Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa
File:                     323830343a373361633a3a2f33322d3438203d3e20323730393330.roa (raw, json)
Hash identifier:          um278HFpdT94rlbyA/yeMkRivIkVeY84DddueLr8lj8=
Subject key identifier:   24:A3:A0:D3:D5:17:A4:7E:81:F4:7E:DB:A5:95:E9:0F:A0:7B:F1:76
Certificate issuer:       /CN=EB986415C5BF985366A96083947F73D2559B6754
Certificate serial:       3ACA93C5BBF38E10E5D4E11833851C88B1E7B712
Authority key identifier: EB:98:64:15:C5:BF:98:53:66:A9:60:83:94:7F:73:D2:55:9B:67:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa
Signing time:             Sun 27 Apr 2025 23:24:28 +0000
ROA not before:           Sun 27 Apr 2025 23:19:28 +0000
ROA not after:            Sun 26 Apr 2026 23:24:28 +0000
asID:                     270930
IP address blocks:        2804:73ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.crl
                          rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ca:93:c5:bb:f3:8e:10:e5:d4:e1:18:33:85:1c:88:b1:e7:b7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB986415C5BF985366A96083947F73D2559B6754
        Validity
            Not Before: Apr 27 23:19:28 2025 GMT
            Not After : Apr 26 23:24:28 2026 GMT
        Subject: CN=24A3A0D3D517A47E81F47EDBA595E90FA07BF176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:7b:06:2e:f6:b6:16:b2:c0:4d:cd:83:cd:
                    88:0d:85:46:de:42:87:5b:ef:21:69:f2:a1:cc:4d:
                    fd:69:a1:a7:a1:6a:cc:f8:c6:fe:0c:74:cd:9f:ae:
                    7a:c0:69:6d:9e:f9:ee:c9:ab:c8:69:65:33:67:f2:
                    8e:7a:5c:56:68:29:01:70:ae:cd:a5:14:63:f3:d1:
                    7c:63:e1:69:e7:36:6d:61:8b:a2:ae:8b:2e:91:15:
                    c9:63:2f:14:cc:54:c3:cc:34:c9:e1:0d:ac:9f:d1:
                    6e:ee:17:d7:99:5c:f1:e0:1a:eb:16:1a:9b:49:72:
                    81:21:ed:c7:c6:c4:11:47:24:c6:59:8f:a7:af:ac:
                    8f:e1:80:0f:2c:ee:e0:54:38:18:c8:4b:cb:23:d6:
                    ec:51:69:fe:33:50:cb:db:2a:dc:44:74:01:7f:04:
                    ae:64:67:a3:0d:5a:c5:ee:56:df:f9:a2:7b:0a:01:
                    f3:38:ce:6c:3b:86:58:50:c5:8c:ae:3c:65:4f:42:
                    b3:91:f0:41:9a:59:4d:09:b9:f2:4c:20:40:36:45:
                    35:ef:2d:2f:bb:4d:40:6b:ad:63:5b:f3:36:e3:88:
                    16:4b:99:c2:31:59:fc:b9:9e:07:1d:be:f5:9f:e6:
                    34:5c:07:07:8f:56:d6:3b:0c:97:e5:12:5d:63:5f:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:A0:D3:D5:17:A4:7E:81:F4:7E:DB:A5:95:E9:0F:A0:7B:F1:76
            X509v3 Authority Key Identifier:
                keyid:EB:98:64:15:C5:BF:98:53:66:A9:60:83:94:7F:73:D2:55:9B:67:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/EB986415C5BF985366A96083947F73D2559B6754.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB986415C5BF985366A96083947F73D2559B6754.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/323830343a373361633a3a2f33322d3438203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:d0:18:aa:0e:63:84:4b:a3:73:7d:f3:db:8d:14:28:c9:
         bd:7f:e0:93:78:97:72:2f:b4:73:24:20:38:2e:ab:90:74:32:
         eb:67:ea:18:56:fb:78:18:20:c8:b7:8b:39:f6:22:82:72:e9:
         fb:88:b9:9b:0f:b8:88:d2:46:f5:cb:7c:82:55:1c:22:57:f9:
         ab:e8:6e:fb:35:6f:73:5f:7f:5d:94:7e:3b:ef:eb:72:2d:d3:
         03:df:30:fb:36:a2:69:6f:f6:cf:8e:be:24:1c:c2:15:6b:e6:
         11:4c:f6:db:fa:11:e4:9a:c5:27:7d:c4:bf:3d:d7:38:e3:93:
         af:c8:d9:7e:97:91:1f:b4:ac:dd:c9:a1:39:66:ee:cc:5d:de:
         be:73:5b:e3:c0:99:97:78:43:6c:f9:24:39:ac:9a:fe:77:9c:
         a8:e6:14:11:f0:09:90:81:8a:81:3b:6b:08:90:1e:72:ae:0b:
         ab:78:fc:5b:4c:85:d6:8e:2b:c6:59:b2:fd:f2:ba:df:6b:e2:
         6e:c5:fa:97:31:e5:55:13:4c:98:d9:c0:f5:14:b0:6f:8c:43:
         26:de:f5:88:34:bf:c7:b8:87:0b:38:b7:65:5e:b6:92:72:53:
         cf:f6:ee:e8:fa:a0:40:80:46:b8:e2:25:94:a4:aa:d5:2d:65:
         e3:2f:cb:0e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOsqTxbvzjhDl1OEYM4UciLHntxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI5ODY0MTVDNUJGOTg1MzY2QTk2MDgzOTQ3RjczRDI1
NTlCNjc1NDAeFw0yNTA0MjcyMzE5MjhaFw0yNjA0MjYyMzI0MjhaMDMxMTAvBgNV
BAMTKDI0QTNBMEQzRDUxN0E0N0U4MUY0N0VEQkE1OTVFOTBGQTA3QkYxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDai3sGLva2FrLATc2DzYgNhUbe
Qodb7yFp8qHMTf1poaehasz4xv4MdM2frnrAaW2e+e7Jq8hpZTNn8o56XFZoKQFw
rs2lFGPz0Xxj4WnnNm1hi6Kuiy6RFcljLxTMVMPMNMnhDayf0W7uF9eZXPHgGusW
GptJcoEh7cfGxBFHJMZZj6evrI/hgA8s7uBUOBjIS8sj1uxRaf4zUMvbKtxEdAF/
BK5kZ6MNWsXuVt/5onsKAfM4zmw7hlhQxYyuPGVPQrOR8EGaWU0JufJMIEA2RTXv
LS+7TUBrrWNb8zbjiBZLmcIxWfy5ngcdvvWf5jRcBwePVtY7DJflEl1jX8q3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJKOg09UXpH6B9H7bpZXpD6B78XYwHwYDVR0j
BBgwFoAU65hkFcW/mFNmqWCDlH9z0lWbZ1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhOQXNXaHBZR0Z1Y0sxcGVjQWV3TkZocTg5TmgzM0duakFCYlFzQzdr
QUEvMC9FQjk4NjQxNUM1QkY5ODUzNjZBOTYwODM5NDdGNzNEMjU1OUI2NzU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCOTg2NDE1QzVCRjk4NTM2
NkE5NjA4Mzk0N0Y3M0QyNTU5QjY3NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4TkFzV2hwWUdGdWNLMXBlY0Fld05GaHE4OU5oMzNHbmpBQmJRc0M3a0FBLzAv
MzIzODMwMzQzYTM3MzM2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzrDANBgkqhkiG9w0BAQsFAAOCAQEAVR/QGKoO
Y4RLo3N989uNFCjJvX/gk3iXci+0cyQgOC6rkHQy62fqGFb7eBggyLeLOfYignLp
+4i5mw+4iNJG9ct8glUcIlf5q+hu+zVvc19/XZR+O+/rci3TA98w+zaiaW/2z46+
JBzCFWvmEUz22/oR5JrFJ33Evz3XOOOTr8jZfpeRH7Ss3cmhOWbuzF3evnNb48CZ
l3hDbPkkOaya/necqOYUEfAJkIGKgTtrCJAecq4Lq3j8W0yF1o4rxlmy/fK632vi
bsX6lzHlVRNMmNnA9RSwb4xDJt71iDS/x7iHCzi3ZV62knJTz/bu6PqgQIBGuOIl
lKSq1S1l4y/LDg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:55 2025 by rpki-client