Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
File:                     323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa (raw, json)
Hash identifier:          2zEHjeW57Ju/2HBqiVPzxV59m6ApuNqTS5/wtD6cyGw=
Subject key identifier:   18:F0:C6:1C:1E:BC:1A:AE:E8:86:9D:07:FC:86:0F:6B:EC:FB:B2:12
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       2B34A5D9D4622912D272AC2F606482AD16DB7007
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa
Signing time:             Fri 02 May 2025 02:08:05 +0000
ROA not before:           Fri 02 May 2025 02:03:05 +0000
ROA not after:            Fri 01 May 2026 02:08:05 +0000
asID:                     265500
IP address blocks:        2804:3518:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:34:a5:d9:d4:62:29:12:d2:72:ac:2f:60:64:82:ad:16:db:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: May  2 02:03:05 2025 GMT
            Not After : May  1 02:08:05 2026 GMT
        Subject: CN=18F0C61C1EBC1AAEE8869D07FC860F6BECFBB212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:0e:86:58:d5:48:56:e1:97:44:69:f3:d0:
                    c6:64:87:8f:be:c3:5b:5c:16:27:a0:94:50:f6:4f:
                    10:cf:5d:29:66:07:1c:f2:7c:4a:70:fe:24:2e:ea:
                    77:eb:da:54:44:fb:8b:43:50:0e:da:a0:c5:f3:28:
                    b8:1e:c0:8c:fb:ba:7b:5a:11:dd:be:26:40:88:3e:
                    6e:4e:56:d4:f2:d2:4b:09:d0:f8:23:e6:40:11:67:
                    67:ad:d0:cb:08:aa:26:5c:08:b1:b4:b1:55:4e:40:
                    5b:88:a5:dd:7a:40:bc:43:ce:f8:74:f0:83:1c:b2:
                    96:b8:33:cc:c6:eb:62:7c:84:05:50:4e:6f:59:88:
                    e1:50:34:2e:68:1a:80:95:6b:0c:74:2d:44:26:95:
                    3b:30:7b:7c:97:da:ef:8c:07:62:fa:22:fb:e7:a9:
                    92:03:0e:99:c8:ea:76:6d:30:f8:b3:02:fe:07:83:
                    a3:84:0c:88:e0:7f:f4:a3:0b:37:74:60:e9:29:f4:
                    66:d9:89:07:78:00:6e:69:0b:8b:b8:66:7d:de:12:
                    06:13:4a:23:90:5f:3d:dc:d1:c5:28:06:a2:10:7e:
                    ca:20:2a:52:e8:b6:63:eb:80:30:5b:32:7c:51:9b:
                    23:98:2c:cb:be:2d:f6:85:dc:12:18:80:de:3a:18:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:C6:1C:1E:BC:1A:AE:E8:86:9D:07:FC:86:0F:6B:EC:FB:B2:12
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:16:b6:4a:39:6f:0c:13:eb:36:2c:96:9b:32:f7:ed:77:01:
         df:9f:1f:06:64:13:4d:22:a0:80:45:58:c7:5b:1b:0e:7b:b9:
         00:6c:6e:6b:cd:bf:c7:2c:3a:0f:17:ed:87:0c:1d:57:7e:0e:
         76:a3:da:98:3a:75:d4:6f:15:6f:05:33:bf:52:72:be:5d:f3:
         23:58:6a:99:75:d2:58:fd:88:ff:7b:dd:e6:49:e0:8a:ea:4c:
         b3:d5:ac:20:4b:ea:13:dd:7e:33:4e:e1:0e:cb:34:ed:7b:3d:
         ce:3b:9d:d1:88:f4:f7:bf:c3:99:8f:96:d6:70:a9:b0:b3:18:
         23:99:7f:57:17:55:67:b2:1f:17:c5:94:02:86:02:a9:e2:c2:
         87:00:22:dd:85:93:0e:29:5c:98:84:32:d9:a3:a2:26:7f:05:
         a0:79:83:91:fa:26:e0:e4:93:e7:0e:27:ca:b1:b3:81:08:c5:
         7c:b4:3e:7b:24:73:b9:69:2c:7f:dc:fb:87:c8:bc:2d:d4:48:
         d1:6f:61:59:40:00:dc:a6:20:0c:bc:88:a4:28:4c:ca:fc:0d:
         3f:f8:17:68:aa:fa:24:e6:07:4b:71:47:1b:b7:07:78:99:14:
         c4:dd:e8:60:92:e9:2b:de:9d:99:4a:db:f5:71:b4:70:9b:bb:
         0f:f7:4f:83
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKzSl2dRiKRLScqwvYGSCrRbbcAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTExNTE3QzBDNkM4ODdBOTJBMTE1QjRFRjVFRTk3MDM1
QjRBQjIxRjAeFw0yNTA1MDIwMjAzMDVaFw0yNjA1MDEwMjA4MDVaMDMxMTAvBgNV
BAMTKDE4RjBDNjFDMUVCQzFBQUVFODg2OUQwN0ZDODYwRjZCRUNGQkIyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjw6GWNVIVuGXRGnz0MZkh4++
w1tcFieglFD2TxDPXSlmBxzyfEpw/iQu6nfr2lRE+4tDUA7aoMXzKLgewIz7unta
Ed2+JkCIPm5OVtTy0ksJ0Pgj5kARZ2et0MsIqiZcCLG0sVVOQFuIpd16QLxDzvh0
8IMcspa4M8zG62J8hAVQTm9ZiOFQNC5oGoCVawx0LUQmlTswe3yX2u+MB2L6Ivvn
qZIDDpnI6nZtMPizAv4Hg6OEDIjgf/SjCzd0YOkp9GbZiQd4AG5pC4u4Zn3eEgYT
SiOQXz3c0cUoBqIQfsogKlLotmPrgDBbMnxRmyOYLMu+LfaF3BIYgN46GFiFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGPDGHB68Gq7ohp0H/IYPa+z7shIwHwYDVR0j
BBgwFoAUERUXwMbIh6kqEVtO9e6XA1tKsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC8xMTE1MTdDMEM2Qzg4N0E5MkExMTVCNEVGNUVFOTcwMzVCNEFCMjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExMTUxN0MwQzZDODg3QTky
QTExNUI0RUY1RUU5NzAzNUI0QUIyMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzIzODMwMzQzYTMzMzUzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENRhAMA0GCSqGSIb3DQEBCwUA
A4IBAQAEFrZKOW8ME+s2LJabMvftdwHfnx8GZBNNIqCARVjHWxsOe7kAbG5rzb/H
LDoPF+2HDB1Xfg52o9qYOnXUbxVvBTO/UnK+XfMjWGqZddJY/Yj/e93mSeCK6kyz
1awgS+oT3X4zTuEOyzTtez3OO53RiPT3v8OZj5bWcKmwsxgjmX9XF1Vnsh8XxZQC
hgKp4sKHACLdhZMOKVyYhDLZo6ImfwWgeYOR+ibg5JPnDifKsbOBCMV8tD57JHO5
aSx/3PuHyLwt1EjRb2FZQADcpiAMvIikKEzK/A0/+Bdoqvok5gdLcUcbtwd4mRTE
3ehgkukr3p2ZStv1cbRwm7sP90+D
-----END CERTIFICATE-----
Generated at Tue May 13 01:07:10 2025 by rpki-client