Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa
File:                     323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa (raw, json)
Hash identifier:          eUKreGkkWeRCkPIv0f+wTaVV8TNPRx7EEiIW4tKOHAM=
Subject key identifier:   D6:4A:A2:F5:F7:5A:86:CF:AD:90:67:55:9C:67:A2:0C:EA:38:49:D2
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       31F1BA9FB1F7860F71B359915DAB2102E560D7BA
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa
Signing time:             Wed 05 Mar 2025 19:32:39 +0000
ROA not before:           Wed 05 Mar 2025 19:27:39 +0000
ROA not after:            Wed 04 Mar 2026 19:32:39 +0000
asID:                     263989
IP address blocks:        2804:28f4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f1:ba:9f:b1:f7:86:0f:71:b3:59:91:5d:ab:21:02:e5:60:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Mar  5 19:27:39 2025 GMT
            Not After : Mar  4 19:32:39 2026 GMT
        Subject: CN=D64AA2F5F75A86CFAD9067559C67A20CEA3849D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:8e:10:0b:e0:cf:07:c6:4d:ce:db:7b:9b:
                    7a:2f:f4:64:29:78:97:7d:73:48:d1:af:d8:8a:c2:
                    4a:c6:f2:35:2c:11:ff:c0:c9:1c:7f:1f:5e:40:f4:
                    18:f5:86:2c:5e:a5:61:dc:b2:20:6f:ac:af:24:a0:
                    f3:d8:9b:84:7f:35:54:85:4f:74:a8:7a:3e:a2:23:
                    04:30:e9:ab:9e:56:4d:ea:ea:9e:9b:f8:fc:25:d0:
                    1a:dd:de:c2:de:06:83:50:3f:e7:f1:96:d5:cb:92:
                    0b:3d:77:30:82:4c:9c:54:f4:dc:86:c8:a6:b9:6c:
                    84:5d:0a:eb:c5:eb:a1:c7:7a:08:44:88:3d:e2:e4:
                    45:19:f7:f9:10:a8:76:3e:7c:61:55:ae:53:2d:b5:
                    9e:ef:95:73:49:fa:ac:bb:8f:25:67:14:08:e0:b3:
                    32:2d:a2:be:80:97:7e:17:74:2b:0c:ac:ac:c2:2d:
                    5a:6b:ce:22:eb:98:88:62:1d:7a:b2:ba:fa:6f:ab:
                    9a:06:28:2c:90:85:56:20:48:c4:8c:60:b6:f2:1a:
                    92:8a:36:4e:1c:13:32:15:b9:51:03:5c:ee:ee:da:
                    9a:a6:1a:95:d6:a2:dd:2e:1a:dd:50:54:42:0a:bc:
                    38:22:70:c0:98:29:f8:7e:b2:9d:b6:9c:9a:c0:bb:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4A:A2:F5:F7:5A:86:CF:AD:90:67:55:9C:67:A2:0C:EA:38:49:D2
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/323830343a323866343a343030303a3a2f33342d3334203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:2e:ce:f2:31:3a:61:d9:9d:50:2a:20:59:8f:7f:7d:4b:
         95:e7:b8:1c:2c:6e:23:5d:07:9c:f9:6f:a7:e6:77:81:50:9a:
         dd:72:23:2b:7c:4a:be:9b:ff:51:f9:22:bf:1e:d0:ec:92:47:
         5f:e4:e0:92:be:78:a5:f8:83:41:96:9a:87:6d:cc:89:27:d2:
         ce:b6:9e:39:0d:ff:bd:42:6d:6d:14:92:0f:09:ed:07:fc:d7:
         e7:08:7b:c6:cc:63:33:11:ff:d1:65:ff:11:39:4c:f3:44:ae:
         6c:66:b7:8a:95:06:dd:17:e8:3e:77:19:96:9e:41:59:8e:48:
         1b:92:fc:58:87:58:fd:31:2b:63:e8:e7:d6:50:34:54:70:39:
         b1:af:72:cf:f5:e4:ef:89:29:bd:10:b6:d3:38:6e:29:5d:a6:
         38:f1:65:9b:9d:37:7f:7c:f3:aa:a3:ad:19:89:9b:3d:d9:d8:
         4c:54:e6:a5:a4:aa:fc:86:61:82:cd:a4:2f:fd:e6:b5:41:ca:
         b0:06:33:d6:3f:71:74:01:b3:2e:0e:57:85:41:54:17:74:f3:
         80:ae:18:4f:aa:12:9b:49:a4:94:3e:d4:3b:24:58:e5:07:4a:
         53:45:ab:0f:6e:d0:3c:58:b2:1c:df:08:47:fb:c1:7e:c7:23:
         88:02:c6:b5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMfG6n7H3hg9xs1mRXashAuVg17owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUyQ0ZBREUwREI5NjVCODMwRDRDOTJEMjE4MzkyMUFF
MTEzRDJBMjAeFw0yNTAzMDUxOTI3MzlaFw0yNjAzMDQxOTMyMzlaMDMxMTAvBgNV
BAMTKEQ2NEFBMkY1Rjc1QTg2Q0ZBRDkwNjc1NTlDNjdBMjBDRUEzODQ5RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTa44QC+DPB8ZNztt7m3ov9GQp
eJd9c0jRr9iKwkrG8jUsEf/AyRx/H15A9Bj1hixepWHcsiBvrK8koPPYm4R/NVSF
T3Soej6iIwQw6aueVk3q6p6b+Pwl0Brd3sLeBoNQP+fxltXLkgs9dzCCTJxU9NyG
yKa5bIRdCuvF66HHeghEiD3i5EUZ9/kQqHY+fGFVrlMttZ7vlXNJ+qy7jyVnFAjg
szItor6Al34XdCsMrKzCLVprziLrmIhiHXqyuvpvq5oGKCyQhVYgSMSMYLbyGpKK
Nk4cEzIVuVEDXO7u2pqmGpXWot0uGt1QVEIKvDgicMCYKfh+sp22nJrAu3x3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU1kqi9fdahs+tkGdVnGeiDOo4SdIwHwYDVR0j
BBgwFoAUbiz63g25Zbgw1MktIYOSGuET0qIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZ6akppOTd4dkdYWUVKMldzQXJ0ZzhOd3RNdTcyclJTRGdrYVJ2QVJS
OG8vMS82RTJDRkFERTBEQjk2NUI4MzBENEM5MkQyMTgzOTIxQUUxMTNEMkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMkNGQURFMERCOTY1Qjgz
MEQ0QzkyRDIxODM5MjFBRTExM0QyQTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2empKaTk3eHZHWFlFSjJXc0FydGc4Tnd0TXU3MnJSU0Rna2FSdkFSUjhvLzEv
MzIzODMwMzQzYTMyMzg2NjM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKPRAMA0GCSqGSIb3DQEBCwUA
A4IBAQAz1i7O8jE6YdmdUCogWY9/fUuV57gcLG4jXQec+W+n5neBUJrdciMrfEq+
m/9R+SK/HtDskkdf5OCSvnil+INBlpqHbcyJJ9LOtp45Df+9Qm1tFJIPCe0H/Nfn
CHvGzGMzEf/RZf8ROUzzRK5sZreKlQbdF+g+dxmWnkFZjkgbkvxYh1j9MStj6OfW
UDRUcDmxr3LP9eTviSm9ELbTOG4pXaY48WWbnTd/fPOqo60ZiZs92dhMVOalpKr8
hmGCzaQv/ea1QcqwBjPWP3F0AbMuDleFQVQXdPOArhhPqhKbSaSUPtQ7JFjlB0pT
RasPbtA8WLIc3whH+8F+xyOIAsa1
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:57:33 2025 by rpki-client