Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa
File:                     323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (raw, json)
Hash identifier:          h6D+9BexD48ISIugnRM+sSXcxvLgV0d5nLrOB8LY8jY=
Subject key identifier:   FC:7A:91:22:FC:91:F2:7A:38:FD:55:E5:45:C5:D1:C6:44:46:1C:8F
Certificate issuer:       /CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
Certificate serial:       0CD145B46B61659693C0C94036842AE174C5E863
Authority key identifier: E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa
Signing time:             Mon 17 Mar 2025 17:39:40 +0000
ROA not before:           Mon 17 Mar 2025 17:34:40 +0000
ROA not after:            Mon 16 Mar 2026 17:39:40 +0000
asID:                     269234
IP address blocks:        2804:6170::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl
                          rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:45:b4:6b:61:65:96:93:c0:c9:40:36:84:2a:e1:74:c5:e8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
        Validity
            Not Before: Mar 17 17:34:40 2025 GMT
            Not After : Mar 16 17:39:40 2026 GMT
        Subject: CN=FC7A9122FC91F27A38FD55E545C5D1C644461C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:b5:96:d2:5d:4b:4c:56:b6:74:e2:e9:82:
                    7d:ab:e1:99:23:10:e7:32:ed:65:89:3b:0d:2f:33:
                    88:c3:94:fb:5c:50:86:4d:e0:c2:92:82:29:63:cd:
                    52:be:ae:9b:b3:af:5b:20:f9:5d:9b:a5:24:37:6a:
                    ee:0b:f6:4c:a5:de:81:6c:99:c2:3f:03:30:c9:fa:
                    e8:60:77:cc:32:bf:27:d6:03:35:ce:8d:39:ab:b0:
                    b1:9e:a6:6d:32:ac:e5:a2:eb:29:b2:c3:07:be:6e:
                    12:7f:ac:a8:83:c2:ef:18:76:dc:8d:14:71:5d:13:
                    47:5a:77:20:c9:07:64:97:ed:0b:04:f1:d7:3c:fd:
                    4d:11:dd:d5:0c:38:ae:a3:e5:14:d8:72:f6:08:bb:
                    9c:1a:0a:30:bb:0d:94:d6:ee:b4:2e:b9:fa:a2:55:
                    b0:10:ab:a6:9c:8d:00:80:42:6d:7f:76:7d:ff:6e:
                    94:fa:b3:e2:fd:ad:09:b7:10:35:07:3f:73:a5:7e:
                    c1:3f:eb:a4:78:6a:cc:ad:c2:9a:12:aa:47:be:21:
                    a3:ce:2a:75:46:6b:9b:bb:ca:10:2a:f2:af:cd:29:
                    63:fd:11:db:83:05:f4:17:d4:90:ca:f9:84:8d:ff:
                    79:0a:11:a2:8f:a5:b3:61:b9:3a:dc:7a:33:22:37:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:91:22:FC:91:F2:7A:38:FD:55:E5:45:C5:D1:C6:44:46:1C:8F
            X509v3 Authority Key Identifier:
                keyid:E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3a2f33322d313238203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:a3:8f:70:65:f0:b7:91:a8:4c:a6:67:8d:7b:d2:c0:f3:
         93:57:40:78:76:de:6e:74:69:d8:01:76:f1:d1:fa:c6:75:48:
         51:c8:78:a3:94:f5:e9:b9:dc:de:96:35:28:22:e4:cb:c4:d2:
         ef:b1:fe:6a:66:91:22:90:d7:ed:1e:76:00:fc:0f:c4:0c:e7:
         ff:11:58:3f:97:a4:aa:7e:ea:bb:8a:05:17:69:2b:2b:b5:85:
         4b:f1:68:65:0a:81:1b:76:2a:61:35:09:e0:be:29:13:31:a3:
         96:5b:e3:2e:3d:07:3c:80:9b:b8:02:be:e2:b7:51:c5:5d:cc:
         c6:d0:5e:d7:08:11:93:85:79:40:9b:b1:93:5e:8e:84:82:16:
         8b:73:14:95:7e:9c:7b:cc:6b:c7:15:8b:e9:f9:e7:13:7b:df:
         1c:42:aa:48:06:42:ca:b0:90:ec:21:a1:9d:3d:22:d0:49:e2:
         e9:01:76:33:9e:fe:7e:88:5a:22:7a:6b:f3:c3:3d:d4:a4:cf:
         7b:b1:77:1c:55:8f:e1:2a:4e:02:f4:f8:29:4d:5d:2d:1a:33:
         d7:12:e0:44:5b:47:84:6b:2c:ac:2e:3d:8d:69:0e:12:7b:25:
         8c:f4:f4:20:2c:20:6d:98:23:35:8d:5d:d1:74:d8:e1:a9:ee:
         c0:85:88:7c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDNFFtGthZZaTwMlANoQq4XTF6GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdCNkZDQjJBNzQ5NDAzODVCRkI3OUVBRjM4Q0JBQUYy
RjAwOENDRjAeFw0yNTAzMTcxNzM0NDBaFw0yNjAzMTYxNzM5NDBaMDMxMTAvBgNV
BAMTKEZDN0E5MTIyRkM5MUYyN0EzOEZENTVFNTQ1QzVEMUM2NDQ0NjFDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/rWW0l1LTFa2dOLpgn2r4Zkj
EOcy7WWJOw0vM4jDlPtcUIZN4MKSgiljzVK+rpuzr1sg+V2bpSQ3au4L9kyl3oFs
mcI/AzDJ+uhgd8wyvyfWAzXOjTmrsLGepm0yrOWi6ymywwe+bhJ/rKiDwu8YdtyN
FHFdE0dadyDJB2SX7QsE8dc8/U0R3dUMOK6j5RTYcvYIu5waCjC7DZTW7rQuufqi
VbAQq6acjQCAQm1/dn3/bpT6s+L9rQm3EDUHP3OlfsE/66R4asytwpoSqke+IaPO
KnVGa5u7yhAq8q/NKWP9EduDBfQX1JDK+YSN/3kKEaKPpbNhuTrcejMiN9ZdAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/HqRIvyR8no4/VXlRcXRxkRGHI8wHwYDVR0j
BBgwFoAU57b8sqdJQDhb+3nq84y6ry8AjM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR
UVYvMC9FN0I2RkNCMkE3NDk0MDM4NUJGQjc5RUFGMzhDQkFBRjJGMDA4Q0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QjZGQ0IyQTc0OTQwMzg1
QkZCNzlFQUYzOENCQUFGMkYwMDhDQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEaUp0TTMycTJTaVNIbjNoRmJNM1dXejY0dmFNQUc2VGFrRFVWb21pUVFWLzAv
MzIzODMwMzQzYTM2MzEzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGFwMA0GCSqGSIb3DQEBCwUAA4IBAQAL86OP
cGXwt5GoTKZnjXvSwPOTV0B4dt5udGnYAXbx0frGdUhRyHijlPXpudzeljUoIuTL
xNLvsf5qZpEikNftHnYA/A/EDOf/EVg/l6Sqfuq7igUXaSsrtYVL8WhlCoEbdiph
NQngvikTMaOWW+MuPQc8gJu4Ar7it1HFXczG0F7XCBGThXlAm7GTXo6EghaLcxSV
fpx7zGvHFYvp+ecTe98cQqpIBkLKsJDsIaGdPSLQSeLpAXYznv5+iFoiemvzwz3U
pM97sXccVY/hKk4C9PgpTV0tGjPXEuBEW0eEayysLj2NaQ4SeyWM9PQgLCBtmCM1
jV3RdNjhqe7AhYh8
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:17 2025 by rpki-client