Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa
File:                     323830343a316161343a3a2f33322d3334203d3e203631383733.roa (raw, json)
Hash identifier:          hlZmFrqC/vjafcJ+UBZZPdMvTOOHlrA1uS5uWtGivKs=
Subject key identifier:   41:41:BF:A0:FB:FE:49:B2:88:76:92:79:83:5E:A3:20:86:5A:2D:01
Certificate issuer:       /CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
Certificate serial:       6C09F29B23B45C73DEF7B90FE60DCB500AABC482
Authority key identifier: F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa
Signing time:             Mon 22 Jul 2024 13:14:47 +0000
ROA not before:           Mon 22 Jul 2024 13:09:47 +0000
ROA not after:            Mon 21 Jul 2025 13:14:47 +0000
asID:                     61873
IP address blocks:        2804:1aa4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl
                          rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:09:f2:9b:23:b4:5c:73:de:f7:b9:0f:e6:0d:cb:50:0a:ab:c4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
        Validity
            Not Before: Jul 22 13:09:47 2024 GMT
            Not After : Jul 21 13:14:47 2025 GMT
        Subject: CN=4141BFA0FBFE49B288769279835EA320865A2D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:5e:71:b0:39:f7:ad:d7:25:3d:b3:6e:74:
                    10:36:12:5b:e6:7b:af:08:1c:20:83:46:1e:30:9e:
                    2e:d0:54:54:11:89:7c:c6:c8:79:07:1a:dd:ea:51:
                    c0:ad:54:cb:02:bb:fb:cc:05:5a:fb:7e:f2:b5:96:
                    35:24:a3:18:ec:5b:a6:10:ab:65:86:3e:20:f9:05:
                    4c:53:ea:06:8c:eb:56:b3:e9:2a:a7:dd:d2:8a:6e:
                    6e:bf:8f:4f:e4:a9:7d:95:2d:85:e4:da:35:61:f0:
                    45:4e:0d:c0:e3:b2:c7:60:c4:80:7a:c7:3e:ce:76:
                    ce:2e:c2:53:3d:65:64:73:e2:d6:0d:22:3d:55:04:
                    4c:07:3d:33:76:69:ef:86:87:33:20:83:d7:10:a0:
                    93:2b:b5:a4:a5:0a:40:5f:ee:7c:ad:4a:f1:d4:6a:
                    5d:e7:1f:88:29:50:a1:da:36:86:ad:05:06:c9:45:
                    78:47:08:26:97:cf:fd:7a:92:fe:e0:e0:08:15:f8:
                    0a:46:8a:32:63:5f:5a:52:99:5d:dd:61:9d:87:12:
                    3e:ac:d3:b5:02:02:0c:7f:8f:61:92:31:02:fe:5b:
                    55:fc:0b:f5:fb:c0:77:71:3f:0d:be:38:be:9b:3a:
                    b4:c5:c3:38:95:0e:de:f4:35:6b:57:3a:f2:f6:26:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:41:BF:A0:FB:FE:49:B2:88:76:92:79:83:5E:A3:20:86:5A:2D:01
            X509v3 Authority Key Identifier:
                keyid:F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/323830343a316161343a3a2f33322d3334203d3e203631383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:2c:a7:59:38:dd:9f:e0:9f:a6:ed:b9:0e:c6:69:a3:c5:
         57:3a:e5:ad:74:61:17:34:aa:ee:85:35:9b:90:7f:53:e5:2b:
         44:b3:fe:a4:2d:11:3b:cc:98:52:5b:d0:1e:12:34:b6:15:59:
         9c:69:d9:2b:91:90:a0:a5:16:59:fe:2d:e8:b0:5f:51:6a:c1:
         b3:de:8f:4d:6b:6f:5d:2d:49:33:be:7d:1b:f6:ae:86:d0:8a:
         c3:c8:ec:a2:5e:cc:82:ae:a9:47:bf:32:cc:ad:2c:a5:a0:a2:
         3d:9a:2e:02:4e:85:02:40:23:41:ad:ba:df:3c:d0:46:ee:d8:
         2f:4b:42:9c:a7:60:98:26:66:df:1c:27:09:61:21:59:e8:50:
         20:fe:86:5b:86:fe:eb:1b:c2:ea:c0:26:c4:df:96:fa:31:f8:
         c6:dc:b8:bc:ea:a6:12:a6:8c:fc:09:03:35:21:ed:b1:e6:30:
         71:b4:6c:36:30:7c:ea:4c:46:b8:5e:0c:59:68:1f:5e:41:7e:
         3a:b5:c5:53:1f:a8:5c:ec:0c:bb:39:d6:e4:45:e2:fa:56:82:
         e8:ca:f9:2d:7c:92:30:da:12:98:0b:29:cb:ca:7b:8e:28:9c:
         62:90:b2:c4:e7:32:1e:5d:ca:8e:be:cb:d3:9a:14:63:1f:0b:
         fe:39:a5:d4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbAnymyO0XHPe97kP5g3LUAqrxIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhGQ0M5RDBBMzg2RjIwN0M5RkQ4ODZFMjY5RDhGNDRC
MzM4NTc4RDAeFw0yNDA3MjIxMzA5NDdaFw0yNTA3MjExMzE0NDdaMDMxMTAvBgNV
BAMTKDQxNDFCRkEwRkJGRTQ5QjI4ODc2OTI3OTgzNUVBMzIwODY1QTJEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2V5xsDn3rdclPbNudBA2Elvm
e68IHCCDRh4wni7QVFQRiXzGyHkHGt3qUcCtVMsCu/vMBVr7fvK1ljUkoxjsW6YQ
q2WGPiD5BUxT6gaM61az6Sqn3dKKbm6/j0/kqX2VLYXk2jVh8EVODcDjssdgxIB6
xz7Ods4uwlM9ZWRz4tYNIj1VBEwHPTN2ae+GhzMgg9cQoJMrtaSlCkBf7nytSvHU
al3nH4gpUKHaNoatBQbJRXhHCCaXz/16kv7g4AgV+ApGijJjX1pSmV3dYZ2HEj6s
07UCAgx/j2GSMQL+W1X8C/X7wHdxPw2+OL6bOrTFwziVDt70NWtXOvL2Jv7zAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQUG/oPv+SbKIdpJ5g16jIIZaLQEwHwYDVR0j
BBgwFoAU+PzJ0KOG8gfJ/YhuJp2PRLM4V40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkNvSk1XZndvWkhHcGpDdU5TNHNlUkhRSkVKU0VvMnBrOUhTNGVmUFZ2
dDcvMC9GOEZDQzlEMEEzODZGMjA3QzlGRDg4NkUyNjlEOEY0NEIzMzg1NzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4RkNDOUQwQTM4NkYyMDdD
OUZEODg2RTI2OUQ4RjQ0QjMzODU3OEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJDb0pNV2Z3b1pIR3BqQ3VOUzRzZVJIUUpFSlNFbzJwazlIUzRlZlBWdnQ3LzAv
MzIzODMwMzQzYTMxNjE2MTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzYzMTM4
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGqQwDQYJKoZIhvcNAQELBQADggEBAC+XLKdZON2f
4J+m7bkOxmmjxVc65a10YRc0qu6FNZuQf1PlK0Sz/qQtETvMmFJb0B4SNLYVWZxp
2SuRkKClFln+LeiwX1FqwbPej01rb10tSTO+fRv2robQisPI7KJezIKuqUe/Msyt
LKWgoj2aLgJOhQJAI0Gtut880Ebu2C9LQpynYJgmZt8cJwlhIVnoUCD+hluG/usb
wurAJsTflvox+MbcuLzqphKmjPwJAzUh7bHmMHG0bDYwfOpMRrheDFloH15Bfjq1
xVMfqFzsDLs51uRF4vpWgujK+S18kjDaEpgLKcvKe44onGKQssTnMh5dyo6+y9Oa
FGMfC/45pdQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:40 2025 by rpki-client