Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
File:                     323830343a316265383a3a2f33322d313238203d3e203631373536.roa (raw, json)
Hash identifier:          sKwoGMc7/TOa6mj4DKCtJwru4sZgNEfY3z2KmHVlYcs=
Subject key identifier:   1A:5D:85:52:8C:D6:43:50:24:94:03:48:78:84:B6:BE:B7:61:E4:91
Certificate issuer:       /CN=B5BA2B892C1E421CD04F212881ADA0DF930C99B1
Certificate serial:       061CAA58FFD8704633E664D2807782D72E887694
Authority key identifier: B5:BA:2B:89:2C:1E:42:1C:D0:4F:21:28:81:AD:A0:DF:93:0C:99:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
Signing time:             Thu 08 May 2025 13:29:29 +0000
ROA not before:           Thu 08 May 2025 13:24:29 +0000
ROA not after:            Thu 07 May 2026 13:29:29 +0000
asID:                     61756
IP address blocks:        2804:1be8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1c:aa:58:ff:d8:70:46:33:e6:64:d2:80:77:82:d7:2e:88:76:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5BA2B892C1E421CD04F212881ADA0DF930C99B1
        Validity
            Not Before: May  8 13:24:29 2025 GMT
            Not After : May  7 13:29:29 2026 GMT
        Subject: CN=1A5D85528CD64350249403487884B6BEB761E491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:e9:81:29:41:a0:01:4d:02:bf:e6:60:76:
                    54:aa:84:4c:c1:2e:d7:d6:b8:23:ef:18:d2:94:fb:
                    fe:d4:74:4c:df:82:f6:f2:4c:d9:d6:7c:af:c9:a6:
                    5d:23:60:c4:3d:a6:bb:93:49:2e:fc:76:56:38:93:
                    19:bc:f2:75:5f:1e:b9:a4:49:aa:98:03:c8:a1:88:
                    62:52:2c:26:94:ca:22:61:ce:84:5d:e6:dd:37:c5:
                    40:7e:73:8d:e9:fc:cd:60:77:04:a3:7a:6c:a0:01:
                    12:17:9e:6a:f1:ef:59:9b:4c:b1:23:3d:8b:99:10:
                    50:b6:d2:6c:75:50:d5:87:7c:e4:68:e0:72:50:15:
                    66:27:5b:60:cf:5b:76:fb:aa:fb:53:41:11:b2:44:
                    a7:53:33:b8:4f:05:35:9d:92:97:5c:0e:bb:3e:04:
                    01:fc:3d:5a:4a:40:f8:75:5a:b3:d0:a8:22:b8:71:
                    e0:61:5f:fa:06:11:64:ab:28:4a:c7:12:63:ea:67:
                    96:5c:e7:5a:a6:9b:41:41:1d:03:04:24:81:8b:97:
                    2b:dd:24:90:be:13:d4:21:5f:ef:28:af:14:aa:8b:
                    fa:bc:8f:9d:61:55:03:91:3a:99:f9:dd:ec:46:b6:
                    1c:64:7e:ef:cf:64:c0:f1:d9:b3:40:3d:6d:2b:53:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:85:52:8C:D6:43:50:24:94:03:48:78:84:B6:BE:B7:61:E4:91
            X509v3 Authority Key Identifier:
                keyid:B5:BA:2B:89:2C:1E:42:1C:D0:4F:21:28:81:AD:A0:DF:93:0C:99:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5BA2B892C1E421CD04F212881ADA0DF930C99B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:ee:e7:17:a9:2f:c9:c8:c9:37:5b:e8:35:9c:05:f5:03:
         e6:2b:3d:da:ee:19:28:53:89:d7:39:fc:05:f9:90:70:a7:b8:
         5f:c3:b6:ad:5a:16:e7:8e:5e:5b:b0:d2:fb:6f:06:9c:49:5e:
         95:be:62:fd:58:e1:76:81:a6:7e:9c:99:b0:bb:b7:28:91:e8:
         ec:e7:52:58:e0:34:53:14:c1:72:02:33:f4:35:e5:4d:fd:71:
         66:1f:d5:7f:39:00:6c:81:a2:5a:ed:4b:08:79:b7:60:f4:7f:
         cf:1e:2e:27:d5:0a:c5:3d:21:6a:c4:8f:c5:c3:51:0e:06:9b:
         24:d1:94:02:7f:d6:b6:60:91:22:33:cc:d4:3e:c1:c4:89:ac:
         38:59:42:bd:f4:14:9f:4a:af:39:eb:f6:a2:65:21:9e:02:e2:
         f3:7b:53:58:37:35:4a:4c:00:fd:16:58:2e:ae:f7:3f:a7:df:
         6d:0a:2c:c6:3c:0c:cb:68:26:f0:a7:c3:1c:c0:32:63:dc:9c:
         4c:1b:3a:49:40:af:b8:1a:5d:a9:e6:4a:8c:35:0d:d8:24:5a:
         de:46:52:9b:89:8c:8a:a8:1c:14:42:3e:58:d7:e0:d5:95:a8:
         bb:4a:41:bb:44:e9:1c:a3:9b:4c:57:e4:7c:6c:dd:a5:87:ff:
         06:ea:f7:03
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBhyqWP/YcEYz5mTSgHeC1y6IdpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVCQTJCODkyQzFFNDIxQ0QwNEYyMTI4ODFBREEwREY5
MzBDOTlCMTAeFw0yNTA1MDgxMzI0MjlaFw0yNjA1MDcxMzI5MjlaMDMxMTAvBgNV
BAMTKDFBNUQ4NTUyOENENjQzNTAyNDk0MDM0ODc4ODRCNkJFQjc2MUU0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsumBKUGgAU0Cv+ZgdlSqhEzB
LtfWuCPvGNKU+/7UdEzfgvbyTNnWfK/Jpl0jYMQ9pruTSS78dlY4kxm88nVfHrmk
SaqYA8ihiGJSLCaUyiJhzoRd5t03xUB+c43p/M1gdwSjemygARIXnmrx71mbTLEj
PYuZEFC20mx1UNWHfORo4HJQFWYnW2DPW3b7qvtTQRGyRKdTM7hPBTWdkpdcDrs+
BAH8PVpKQPh1WrPQqCK4ceBhX/oGEWSrKErHEmPqZ5Zc51qmm0FBHQMEJIGLlyvd
JJC+E9QhX+8orxSqi/q8j51hVQOROpn53exGthxkfu/PZMDx2bNAPW0rUxJVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGl2FUozWQ1AklANIeIS2vrdh5JEwHwYDVR0j
BBgwFoAUtboriSweQhzQTyEoga2g35MMmbEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC9CNUJBMkI4OTJDMUU0MjFDRDA0RjIxMjg4MUFEQTBERjkzMEM5OUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1QkEyQjg5MkMxRTQyMUNE
MDRGMjEyODgxQURBMERGOTMwQzk5QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRWHY3VzNjU0pTNHl0ZDZocW0xQ0ZIVEZhampLWVVIdFg1WXFoeXhVb0E5LzAv
MzIzODMwMzQzYTMxNjI2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQb6DANBgkqhkiG9w0BAQsFAAOCAQEAim7u5xep
L8nIyTdb6DWcBfUD5is92u4ZKFOJ1zn8BfmQcKe4X8O2rVoW545eW7DS+28GnEle
lb5i/VjhdoGmfpyZsLu3KJHo7OdSWOA0UxTBcgIz9DXlTf1xZh/VfzkAbIGiWu1L
CHm3YPR/zx4uJ9UKxT0hasSPxcNRDgabJNGUAn/WtmCRIjPM1D7BxImsOFlCvfQU
n0qvOev2omUhngLi83tTWDc1SkwA/RZYLq73P6ffbQosxjwMy2gm8KfDHMAyY9yc
TBs6SUCvuBpdqeZKjDUN2CRa3kZSm4mMiqgcFEI+WNfg1ZWou0pBu0TpHKObTFfk
fGzdpYf/Bur3Aw==
-----END CERTIFICATE-----
Generated at Sun May 11 12:30:18 2025 by rpki-client