Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
File:                     323830343a346461343a3a2f33322d3438203d3e20323638323130.roa (raw, json)
Hash identifier:          YiQHKMdwHlom83jDlNqn6Vl5jTPc/w0ARvhaytuX5Zw=
Subject key identifier:   3D:11:D9:8D:02:CE:01:7C:5C:12:1E:66:63:29:0F:40:A7:23:2F:DE
Certificate issuer:       /CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Certificate serial:       04D71B619B45B943FA170C2ABFAD6798C5F11BAD
Authority key identifier: 0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268210
IP address blocks:        2804:4da4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
                          rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d7:1b:61:9b:45:b9:43:fa:17:0c:2a:bf:ad:67:98:c5:f1:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:fb:2b:7e:04:75:e6:e3:6a:83:03:25:7b:
                    ad:ba:bb:e4:3b:86:02:0c:fa:58:29:3c:80:1a:d0:
                    b2:5c:f8:08:83:aa:a8:fb:13:e1:eb:ed:e3:53:41:
                    a2:af:e9:aa:66:91:20:78:27:d8:f8:a9:56:4d:53:
                    3d:d9:52:f6:a1:02:4d:94:89:13:05:d1:47:95:48:
                    ff:da:3b:5c:9a:12:d6:1c:0d:59:c5:8c:57:ab:df:
                    92:f2:2a:b8:73:b3:52:60:38:62:cb:a2:06:b3:c9:
                    a1:60:d4:82:b0:88:6d:6d:d1:c9:f5:f4:01:91:9a:
                    dc:d4:e8:64:42:37:65:41:9a:ca:ac:00:e3:3e:1b:
                    ae:d5:0b:27:22:03:9e:22:9a:93:26:99:58:f9:eb:
                    21:18:01:f5:46:17:93:12:56:d3:a0:b8:a9:d5:29:
                    df:ab:a7:e6:29:17:d6:04:ee:a2:1d:64:85:2f:0c:
                    5d:e2:11:89:25:ad:ca:79:59:35:77:1e:7e:e7:51:
                    9c:14:9f:3d:4c:a0:ca:25:17:83:4e:6f:69:91:91:
                    e4:51:8d:b2:73:c1:1c:4c:b5:9d:72:5d:08:c3:17:
                    2d:48:79:17:66:1e:61:1d:3a:95:fa:bf:9c:91:77:
                    6b:e4:74:50:a4:79:e5:8c:c2:d5:f6:bf:4a:d7:50:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:D9:8D:02:CE:01:7C:5C:12:1E:66:63:29:0F:40:A7:23:2F:DE
            X509v3 Authority Key Identifier:
                keyid:0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:0b:2c:63:ea:6c:03:42:0a:80:8e:4c:19:d8:3b:94:d5:54:
         4e:c2:17:e3:7d:11:3f:89:9d:7f:2c:18:c0:d2:44:51:94:2f:
         8c:00:cf:e4:1e:a4:ef:18:78:8d:82:53:e4:6c:23:94:ee:7a:
         e9:79:9c:e9:2d:a5:e7:ce:d8:ce:c1:0f:9a:c2:c1:53:c6:1f:
         b5:b9:b0:e7:1a:a1:38:60:b6:0b:85:21:25:36:16:9c:fb:9d:
         7d:83:c8:0b:61:97:54:0a:80:df:ea:9f:12:97:4b:4d:60:58:
         3c:a0:7f:09:e6:22:40:b1:00:f9:f4:7b:b7:fa:62:12:1b:f0:
         23:5b:c0:e9:24:45:b6:be:35:da:11:55:e9:1a:95:a9:96:e8:
         1a:f8:7a:02:fa:db:91:b5:79:39:06:65:4e:91:d9:1f:61:92:
         66:7f:d5:1b:af:47:c3:f5:e3:d8:94:03:61:68:ec:8c:e2:ed:
         5f:57:e2:9e:8a:72:05:aa:e6:81:61:4c:61:99:86:34:77:62:
         4a:fa:4f:f7:20:79:b7:c0:c5:cd:2c:ce:74:b1:20:f4:c4:fe:
         17:75:c8:98:4b:f2:89:a1:28:08:90:e2:f6:c8:92:a5:57:12:
         96:06:22:a5:a0:aa:28:ed:1f:a0:c4:61:c3:ae:56:05:13:8a:
         04:04:39:19
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUBNcbYZtFuUP6Fwwqv61nmMXxG60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5ODFGNURDRjI5QTdGQzVFQ0U5M0QzQjkxQ0EzQUMx
NjA4OTU4RDAeFw0yNTAzMDYxODU1MDBaFw0yNjAzMDYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJGM0ZCMkI3RTA0NzVFNkUz
NkE4MzAzMjU3QkFEQkFCQkU0M0I4NjAyMENGQTU4MjkzQzgwMUFEMEIyNUNGODA4
ODNBQUE4RkIxM0UxRUJFREUzNTM0MUEyQUZFOUFBNjY5MTIwNzgyN0Q4RjhBOTU2
NEQ1MzNERDk1MkY2QTEwMjREOTQ4OTEzMDVEMTQ3OTU0OEZGREEzQjVDOUExMkQ2
MUMwRDU5QzU4QzU3QUJERjkyRjIyQUI4NzNCMzUyNjAzODYyQ0JBMjA2QjNDOUEx
NjBENDgyQjA4ODZENkREMUM5RjVGNDAxOTE5QURDRDRFODY0NDIzNzY1NDE5QUNB
QUMwMEUzM0UxQkFFRDUwQjI3MjIwMzlFMjI5QTkzMjY5OTU4RjlFQjIxMTgwMUY1
NDYxNzkzMTI1NkQzQTBCOEE5RDUyOURGQUJBN0U2MjkxN0Q2MDRFRUEyMUQ2NDg1
MkYwQzVERTIxMTg5MjVBRENBNzk1OTM1NzcxRTdFRTc1MTlDMTQ5RjNENENBMENB
MjUxNzgzNEU2RjY5OTE5MUU0NTE4REIyNzNDMTFDNENCNTlENzI1RDA4QzMxNzJE
NDg3OTE3NjYxRTYxMUQzQTk1RkFCRjlDOTE3NzZCRTQ3NDUwQTQ3OUU1OENDMkQ1
RjZCRjRBRDc1MDNDNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsvP7K34EdebjaoMDJXuturvkO4YCDPpYKTyAGtCyXPgIg6qo+xPh
6+3jU0Gir+mqZpEgeCfY+KlWTVM92VL2oQJNlIkTBdFHlUj/2jtcmhLWHA1ZxYxX
q9+S8iq4c7NSYDhiy6IGs8mhYNSCsIhtbdHJ9fQBkZrc1OhkQjdlQZrKrADjPhuu
1QsnIgOeIpqTJplY+eshGAH1RheTElbToLip1Snfq6fmKRfWBO6iHWSFLwxd4hGJ
Ja3KeVk1dx5+51GcFJ89TKDKJReDTm9pkZHkUY2yc8EcTLWdcl0IwxctSHkXZh5h
HTqV+r+ckXdr5HRQpHnljMLV9r9K11A8YQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FD0R2Y0CzgF8XBIeZmMpD0CnIy/eMB8GA1UdIwQYMBaAFA2YH13PKaf8Xs6T07kc
o6wWCJWNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNXZmFwUGIxZzgxQXF2
ckhyNDE0dlBuSmE1dnZwNVc3RGI5VmdlM2JxaWNxLzEvMEQ5ODFGNURDRjI5QTdG
QzVFQ0U5M0QzQjkxQ0EzQUMxNjA4OTU4RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wRDk4MUY1RENGMjlBN0ZDNUVDRTkzRDNCOTFDQTNBQzE2MDg5
NThELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zV2ZhcFBiMWc4MUFxdnJIcjQx
NHZQbkphNXZ2cDVXN0RiOVZnZTNicWljcS8xLzMyMzgzMDM0M2EzNDY0NjEzNDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzODMyMzEzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
TaQwDQYJKoZIhvcNAQELBQADggEBABkLLGPqbANCCoCOTBnYO5TVVE7CF+N9ET+J
nX8sGMDSRFGUL4wAz+QepO8YeI2CU+RsI5Tueul5nOktpefO2M7BD5rCwVPGH7W5
sOcaoThgtguFISU2Fpz7nX2DyAthl1QKgN/qnxKXS01gWDygfwnmIkCxAPn0e7f6
YhIb8CNbwOkkRba+NdoRVekalamW6Br4egL625G1eTkGZU6R2R9hkmZ/1RuvR8P1
49iUA2Fo7Izi7V9X4p6KcgWq5oFhTGGZhjR3Ykr6T/cgebfAxc0sznSxIPTE/hd1
yJhL8omhKAiQ4vbIkqVXEpYGIqWgqijtH6DEYcOuVgUTigQEORk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:06:28 2025 by rpki-client