Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
File:                     323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (raw, json)
Hash identifier:          EMLgzRUu+UURb2a2jDPMJv52nKPjcz9/OwCkYa9NwpU=
Subject key identifier:   13:91:E4:92:30:92:8E:37:5B:B2:23:AD:27:37:FB:58:0D:36:D5:EA
Certificate issuer:       /CN=2EDF3A6D365602746F01E8AC590A46F0154D7D75
Certificate serial:       227D19FA5AB2E9FE38EA5A8D50E8C68872B235BF
Authority key identifier: 2E:DF:3A:6D:36:56:02:74:6F:01:E8:AC:59:0A:46:F0:15:4D:7D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
Signing time:             Thu 17 Apr 2025 13:17:06 +0000
ROA not before:           Thu 17 Apr 2025 13:12:06 +0000
ROA not after:            Thu 16 Apr 2026 13:17:06 +0000
asID:                     263165
IP address blocks:        2804:17b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7d:19:fa:5a:b2:e9:fe:38:ea:5a:8d:50:e8:c6:88:72:b2:35:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EDF3A6D365602746F01E8AC590A46F0154D7D75
        Validity
            Not Before: Apr 17 13:12:06 2025 GMT
            Not After : Apr 16 13:17:06 2026 GMT
        Subject: CN=1391E49230928E375BB223AD2737FB580D36D5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:9e:ae:88:a5:61:5d:42:02:35:c3:d0:f3:
                    84:da:ec:72:ee:f1:eb:03:28:4a:9f:19:78:ea:ea:
                    9c:e4:21:32:86:9e:ea:48:3c:0b:30:9e:f6:66:5d:
                    7c:9f:bd:ee:60:ba:01:78:35:f6:f4:42:bb:9a:e3:
                    f2:ed:7a:7e:f7:52:8f:da:47:19:e7:72:02:55:ac:
                    51:ea:b3:99:88:0a:d8:bb:86:78:08:a4:db:07:c5:
                    f5:af:c7:07:72:24:66:0a:b5:26:a6:b7:33:7e:ef:
                    ad:86:58:6a:51:53:bb:c8:e2:ed:6a:7c:fa:fa:bb:
                    d5:45:99:70:9c:24:4d:cc:53:2a:97:28:2f:c5:e4:
                    39:cf:46:d6:b2:c4:29:e9:6a:ef:40:85:dd:f4:08:
                    e7:e6:e1:09:34:7b:07:b8:54:ce:cc:f0:c5:d8:30:
                    f8:eb:6d:9b:98:93:bd:99:77:22:ec:0c:c8:03:9c:
                    a8:07:ed:d7:c0:2c:ba:83:90:67:c5:d1:21:64:e8:
                    eb:05:ae:38:79:51:ad:55:89:83:58:05:73:b9:42:
                    98:ef:12:8c:0b:6f:38:53:d1:c5:dd:bc:1d:f4:2d:
                    80:ca:69:fd:fe:b0:21:3d:3b:c7:37:2f:19:ec:7d:
                    fd:01:8b:c3:79:38:db:ee:e2:37:90:03:84:2e:bd:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:E4:92:30:92:8E:37:5B:B2:23:AD:27:37:FB:58:0D:36:D5:EA
            X509v3 Authority Key Identifier:
                keyid:2E:DF:3A:6D:36:56:02:74:6F:01:E8:AC:59:0A:46:F0:15:4D:7D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/2EDF3A6D365602746F01E8AC590A46F0154D7D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EDF3A6D365602746F01E8AC590A46F0154D7D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:27:25:11:f3:b6:b8:62:76:40:5e:3c:f4:40:76:cf:5b:dc:
         21:f0:29:7c:0c:1d:8a:71:0a:47:77:45:f1:79:53:f0:51:82:
         9e:e0:c4:f5:25:fa:da:d0:81:6f:94:f5:d5:b1:90:dd:d8:fb:
         bb:80:1d:5a:8a:ef:cf:43:23:a6:e5:69:46:c0:ba:47:53:76:
         47:3e:d4:0a:f5:e5:c8:af:46:b4:d8:cc:d4:22:56:5d:7c:ec:
         4b:e3:b3:9b:a3:8c:97:3c:dd:80:10:76:5a:d8:e8:17:8e:42:
         a4:e7:54:31:39:95:fe:59:64:30:61:aa:38:2a:37:3a:8e:6f:
         da:06:81:d3:e4:bd:58:af:28:b3:e5:1b:90:df:7f:6c:d3:b0:
         5e:22:08:4a:3d:70:fd:38:94:bb:5d:3f:d6:88:40:8e:2a:de:
         78:43:3a:3b:8e:f2:a4:8b:b3:38:8f:b7:d2:09:6f:af:1c:f3:
         c3:99:18:1a:de:1e:42:25:1d:58:69:2a:9f:ae:a8:4f:f4:a0:
         8a:30:a6:81:67:b3:1c:e6:ea:e2:c6:cc:4d:b3:3e:48:d2:df:
         db:dd:46:ea:1c:51:e9:dc:51:41:6f:5d:0b:44:b9:d2:14:4d:
         1c:36:95:5a:5c:fc:16:a4:ad:2e:b9:76:5c:30:e4:79:3f:e1:
         2f:66:6f:4e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIn0Z+lqy6f446lqNUOjGiHKyNb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVERjNBNkQzNjU2MDI3NDZGMDFFOEFDNTkwQTQ2RjAx
NTREN0Q3NTAeFw0yNTA0MTcxMzEyMDZaFw0yNjA0MTYxMzE3MDZaMDMxMTAvBgNV
BAMTKDEzOTFFNDkyMzA5MjhFMzc1QkIyMjNBRDI3MzdGQjU4MEQzNkQ1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D56uiKVhXUICNcPQ84Ta7HLu
8esDKEqfGXjq6pzkITKGnupIPAswnvZmXXyfve5gugF4Nfb0Qrua4/Lten73Uo/a
RxnncgJVrFHqs5mICti7hngIpNsHxfWvxwdyJGYKtSamtzN+762GWGpRU7vI4u1q
fPr6u9VFmXCcJE3MUyqXKC/F5DnPRtayxCnpau9Ahd30COfm4Qk0ewe4VM7M8MXY
MPjrbZuYk72ZdyLsDMgDnKgH7dfALLqDkGfF0SFk6OsFrjh5Ua1ViYNYBXO5Qpjv
EowLbzhT0cXdvB30LYDKaf3+sCE9O8c3Lxnsff0Bi8N5ONvu4jeQA4QuvQ3JAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUE5HkkjCSjjdbsiOtJzf7WA021eowHwYDVR0j
BBgwFoAULt86bTZWAnRvAeisWQpG8BVNfXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5
Q2YvMC8yRURGM0E2RDM2NTYwMjc0NkYwMUU4QUM1OTBBNDZGMDE1NEQ3RDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFREYzQTZEMzY1NjAyNzQ2
RjAxRThBQzU5MEE0NkYwMTU0RDdENzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxekhaMkVTM20zd0dESk52eERMZ0hNeXhyU0RwU0VTYkxjbkxWUUpweUNmLzAv
MzIzODMwMzQzYTMxMzc2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBewMA0GCSqGSIb3DQEBCwUAA4IBAQBYJyUR
87a4YnZAXjz0QHbPW9wh8Cl8DB2KcQpHd0XxeVPwUYKe4MT1Jfra0IFvlPXVsZDd
2Pu7gB1aiu/PQyOm5WlGwLpHU3ZHPtQK9eXIr0a02MzUIlZdfOxL47Obo4yXPN2A
EHZa2OgXjkKk51QxOZX+WWQwYao4Kjc6jm/aBoHT5L1Yryiz5RuQ339s07BeIghK
PXD9OJS7XT/WiECOKt54Qzo7jvKki7M4j7fSCW+vHPPDmRga3h5CJR1YaSqfrqhP
9KCKMKaBZ7Mc5urixsxNsz5I0t/b3UbqHFHp3FFBb10LRLnSFE0cNpVaXPwWpK0u
uXZcMOR5P+EvZm9O
-----END CERTIFICATE-----
Generated at Sun May 11 06:47:11 2025 by rpki-client