Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3438203d3e20323635343336.roa
File:                     323830343a333431633a3a2f33322d3438203d3e20323635343336.roa (raw, json)
Hash identifier:          TY7Y2G3iRjAjJqoZxwkdD7os1yzkmGn/C+7qaLrdHzE=
Subject key identifier:   EA:95:8B:45:3A:1F:EF:1E:B3:C7:F1:AC:0C:3B:99:93:97:E1:9E:A7
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       4F6ECABD8D719D41154E735B1623C62C4E9D9057
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3438203d3e20323635343336.roa
Signing time:             Wed 07 May 2025 19:31:15 +0000
ROA not before:           Wed 07 May 2025 19:26:15 +0000
ROA not after:            Wed 06 May 2026 19:31:15 +0000
asID:                     265436
IP address blocks:        2804:341c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
                          rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6e:ca:bd:8d:71:9d:41:15:4e:73:5b:16:23:c6:2c:4e:9d:90:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: May  7 19:26:15 2025 GMT
            Not After : May  6 19:31:15 2026 GMT
        Subject: CN=EA958B453A1FEF1EB3C7F1AC0C3B999397E19EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:f5:36:37:00:10:b5:5a:58:29:43:f1:c9:
                    da:26:9c:f2:9e:4f:42:48:4e:d9:fd:49:6c:49:ce:
                    a5:43:ac:68:c2:d5:43:8e:a6:59:fc:9a:7c:e5:07:
                    f1:03:de:6a:fd:88:4b:71:93:0e:3c:fd:8c:9e:f3:
                    4b:e8:72:02:d8:6f:8a:e5:59:e5:b6:2f:fe:a7:38:
                    96:71:fe:22:f1:ab:be:7a:4f:11:95:99:c4:04:81:
                    e7:ea:3b:8b:09:a9:ea:95:59:fb:5e:c2:fc:0c:c8:
                    62:dc:af:e5:68:63:7d:2d:e5:1c:f9:82:eb:1b:39:
                    82:d2:22:d4:a9:64:df:ad:a0:cb:e9:e0:b7:c2:31:
                    73:f4:2b:eb:27:45:f7:18:3a:21:cc:dd:ae:68:ff:
                    28:54:38:df:42:b4:32:a8:9b:3b:3c:16:b6:3e:2d:
                    d5:d7:e4:36:d0:68:bd:fe:2c:55:ba:23:fd:df:ad:
                    79:be:6d:7a:d7:4f:e8:3b:c6:5b:98:fb:b0:e6:0e:
                    5d:1e:82:5e:19:b4:7a:d2:4c:0d:ec:ae:fb:87:88:
                    c6:53:10:d2:38:81:56:4c:3d:07:42:ba:68:a7:6b:
                    d9:fe:90:e8:9e:93:ad:44:31:90:ca:00:51:5d:f8:
                    48:b6:f0:ee:59:b7:e5:72:90:e3:80:4e:bd:0b:ce:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:8B:45:3A:1F:EF:1E:B3:C7:F1:AC:0C:3B:99:93:97:E1:9E:A7
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a3a2f33322d3438203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:341c::/32

    Signature Algorithm: sha256WithRSAEncryption
         f6:c4:18:e8:f6:10:8e:f4:08:bd:7c:ad:f8:ff:4a:bd:33:76:
         96:b8:ac:7e:5b:9b:45:89:29:8c:a9:16:18:da:b6:ce:aa:b1:
         d5:be:e3:c3:a5:d2:d8:08:31:eb:be:51:4b:d9:ff:d3:96:5c:
         22:10:21:5a:3d:6a:9c:49:59:f3:1a:6e:dc:cc:6c:3b:44:81:
         67:97:e6:15:ba:2a:b7:7b:e0:67:20:c3:b2:46:bd:38:d5:4c:
         ea:08:2f:b6:85:bf:79:f6:53:d4:f9:36:d7:2f:db:0c:13:d9:
         b1:e5:f0:d8:4f:c0:02:84:6a:53:cb:25:53:c1:98:38:4b:b0:
         43:59:c0:9c:a7:0a:4d:47:74:a0:bc:35:66:0f:02:e0:81:bc:
         fb:44:a2:1c:8e:08:f6:9a:2e:79:55:0a:40:3d:61:78:6e:5f:
         81:aa:ce:98:1c:02:e4:ec:48:dc:26:22:64:0f:5f:bf:2b:d7:
         89:38:b1:55:68:3f:38:76:86:33:ff:a3:09:17:df:77:b2:f4:
         b9:3c:73:6f:2d:80:ad:16:26:37:65:f6:66:6e:6c:41:ae:50:
         28:81:f9:25:72:6c:26:cb:ae:e6:93:98:21:65:83:2f:82:dc:
         c8:ea:24:2a:93:50:51:ee:15:74:cf:9a:06:aa:69:eb:54:92:
         e7:d8:ff:f5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT27KvY1xnUEVTnNbFiPGLE6dkFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNTA1MDcxOTI2MTVaFw0yNjA1MDYxOTMxMTVaMDMxMTAvBgNV
BAMTKEVBOTU4QjQ1M0ExRkVGMUVCM0M3RjFBQzBDM0I5OTkzOTdFMTlFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiL/U2NwAQtVpYKUPxydomnPKe
T0JITtn9SWxJzqVDrGjC1UOOpln8mnzlB/ED3mr9iEtxkw48/Yye80vocgLYb4rl
WeW2L/6nOJZx/iLxq756TxGVmcQEgefqO4sJqeqVWftewvwMyGLcr+VoY30t5Rz5
gusbOYLSItSpZN+toMvp4LfCMXP0K+snRfcYOiHM3a5o/yhUON9CtDKomzs8FrY+
LdXX5DbQaL3+LFW6I/3frXm+bXrXT+g7xluY+7DmDl0egl4ZtHrSTA3srvuHiMZT
ENI4gVZMPQdCumina9n+kOiek61EMZDKAFFd+Ei28O5Zt+VykOOATr0Lzq5xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6pWLRTof7x6zx/GsDDuZk5fhnqcwHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZ1lrSkZ0M3VyWnBtRGZQQkRMb3VvUlZEVXlob0RoVEg4and1M1B6NDkzLzAv
MzIzODMwMzQzYTMzMzQzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0HDANBgkqhkiG9w0BAQsFAAOCAQEA9sQY6PYQ
jvQIvXyt+P9KvTN2lrisflubRYkpjKkWGNq2zqqx1b7jw6XS2Agx675RS9n/05Zc
IhAhWj1qnElZ8xpu3MxsO0SBZ5fmFboqt3vgZyDDska9ONVM6ggvtoW/efZT1Pk2
1y/bDBPZseXw2E/AAoRqU8slU8GYOEuwQ1nAnKcKTUd0oLw1Zg8C4IG8+0SiHI4I
9poueVUKQD1heG5fgarOmBwC5OxI3CYiZA9fvyvXiTixVWg/OHaGM/+jCRffd7L0
uTxzby2ArRYmN2X2Zm5sQa5QKIH5JXJsJsuu5pOYIWWDL4LcyOokKpNQUe4VdM+a
Bqpp61SS59j/9Q==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:36 2025 by rpki-client