Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/323830343a353734383a3a2f33322d3434203d3e20323638303536.roa
File:                     323830343a353734383a3a2f33322d3434203d3e20323638303536.roa (raw, json)
Hash identifier:          UwUAawmYwCZ6FL7NtXbeRtl1T5DeQc1/+ZRlKcwM8DM=
Subject key identifier:   73:ED:2F:BF:A4:A9:C5:5E:33:68:46:9C:04:2C:AD:33:C8:EA:7C:85
Certificate issuer:       /CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
Certificate serial:       3BE4CCDCB735B23387D68CF1DAFF46134AF58A25
Authority key identifier: DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/323830343a353734383a3a2f33322d3434203d3e20323638303536.roa
Signing time:             Fri 02 May 2025 02:57:53 +0000
ROA not before:           Fri 02 May 2025 02:52:53 +0000
ROA not after:            Fri 01 May 2026 02:57:53 +0000
asID:                     268056
IP address blocks:        2804:5748::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl
                          rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e4:cc:dc:b7:35:b2:33:87:d6:8c:f1:da:ff:46:13:4a:f5:8a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
        Validity
            Not Before: May  2 02:52:53 2025 GMT
            Not After : May  1 02:57:53 2026 GMT
        Subject: CN=73ED2FBFA4A9C55E3368469C042CAD33C8EA7C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:ef:65:e9:4b:c4:28:07:ce:b0:6e:ce:89:
                    0d:ac:96:c6:fb:77:97:d7:70:25:16:10:2f:3a:12:
                    b9:5e:5f:3b:8d:ae:44:0c:27:9f:74:c2:d9:81:94:
                    91:ee:c6:d8:36:28:a7:ea:71:2c:7f:39:b7:37:1e:
                    60:3e:40:b9:e5:43:f8:0b:60:88:c4:5a:ae:23:7e:
                    97:15:de:4e:d1:db:a2:9f:12:53:19:88:4f:1a:fd:
                    00:f9:4b:c8:1f:41:88:70:fb:da:bd:42:41:0a:90:
                    96:83:7f:7e:71:ec:8f:fb:57:d2:cf:30:7c:54:5d:
                    a6:c8:54:e3:da:75:78:37:a1:7f:95:10:f1:e8:da:
                    23:8c:52:97:8d:98:80:5f:1e:89:b5:3f:03:e4:68:
                    2e:84:e4:ec:b6:72:fd:85:e4:ec:df:a6:ce:f7:2f:
                    45:68:9b:d0:b3:23:22:c9:b0:5d:c1:70:8e:51:a6:
                    12:a6:4a:1d:6b:b8:0f:53:5a:58:d1:0d:5c:00:b5:
                    c0:3f:ff:7b:d0:68:c5:08:64:c1:6e:cb:b9:53:84:
                    be:54:1d:02:63:4c:b8:d7:0c:5b:da:3e:37:df:17:
                    89:ab:4a:fb:2d:e4:40:81:fc:e7:b2:e4:ad:02:76:
                    bb:3b:78:80:4f:0b:33:c8:aa:e5:cb:eb:6a:9a:e6:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:2F:BF:A4:A9:C5:5E:33:68:46:9C:04:2C:AD:33:C8:EA:7C:85
            X509v3 Authority Key Identifier:
                keyid:DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/323830343a353734383a3a2f33322d3434203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5748::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:60:b8:9e:3d:ab:b8:28:7f:71:d6:bc:12:ca:11:67:59:
         8a:c7:fd:bf:10:44:13:0f:16:7f:b8:5c:52:71:4e:4c:7d:e0:
         60:1e:c3:a5:eb:3f:ab:be:19:81:e3:c1:c0:83:77:b9:95:c6:
         4c:7c:25:30:24:45:7e:d8:89:1e:75:28:9e:71:3b:9f:7f:b3:
         99:93:e1:0d:6f:4e:80:f4:4e:79:9e:8d:79:f7:38:b2:5c:6a:
         b5:07:96:8c:27:e9:ac:69:3b:51:7e:3c:3f:9e:15:c3:83:77:
         ca:eb:03:8f:8e:e9:9a:55:2d:3d:de:5c:2d:98:de:9d:1d:f5:
         37:4d:9a:cd:2f:b2:cd:82:00:37:1f:ae:9e:60:f0:63:9f:cc:
         5f:95:d3:76:ab:68:2e:b9:be:4f:23:88:05:13:df:cf:e4:ca:
         7e:f7:cc:f8:35:a1:44:0a:c2:94:7a:8b:fc:21:65:00:bf:46:
         dd:1b:49:f0:50:6d:f9:e7:a7:12:5b:68:5a:64:14:34:0f:dc:
         43:32:af:38:a0:e6:85:85:eb:aa:8c:cc:f9:1e:79:0b:06:b9:
         a7:c3:b4:fc:83:14:2e:c3:bd:9e:93:1a:64:21:12:f2:1d:7b:
         e3:0c:16:7d:78:20:cd:52:4d:d6:47:ec:0a:2c:a4:c0:ad:59:
         b7:96:75:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO+TM3Lc1sjOH1ozx2v9GE0r1iiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4NzM0MEVBNjIzQzlCMzk5NjRFRkM4RERBOUFFNkI1
MjRCRjUwQzAeFw0yNTA1MDIwMjUyNTNaFw0yNjA1MDEwMjU3NTNaMDMxMTAvBgNV
BAMTKDczRUQyRkJGQTRBOUM1NUUzMzY4NDY5QzA0MkNBRDMzQzhFQTdDODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcI+9l6UvEKAfOsG7OiQ2slsb7
d5fXcCUWEC86ErleXzuNrkQMJ590wtmBlJHuxtg2KKfqcSx/Obc3HmA+QLnlQ/gL
YIjEWq4jfpcV3k7R26KfElMZiE8a/QD5S8gfQYhw+9q9QkEKkJaDf35x7I/7V9LP
MHxUXabIVOPadXg3oX+VEPHo2iOMUpeNmIBfHom1PwPkaC6E5Oy2cv2F5Ozfps73
L0Vom9CzIyLJsF3BcI5RphKmSh1ruA9TWljRDVwAtcA//3vQaMUIZMFuy7lThL5U
HQJjTLjXDFvaPjffF4mrSvst5ECB/Oey5K0Cdrs7eIBPCzPIquXL62qa5uqfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUc+0vv6SpxV4zaEacBCytM8jqfIUwHwYDVR0j
BBgwFoAU24c0DqYjybOZZO/I3amua1JL9QwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pxRm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFjMlFKaTQ3V3Vn
RmEvMC9EQjg3MzQwRUE2MjNDOUIzOTk2NEVGQzhEREE5QUU2QjUyNEJGNTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODczNDBFQTYyM0M5QjM5
OTY0RUZDOEREQTlBRTZCNTI0QkY1MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dacUZvQ0t2WHdFaUM2TmVlbmN6NkR3UXpKektuRnVRYzJRSmk0N1d1Z0ZhLzAv
MzIzODMwMzQzYTM1MzczNDM4M2EzYTJmMzMzMjJkMzQzNDIwM2QzZTIwMzIzNjM4
MzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARXSDANBgkqhkiG9w0BAQsFAAOCAQEARXpguJ49
q7gof3HWvBLKEWdZisf9vxBEEw8Wf7hcUnFOTH3gYB7Dpes/q74ZgePBwIN3uZXG
THwlMCRFftiJHnUonnE7n3+zmZPhDW9OgPROeZ6Nefc4slxqtQeWjCfprGk7UX48
P54Vw4N3yusDj47pmlUtPd5cLZjenR31N02azS+yzYIANx+unmDwY5/MX5XTdqto
Lrm+TyOIBRPfz+TKfvfM+DWhRArClHqL/CFlAL9G3RtJ8FBt+eenEltoWmQUNA/c
QzKvOKDmhYXrqozM+R55Cwa5p8O0/IMULsO9npMaZCES8h174wwWfXggzVJN1kfs
CiykwK1Zt5Z1UQ==
-----END CERTIFICATE-----
Generated at Fri May 16 07:00:57 2025 by rpki-client