Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          39cVSNTkaZeghXY8S8I/naUCP8bzTuT03d3nx+6F9i0=
Subject key identifier:   31:BD:88:8D:F4:CB:13:F2:6E:62:5E:D2:9F:DE:BD:F2:F9:E8:75:41
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       40FA1A3AFEB483B230C862681671EE66AE966A40
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266248
IP address blocks:        2804:3d04:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:1a:3a:fe:b4:83:b2:30:c8:62:68:16:71:ee:66:ae:96:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100B71D1C079F13445B3C092A005483F5F753F8E831CF197CB627F52D8050BE718324C698614840500AAC3F52B70B31D86923DF835643E81290A17BF56020BFC0D5E4A31145F7D1F5260BAA40F7B0CB4DD95E6E11862D0CBE0702A41728376A5476DB44F5C5B8123D9A407290DF28B3CAF6AA67C49070F52599E5805184AC18CC8DDC29A2D9EADF86DA3FF58799E072B42890C248CED3E74B3ED57CACF2D7E99B5053561F6F55726E96AE6785BA7D64B304EC31306969BDBAB78126E160E9D8B55493233CB8EE708B7F77FCC1DEFD0C061B72FBA48F956BEB6FFAB0918F524CA7D8AF6E43736742CC05AD2AD38E5CC686AE90E24B042852BE972420FECAE2A475890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:1c:07:9f:13:44:5b:3c:09:2a:00:54:83:
                    f5:f7:53:f8:e8:31:cf:19:7c:b6:27:f5:2d:80:50:
                    be:71:83:24:c6:98:61:48:40:50:0a:ac:3f:52:b7:
                    0b:31:d8:69:23:df:83:56:43:e8:12:90:a1:7b:f5:
                    60:20:bf:c0:d5:e4:a3:11:45:f7:d1:f5:26:0b:aa:
                    40:f7:b0:cb:4d:d9:5e:6e:11:86:2d:0c:be:07:02:
                    a4:17:28:37:6a:54:76:db:44:f5:c5:b8:12:3d:9a:
                    40:72:90:df:28:b3:ca:f6:aa:67:c4:90:70:f5:25:
                    99:e5:80:51:84:ac:18:cc:8d:dc:29:a2:d9:ea:df:
                    86:da:3f:f5:87:99:e0:72:b4:28:90:c2:48:ce:d3:
                    e7:4b:3e:d5:7c:ac:f2:d7:e9:9b:50:53:56:1f:6f:
                    55:72:6e:96:ae:67:85:ba:7d:64:b3:04:ec:31:30:
                    69:69:bd:ba:b7:81:26:e1:60:e9:d8:b5:54:93:23:
                    3c:b8:ee:70:8b:7f:77:fc:c1:de:fd:0c:06:1b:72:
                    fb:a4:8f:95:6b:eb:6f:fa:b0:91:8f:52:4c:a7:d8:
                    af:6e:43:73:67:42:cc:05:ad:2a:d3:8e:5c:c6:86:
                    ae:90:e2:4b:04:28:52:be:97:24:20:fe:ca:e2:a4:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BD:88:8D:F4:CB:13:F2:6E:62:5E:D2:9F:DE:BD:F2:F9:E8:75:41
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a323030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:d5:52:32:3a:eb:d7:78:91:bc:18:ea:72:9a:d2:27:13:
         81:c8:ed:58:74:55:bb:16:6e:83:18:46:f8:b2:d4:61:3d:4b:
         46:06:15:cf:ba:e8:44:35:5b:6d:b5:26:ed:ee:88:79:25:ff:
         53:0f:e4:f6:8e:7c:a8:be:2e:1d:27:57:76:b6:ae:26:2d:5e:
         6a:2a:c1:5b:24:07:1e:9b:e5:fa:43:39:1b:19:03:89:b1:08:
         04:96:c2:f7:cc:8c:3b:2e:61:0f:3f:ed:ed:c6:61:34:92:c5:
         8a:cb:5a:14:5e:8f:37:93:15:f2:ed:86:cd:c3:d1:da:7c:78:
         82:a3:ab:ab:4f:89:3e:71:f4:9b:40:69:d8:34:37:fe:68:a3:
         0b:63:d4:12:b1:5b:e6:a1:f9:d3:8b:59:8b:a6:91:6e:ea:96:
         ce:d9:06:6c:c2:f8:da:c1:fa:cf:02:a7:ec:da:9a:d9:40:5c:
         3a:22:00:23:c6:46:0a:78:ed:63:76:f3:88:ef:c9:ed:ac:1b:
         f7:62:fe:24:d6:a4:3b:72:0b:ac:c9:3c:17:83:02:26:c2:2b:
         56:67:ad:1c:29:be:88:23:f8:62:35:88:cc:4f:ea:a2:28:a2:
         a9:a8:1b:96:76:38:a1:40:6b:ee:5b:f3:2c:c9:70:ff:bd:83:
         04:e2:6e:31
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUQPoaOv60g7IwyGJoFnHuZq6WakAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjcxRDFDMDc5RjEzNDQ1QjND
MDkyQTAwNTQ4M0Y1Rjc1M0Y4RTgzMUNGMTk3Q0I2MjdGNTJEODA1MEJFNzE4MzI0
QzY5ODYxNDg0MDUwMEFBQzNGNTJCNzBCMzFEODY5MjNERjgzNTY0M0U4MTI5MEEx
N0JGNTYwMjBCRkMwRDVFNEEzMTE0NUY3RDFGNTI2MEJBQTQwRjdCMENCNEREOTVF
NkUxMTg2MkQwQ0JFMDcwMkE0MTcyODM3NkE1NDc2REI0NEY1QzVCODEyM0Q5QTQw
NzI5MERGMjhCM0NBRjZBQTY3QzQ5MDcwRjUyNTk5RTU4MDUxODRBQzE4Q0M4RERD
MjlBMkQ5RUFERjg2REEzRkY1ODc5OUUwNzJCNDI4OTBDMjQ4Q0VEM0U3NEIzRUQ1
N0NBQ0YyRDdFOTlCNTA1MzU2MUY2RjU1NzI2RTk2QUU2Nzg1QkE3RDY0QjMwNEVD
MzEzMDY5NjlCREJBQjc4MTI2RTE2MEU5RDhCNTU0OTMyMzNDQjhFRTcwOEI3Rjc3
RkNDMURFRkQwQzA2MUI3MkZCQTQ4Rjk1NkJFQjZGRkFCMDkxOEY1MjRDQTdEOEFG
NkU0MzczNjc0MkNDMDVBRDJBRDM4RTVDQzY4NkFFOTBFMjRCMDQyODUyQkU5NzI0
MjBGRUNBRTJBNDc1ODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtx0cB58TRFs8CSoAVIP191P46DHPGXy2J/UtgFC+cYMkxphhSEBQ
Cqw/UrcLMdhpI9+DVkPoEpChe/VgIL/A1eSjEUX30fUmC6pA97DLTdlebhGGLQy+
BwKkFyg3alR220T1xbgSPZpAcpDfKLPK9qpnxJBw9SWZ5YBRhKwYzI3cKaLZ6t+G
2j/1h5ngcrQokMJIztPnSz7VfKzy1+mbUFNWH29Vcm6WrmeFun1kswTsMTBpab26
t4Em4WDp2LVUkyM8uO5wi393/MHe/QwGG3L7pI+Va+tv+rCRj1JMp9ivbkNzZ0LM
Ba0q045cxoaukOJLBChSvpckIP7K4qR1iQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FDG9iI30yxPybmJe0p/evfL56HVBMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
MzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0EIDANBgkqhkiG9w0BAQsFAAOCAQEArm7VUjI669d4kbwY6nKa
0icTgcjtWHRVuxZugxhG+LLUYT1LRgYVz7roRDVbbbUm7e6IeSX/Uw/k9o58qL4u
HSdXdrauJi1eairBWyQHHpvl+kM5GxkDibEIBJbC98yMOy5hDz/t7cZhNJLFista
FF6PN5MV8u2GzcPR2nx4gqOrq0+JPnH0m0Bp2DQ3/mijC2PUErFb5qH504tZi6aR
buqWztkGbML42sH6zwKn7Nqa2UBcOiIAI8ZGCnjtY3bziO/J7awb92L+JNakO3IL
rMk8F4MCJsIrVmetHCm+iCP4YjWIzE/qoiiiqagblnY4oUBr7lvzLMlw/72DBOJu
MQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:10 2025 by rpki-client