Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa
File:                     323830343a356630383a3a2f33322d3332203d3e20323639303732.roa (raw, json)
Hash identifier:          lBe8TaN22baBYpiOpcoLS2ZZ3aIQmU4d6kcjgMycs+8=
Subject key identifier:   35:71:5F:EC:E8:AB:B6:02:D3:6D:89:8D:BE:17:80:42:E6:3F:AD:9D
Certificate issuer:       /CN=E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39
Certificate serial:       270D71CE6C265C4ECEAD01FF68C09BACD8F899F1
Authority key identifier: E5:18:3E:CE:1A:CE:EC:A7:D4:FC:DB:3F:D9:0C:D0:FE:4B:6B:EB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa
Signing time:             Mon 05 May 2025 03:42:03 +0000
ROA not before:           Mon 05 May 2025 03:37:03 +0000
ROA not after:            Mon 04 May 2026 03:42:03 +0000
asID:                     269072
IP address blocks:        2804:5f08::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.crl
                          rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0d:71:ce:6c:26:5c:4e:ce:ad:01:ff:68:c0:9b:ac:d8:f8:99:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39
        Validity
            Not Before: May  5 03:37:03 2025 GMT
            Not After : May  4 03:42:03 2026 GMT
        Subject: CN=35715FECE8ABB602D36D898DBE178042E63FAD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:fd:66:73:80:9e:47:0c:7c:d9:c6:3d:08:
                    34:66:f5:88:81:0a:c1:4a:55:d5:45:0e:c0:5d:99:
                    26:3b:0d:34:3f:e2:f7:eb:6c:c3:c9:3c:dd:41:16:
                    83:46:b2:7f:8c:1e:fe:00:78:89:23:dc:18:b2:27:
                    81:7b:a3:fb:c8:c2:75:d0:b8:91:39:23:2c:15:71:
                    d6:de:95:25:5b:0c:d8:4a:5b:7f:30:5b:21:ba:41:
                    f1:d2:6a:74:b3:07:9d:04:bf:44:b9:3c:60:e3:dc:
                    c8:0d:88:fd:cb:e1:3e:0a:9c:c9:06:39:6c:b0:76:
                    2f:a6:e1:3d:ed:72:9b:f2:c2:42:92:3e:69:2d:c9:
                    bd:b8:f8:1c:e9:35:b7:a8:0a:99:fe:58:d3:28:f9:
                    c4:38:6d:28:dc:9a:ef:35:9c:32:c1:81:a8:82:a0:
                    23:1a:2c:8d:80:c4:98:d3:d6:18:a3:e6:99:fc:9b:
                    c7:d5:f3:25:d1:28:f9:e8:86:dc:0a:64:b2:50:b6:
                    eb:3c:dd:49:c0:e6:b9:b8:3f:a5:63:f0:a5:66:a3:
                    18:2e:f0:e8:37:d4:95:29:0d:bb:48:80:a8:e6:b9:
                    48:a5:10:03:47:0b:a3:58:59:cf:82:14:26:2a:e7:
                    b2:7e:d8:75:68:c6:47:18:9c:3b:06:5b:1d:e0:74:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:5F:EC:E8:AB:B6:02:D3:6D:89:8D:BE:17:80:42:E6:3F:AD:9D
            X509v3 Authority Key Identifier:
                keyid:E5:18:3E:CE:1A:CE:EC:A7:D4:FC:DB:3F:D9:0C:D0:FE:4B:6B:EB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/323830343a356630383a3a2f33322d3332203d3e20323639303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:7d:a4:fb:30:bc:cc:84:78:d5:82:ca:0f:9d:a2:de:1e:
         56:bb:cd:61:a1:d1:c1:89:ba:4c:00:94:92:a0:1f:17:c8:f6:
         7c:f6:af:ad:03:04:92:7a:45:ed:87:92:6b:b3:f2:17:df:c7:
         fb:42:67:e5:43:39:d4:74:43:0b:10:dc:5f:f8:e0:1d:4f:59:
         2a:8c:30:22:83:45:78:79:9a:f0:1a:1c:1c:51:88:66:3e:0b:
         55:86:5e:96:79:b2:14:14:f7:be:c4:42:9c:b1:b2:ae:8c:b5:
         85:90:cb:52:57:9c:1b:1c:a3:bf:af:e7:5f:48:cb:4f:2f:d1:
         64:63:b2:b5:8f:c1:c6:93:5d:d2:ef:d6:7e:c4:99:34:5f:a6:
         7b:b2:fe:56:f0:08:6b:52:c2:e6:8c:50:d3:42:da:51:6c:64:
         32:a6:19:e1:54:95:b0:57:7f:d1:90:f5:80:46:50:03:2c:c3:
         8e:97:01:e2:5f:60:72:92:7a:08:80:17:ba:fd:3e:fe:94:17:
         bd:68:70:dd:71:16:f8:40:71:e3:a5:c2:a1:80:c1:cc:be:4c:
         01:5f:c6:e1:88:f6:31:b1:6b:c9:2f:a0:c3:c5:9f:06:47:fc:
         b9:a6:c6:4c:53:23:c0:79:cc:31:43:40:b3:5c:17:65:29:46:
         0d:a2:5d:f9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJw1xzmwmXE7OrQH/aMCbrNj4mfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxODNFQ0UxQUNFRUNBN0Q0RkNEQjNGRDkwQ0QwRkU0
QjZCRUIzOTAeFw0yNTA1MDUwMzM3MDNaFw0yNjA1MDQwMzQyMDNaMDMxMTAvBgNV
BAMTKDM1NzE1RkVDRThBQkI2MDJEMzZEODk4REJFMTc4MDQyRTYzRkFEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ev1mc4CeRwx82cY9CDRm9YiB
CsFKVdVFDsBdmSY7DTQ/4vfrbMPJPN1BFoNGsn+MHv4AeIkj3BiyJ4F7o/vIwnXQ
uJE5IywVcdbelSVbDNhKW38wWyG6QfHSanSzB50Ev0S5PGDj3MgNiP3L4T4KnMkG
OWywdi+m4T3tcpvywkKSPmktyb24+BzpNbeoCpn+WNMo+cQ4bSjcmu81nDLBgaiC
oCMaLI2AxJjT1hij5pn8m8fV8yXRKPnohtwKZLJQtus83UnA5rm4P6Vj8KVmoxgu
8Og31JUpDbtIgKjmuUilEANHC6NYWc+CFCYq57J+2HVoxkcYnDsGWx3gdPM3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNXFf7OirtgLTbYmNvheAQuY/rZ0wHwYDVR0j
BBgwFoAU5Rg+zhrO7KfU/Ns/2QzQ/ktr6zkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmNvU1c0a0w3eGNtNzdqSkFnN0FWalFVZlg2YldrdGVOdmtWN0tIUUs1
eXovMC9FNTE4M0VDRTFBQ0VFQ0E3RDRGQ0RCM0ZEOTBDRDBGRTRCNkJFQjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MTgzRUNFMUFDRUVDQTdE
NEZDREIzRkQ5MENEMEZFNEI2QkVCMzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zjb1NXNGtMN3hjbTc3akpBZzdBVmpRVWZYNmJXa3RlTnZrVjdLSFFLNXl6LzAv
MzIzODMwMzQzYTM1NjYzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARfCDANBgkqhkiG9w0BAQsFAAOCAQEAopt9pPsw
vMyEeNWCyg+dot4eVrvNYaHRwYm6TACUkqAfF8j2fPavrQMEknpF7YeSa7PyF9/H
+0Jn5UM51HRDCxDcX/jgHU9ZKowwIoNFeHma8BocHFGIZj4LVYZelnmyFBT3vsRC
nLGyroy1hZDLUlecGxyjv6/nX0jLTy/RZGOytY/BxpNd0u/WfsSZNF+me7L+VvAI
a1LC5oxQ00LaUWxkMqYZ4VSVsFd/0ZD1gEZQAyzDjpcB4l9gcpJ6CIAXuv0+/pQX
vWhw3XEW+EBx46XCoYDBzL5MAV/G4Yj2MbFryS+gw8WfBkf8uabGTFMjwHnMMUNA
s1wXZSlGDaJd+Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:49:48 2025 by rpki-client