1kMwDZjwVb37ZvVH2HMXu6ZLnZwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDClgqTfry913DFE4GNhU9DKeH32MB8GA1UdIwQYMBaAFF/V9WKzJy5EpRKCkRmG
6gOMXWkZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzEvNUZENUY1NjJCMzI3MkU0
NEE1MTI4MjkxMTk4NkVBMDM4QzVENjkxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkQ1RjU2MkIzMjcyRTQ0QTUxMjgyOTExOTg2RUEwMzhDNUQ2
OTE5LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8xLzMyMzgzMDM0M2EzMzM4MzU2MzNh
Mzg2MzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzIzNjM4Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBDhcjDANBgkqhkiG9w0BAQsFAAOCAQEAU1uYFQRox2xL0tE88jjp
2vLnGR4FovwEbak4DaJ38Cr/3UGm3MXDck4WOCmQ3V5GgX8OFTGUuHmIUJOp0UM2
HZVOH8Ev5Jxz95O45Zk3PCIBG0TOTV6AESCvF695t9y0/ysTAQR6ZcvMheNYEe0E
5P4GCw+VW8Lm7BjZbmUJ+t3LXLLPgmdG+XsXrmExlgmd4y/MQ09zLtxO37GMMNDl
iw4EdsZ0WZctWW/MMSqdhp/QaEqBahe6zetg7dBoTHGXmT9fPfs4C7DyWL5qkMu5
KZYETilpX6HNUOxe5kGp9mnnpRe/dmBbs8SCRskRUC9+snhPvBm7DnryZpcQjqR3
ZQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:43:13 2025 by rpki-client