Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa
File:                     323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa (raw, json)
Hash identifier:          VlagycUQg/cbQKhrhry8PoDzrZHtnHhkoGb5vGcbgnQ=
Subject key identifier:   68:F2:96:9F:7F:3F:CE:B1:5C:D3:BA:81:C2:49:F8:E0:62:07:AB:2D
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       6DAE9BFD76DC16B4115DAB822FDCFA1501C38A33
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266248
IP address blocks:        2804:3d04:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 21:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ae:9b:fd:76:dc:16:b4:11:5d:ab:82:2f:dc:fa:15:01:c3:8a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:21:98:54:fe:99:db:ab:0f:fa:b6:74:62:
                    ea:b3:2f:bf:c1:a5:04:77:6e:4f:00:26:e5:92:4f:
                    fe:9c:1a:7e:67:96:38:ec:48:f9:b2:19:66:7f:51:
                    de:37:c3:f7:56:93:c9:36:89:aa:78:80:70:c0:e7:
                    cf:ff:7b:c2:c0:87:76:81:3d:20:cf:18:f0:fd:af:
                    12:ec:3d:06:04:9e:1e:68:c9:c1:dc:c4:56:b4:b3:
                    77:ab:0c:d1:aa:89:c2:ac:21:ae:ee:01:0c:d6:0e:
                    e4:d2:8f:5f:48:69:28:fe:bb:5f:02:27:1c:f7:0d:
                    1f:52:3c:22:20:eb:3b:c0:7e:7f:4d:ef:79:bb:64:
                    98:28:5c:69:c9:02:6b:04:66:c2:9e:63:78:39:62:
                    1b:5f:a2:88:03:5a:55:f1:68:f4:30:62:c4:c3:1a:
                    46:b1:14:54:e1:6e:f2:be:76:7d:4b:89:6d:85:db:
                    31:77:85:46:ba:48:0c:d1:d7:fd:d1:a9:97:ea:1e:
                    a7:73:f3:5c:c9:7d:6a:2e:5b:c6:fc:9a:69:eb:02:
                    a4:f0:b8:ee:79:5e:43:fc:58:f2:0a:a8:8c:07:d7:
                    98:23:f1:d5:ec:63:d9:38:66:b0:58:a5:60:92:ed:
                    f4:04:d3:5f:75:ae:08:4d:6b:8b:fc:c1:04:c1:90:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F2:96:9F:7F:3F:CE:B1:5C:D3:BA:81:C2:49:F8:E0:62:07:AB:2D
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a383030303a3a2f33332d3333203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:30:dc:8b:a7:5d:6b:64:63:05:16:57:85:b5:91:18:35:d6:
         82:5a:72:ed:bd:d8:30:9f:41:76:9b:ad:4c:df:ed:cc:85:1f:
         b0:93:80:67:37:6b:a8:ee:42:ef:4d:6b:de:93:a0:2c:cf:4f:
         be:cc:0a:7f:13:29:38:eb:2c:88:d9:6f:47:cd:f9:83:3c:4c:
         8e:7a:9b:ae:56:71:b7:34:cc:94:f2:d7:66:1b:70:c0:ae:71:
         f8:e3:7b:be:c9:bc:9e:13:4b:5d:1b:9c:57:80:c5:40:c4:9d:
         d9:eb:5e:fe:75:7a:19:4e:04:81:58:51:e2:a0:03:3b:8d:f4:
         a6:69:93:01:14:cb:df:01:8f:72:d2:4a:a1:bc:4b:11:6d:eb:
         2b:8a:e8:30:7a:dc:df:d5:46:ff:d8:96:ba:52:c4:8a:38:97:
         f2:ec:3d:d8:e9:c6:d4:0a:58:14:c7:06:bb:dd:05:19:ef:a5:
         1b:b7:49:8f:d3:6d:d3:a7:ad:3a:e5:0f:2f:de:8e:1e:24:7d:
         32:aa:22:79:d3:1e:bf:e3:2c:4f:03:0a:0a:af:fe:a7:79:6d:
         87:d2:00:61:94:31:2b:4a:43:3d:de:4d:21:0a:94:fe:34:20:
         0b:b3:d8:b9:d9:e4:ef:91:35:d8:47:09:98:57:45:e4:04:b3:
         e8:3b:ba:24
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUba6b/XbcFrQRXauCL9z6FQHDijMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBFRjIxOTg1NEZFOTlEQkFC
MEZGQUI2NzQ2MkVBQjMyRkJGQzFBNTA0Nzc2RTRGMDAyNkU1OTI0RkZFOUMxQTdF
Njc5NjM4RUM0OEY5QjIxOTY2N0Y1MURFMzdDM0Y3NTY5M0M5MzY4OUFBNzg4MDcw
QzBFN0NGRkY3QkMyQzA4Nzc2ODEzRDIwQ0YxOEYwRkRBRjEyRUMzRDA2MDQ5RTFF
NjhDOUMxRENDNDU2QjRCMzc3QUIwQ0QxQUE4OUMyQUMyMUFFRUUwMTBDRDYwRUU0
RDI4RjVGNDg2OTI4RkVCQjVGMDIyNzFDRjcwRDFGNTIzQzIyMjBFQjNCQzA3RTdG
NERFRjc5QkI2NDk4Mjg1QzY5QzkwMjZCMDQ2NkMyOUU2Mzc4Mzk2MjFCNUZBMjg4
MDM1QTU1RjE2OEY0MzA2MkM0QzMxQTQ2QjExNDU0RTE2RUYyQkU3NjdENEI4OTZE
ODVEQjMxNzc4NTQ2QkE0ODBDRDFEN0ZERDFBOTk3RUExRUE3NzNGMzVDQzk3RDZB
MkU1QkM2RkM5QTY5RUIwMkE0RjBCOEVFNzk1RTQzRkM1OEYyMEFBODhDMDdENzk4
MjNGMUQ1RUM2M0Q5Mzg2NkIwNThBNTYwOTJFREY0MDREMzVGNzVBRTA4NEQ2QjhC
RkNDMTA0QzE5MERGRTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0O8hmFT+mdurD/q2dGLqsy+/waUEd25PACblkk/+nBp+Z5Y47Ej5
shlmf1HeN8P3VpPJNomqeIBwwOfP/3vCwId2gT0gzxjw/a8S7D0GBJ4eaMnB3MRW
tLN3qwzRqonCrCGu7gEM1g7k0o9fSGko/rtfAicc9w0fUjwiIOs7wH5/Te95u2SY
KFxpyQJrBGbCnmN4OWIbX6KIA1pV8Wj0MGLEwxpGsRRU4W7yvnZ9S4lthdsxd4VG
ukgM0df90amX6h6nc/NcyX1qLlvG/Jpp6wKk8LjueV5D/FjyCqiMB9eYI/HV7GPZ
OGawWKVgku30BNNfda4ITWuL/MEEwZDf6QIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGjylp9/P86xXNO6gcJJ+OBiB6stMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
MzgzMDMwMzAzYTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgcoBD0EgDANBgkqhkiG9w0BAQsFAAOCAQEAdTDci6dda2RjBRZXhbWR
GDXWglpy7b3YMJ9BdputTN/tzIUfsJOAZzdrqO5C701r3pOgLM9PvswKfxMpOOss
iNlvR835gzxMjnqbrlZxtzTMlPLXZhtwwK5x+ON7vsm8nhNLXRucV4DFQMSd2ete
/nV6GU4EgVhR4qADO430pmmTARTL3wGPctJKobxLEW3rK4roMHrc39VG/9iWulLE
ijiX8uw92OnG1ApYFMcGu90FGe+lG7dJj9Nt06etOuUPL96OHiR9MqoiedMev+Ms
TwMKCq/+p3lth9IAYZQxK0pDPd5NIQqU/jQgC7PYudnk75E12EcJmFdF5ASz6Du6
JA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:05 2025 by rpki-client