Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383130303a3a2f34302d3438203d3e20323731323938.roa
File:                     323830343a373935303a383130303a3a2f34302d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          mqVejNE8mRjYTgE8NXfZv5Ff9T9USX1RngJMhfzdfRY=
Subject key identifier:   43:EE:4F:9D:E6:0D:CA:78:0F:D7:8A:35:A3:CE:65:5C:06:5E:D9:AF
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       746F5DCFFC15D2E1AE2D80500110F511CBE15743
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383130303a3a2f34302d3438203d3e20323731323938.roa
Signing time:             Wed 26 Feb 2025 18:26:43 +0000
ROA not before:           Wed 26 Feb 2025 18:21:43 +0000
ROA not after:            Wed 25 Feb 2026 18:26:43 +0000
asID:                     271298
IP address blocks:        2804:7950:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6f:5d:cf:fc:15:d2:e1:ae:2d:80:50:01:10:f5:11:cb:e1:57:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Feb 26 18:21:43 2025 GMT
            Not After : Feb 25 18:26:43 2026 GMT
        Subject: CN=43EE4F9DE60DCA780FD78A35A3CE655C065ED9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:38:c6:c9:92:35:4c:cb:5b:31:68:ed:43:
                    25:c1:65:83:78:92:24:4e:68:3c:9c:51:b2:d9:f9:
                    59:81:10:72:9f:5d:ac:9b:c0:91:09:71:29:bc:e0:
                    1b:fa:1b:9c:26:cd:37:46:27:b4:46:ad:8f:6f:de:
                    42:9b:1f:75:76:5d:d8:66:c1:94:af:f2:e9:d7:6a:
                    4b:07:09:35:04:ad:e7:d4:43:22:35:6a:ae:64:3b:
                    2d:8f:c9:ec:53:7e:e0:cb:80:29:98:a9:88:98:19:
                    87:59:36:08:97:9b:57:c6:04:17:03:97:41:13:b5:
                    ad:03:c0:56:d1:90:52:3b:44:3e:47:ec:cb:d7:a4:
                    0d:8c:f0:be:9b:7a:4d:8e:08:0a:78:41:b6:91:da:
                    bf:18:54:37:6a:f8:10:95:93:ff:9c:65:23:39:99:
                    d9:bb:12:ec:12:2e:d3:81:e2:b5:40:5a:65:9d:2d:
                    fb:a5:a8:a5:7e:0e:ed:4e:75:9a:bc:f0:a9:8a:15:
                    37:47:ac:07:ec:86:03:0f:7c:6e:33:90:69:e2:e2:
                    ac:63:3b:ee:97:c4:55:7e:34:d2:85:03:4e:0e:1d:
                    f0:91:15:43:52:c2:2b:9e:24:a4:d9:fe:ed:3d:9e:
                    04:44:55:6b:3c:13:94:c0:91:cc:8d:00:5e:ab:9c:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:4F:9D:E6:0D:CA:78:0F:D7:8A:35:A3:CE:65:5C:06:5E:D9:AF
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383130303a3a2f34302d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:15:65:1d:77:27:a3:8e:9f:af:61:9f:47:58:ad:ec:f6:
         90:23:09:a3:a3:6f:b9:54:bd:2e:9a:ac:7a:b2:32:d6:4e:ba:
         d3:a3:04:40:f6:7f:5a:ac:69:63:1f:4b:a8:a0:4f:00:26:40:
         55:39:94:25:11:76:80:4c:cf:f5:f9:88:f5:7f:8a:64:36:84:
         fc:ac:5c:71:e3:07:41:84:c8:17:52:82:70:d6:3e:48:cc:ab:
         1a:08:e2:fa:ae:05:cc:f0:cf:50:ce:f2:d5:6b:0d:4f:a5:32:
         b7:6a:a6:aa:98:87:c4:12:47:49:74:27:e3:ac:d9:d1:b1:68:
         59:0e:ad:f1:fb:d2:cd:19:1a:af:ee:82:a2:6d:a8:43:3f:88:
         32:c9:0e:c3:e7:34:a4:97:ad:ba:89:7d:71:bf:b2:10:d4:27:
         0c:94:3c:73:fb:cd:d0:7a:ed:f4:af:3f:07:ac:e8:5a:9f:a6:
         4a:80:d4:47:90:a6:6e:44:ad:b5:10:91:ba:73:09:01:a1:9a:
         c1:f1:90:cc:8a:40:1d:10:9b:0a:1b:5b:cf:a0:74:c0:f6:9b:
         2d:e2:f0:c4:3b:df:a9:34:19:eb:cc:f4:5a:0c:36:3d:ef:28:
         40:1d:26:5c:3e:55:c2:4d:5d:c6:6a:ec:4a:fc:8b:d4:0f:8e:
         13:a9:a1:2a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdG9dz/wV0uGuLYBQARD1EcvhV0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1RERFQTgyRjQxNTE2NzhFMjJDN0RFNkQzNzI4MjEz
NzM4N0VFQTAeFw0yNTAyMjYxODIxNDNaFw0yNjAyMjUxODI2NDNaMDMxMTAvBgNV
BAMTKDQzRUU0RjlERTYwRENBNzgwRkQ3OEEzNUEzQ0U2NTVDMDY1RUQ5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeTjGyZI1TMtbMWjtQyXBZYN4
kiROaDycUbLZ+VmBEHKfXaybwJEJcSm84Bv6G5wmzTdGJ7RGrY9v3kKbH3V2Xdhm
wZSv8unXaksHCTUErefUQyI1aq5kOy2PyexTfuDLgCmYqYiYGYdZNgiXm1fGBBcD
l0ETta0DwFbRkFI7RD5H7MvXpA2M8L6bek2OCAp4QbaR2r8YVDdq+BCVk/+cZSM5
mdm7EuwSLtOB4rVAWmWdLfulqKV+Du1OdZq88KmKFTdHrAfshgMPfG4zkGni4qxj
O+6XxFV+NNKFA04OHfCRFUNSwiueJKTZ/u09ngREVWs8E5TAkcyNAF6rnI4VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ+5PneYNyngP14o1o85lXAZe2a8wHwYDVR0j
BBgwFoAUMV3eqC9BUWeOIsfebTcoITc4fuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtTcm1LV1liMXVNU3hOOFVQN016YlVBNUJWZ2dVd1E5QnlQZEhIOGJD
eDYvMi8zMTVEREVBODJGNDE1MTY3OEUyMkM3REU2RDM3MjgyMTM3Mzg3RUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNURERUE4MkY0MTUxNjc4
RTIyQzdERTZEMzcyODIxMzczODdFRUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrU3JtS1dZYjF1TVN4TjhVUDdNemJVQTVCVmdnVXdROUJ5UGRISDhiQ3g2LzIv
MzIzODMwMzQzYTM3MzkzNTMwM2EzODMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDMyMzczMTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEeVCBMA0GCSqGSIb3DQEBCwUA
A4IBAQBaIRVlHXcno46fr2GfR1it7PaQIwmjo2+5VL0umqx6sjLWTrrTowRA9n9a
rGljH0uooE8AJkBVOZQlEXaATM/1+Yj1f4pkNoT8rFxx4wdBhMgXUoJw1j5IzKsa
COL6rgXM8M9QzvLVaw1PpTK3aqaqmIfEEkdJdCfjrNnRsWhZDq3x+9LNGRqv7oKi
bahDP4gyyQ7D5zSkl626iX1xv7IQ1CcMlDxz+83Qeu30rz8HrOhan6ZKgNRHkKZu
RK21EJG6cwkBoZrB8ZDMikAdEJsKG1vPoHTA9pst4vDEO9+pNBnrzPRaDDY97yhA
HSZcPlXCTV3GauxK/IvUD44TqaEq
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:42 2025 by rpki-client