Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa
File:                     323830343a343362303a3a2f33322d3438203d3e20323637353834.roa (raw, json)
Hash identifier:          BArepKdMgDDafoEqR88UsAn7gEbu5oEkzJLQ4+IREVA=
Subject key identifier:   32:86:24:B5:6B:04:D6:42:AD:D4:CB:38:F4:43:38:5B:FA:BE:54:24
Certificate issuer:       /CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
Certificate serial:       6E12968FBD6036FD4AC533E44A397EC2DFD5EA42
Authority key identifier: 2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa
Signing time:             Thu 06 Mar 2025 11:52:01 +0000
ROA not before:           Thu 06 Mar 2025 11:47:01 +0000
ROA not after:            Thu 05 Mar 2026 11:52:01 +0000
asID:                     267584
IP address blocks:        2804:43b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.crl
                          rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:96:8f:bd:60:36:fd:4a:c5:33:e4:4a:39:7e:c2:df:d5:ea:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5
        Validity
            Not Before: Mar  6 11:47:01 2025 GMT
            Not After : Mar  5 11:52:01 2026 GMT
        Subject: CN=328624B56B04D642ADD4CB38F443385BFABE5424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:e8:1a:4c:8c:e2:ea:8b:ca:ee:40:78:64:
                    04:9c:89:bc:96:61:89:c0:1e:3e:39:cb:05:c9:44:
                    56:05:ff:f7:07:61:4c:36:60:b2:78:68:86:d9:05:
                    da:a3:97:6a:1b:68:55:68:07:6f:4a:db:60:f0:7b:
                    ba:f2:e1:6f:9e:d9:e3:00:2f:4d:35:b8:a4:86:89:
                    08:6e:7b:ce:77:b0:0f:f5:01:25:ca:a2:f3:91:2c:
                    39:88:1d:db:bd:29:28:46:64:48:be:31:e5:58:49:
                    f5:2a:f9:f7:2d:a4:11:9a:52:74:ec:b0:6c:69:b3:
                    c8:b8:80:2a:4a:8d:27:f4:89:d1:b6:7b:97:20:13:
                    8c:3f:ec:e0:1a:a7:f7:41:c0:e3:c7:c1:75:13:4c:
                    b5:0b:d6:9c:07:bd:54:8e:be:97:d6:32:49:6b:bf:
                    da:37:23:36:51:b4:8a:b8:a6:73:d6:7f:9c:da:35:
                    2b:2e:d0:ba:ae:b0:7c:37:17:1b:fd:d4:90:a6:40:
                    9e:e7:06:8c:07:29:65:8b:4d:0b:8c:62:5b:5c:ab:
                    76:61:2c:93:f9:f0:61:b8:1e:b3:8f:40:11:01:40:
                    15:78:d3:33:32:50:00:94:29:a0:cf:be:b9:3d:47:
                    b6:6e:a9:1d:3e:d7:ec:e9:73:a4:26:47:30:00:60:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:86:24:B5:6B:04:D6:42:AD:D4:CB:38:F4:43:38:5B:FA:BE:54:24
            X509v3 Authority Key Identifier:
                keyid:2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/323830343a343362303a3a2f33322d3438203d3e20323637353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:39:6a:0a:04:32:40:b5:43:2f:11:45:63:91:24:7f:32:
         a5:67:e2:37:7f:c5:cb:eb:db:49:47:45:d7:24:48:0f:2c:74:
         73:39:4d:43:d0:33:43:ec:75:5f:e6:30:b5:ef:12:8e:7b:37:
         a9:dd:90:0c:4a:80:14:73:1f:35:52:09:c8:66:40:51:ab:ca:
         86:40:97:92:fd:26:d5:3a:4c:df:6f:09:72:2f:88:1f:73:83:
         cf:9d:ad:87:48:02:75:55:b3:47:2b:b4:74:aa:f8:cb:13:f8:
         29:93:04:c1:00:f6:1b:cf:56:ab:bf:45:e0:b0:d8:30:b5:bd:
         b7:34:da:1e:0f:aa:dd:7f:c7:b1:71:da:8c:f4:39:dc:87:85:
         46:d3:ac:8c:c4:d9:e0:04:19:9e:a0:1c:47:ce:66:b6:0d:41:
         88:95:b9:94:84:46:24:ff:60:1b:5e:04:27:25:fa:e8:ff:75:
         77:6c:fc:a1:72:e8:db:6d:66:5a:cb:a1:7b:e9:92:b0:c2:04:
         eb:3c:c1:d6:a5:27:90:6f:c7:10:de:73:b1:45:e0:1d:76:87:
         52:92:60:4e:51:b2:92:27:32:99:d3:59:ca:36:fc:68:3f:2d:
         8e:34:1c:24:2d:17:7f:58:9e:d4:8f:dd:3a:ca:0f:11:f4:5e:
         57:2e:1c:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbhKWj71gNv1KxTPkSjl+wt/V6kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVFOThDRDdBNjQ5QUUyMjU5RTlEQUQzMDk5NzM2QzND
NTk1RTlENTAeFw0yNTAzMDYxMTQ3MDFaFw0yNjAzMDUxMTUyMDFaMDMxMTAvBgNV
BAMTKDMyODYyNEI1NkIwNEQ2NDJBREQ0Q0IzOEY0NDMzODVCRkFCRTU0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7egaTIzi6ovK7kB4ZAScibyW
YYnAHj45ywXJRFYF//cHYUw2YLJ4aIbZBdqjl2obaFVoB29K22Dwe7ry4W+e2eMA
L001uKSGiQhue853sA/1ASXKovORLDmIHdu9KShGZEi+MeVYSfUq+fctpBGaUnTs
sGxps8i4gCpKjSf0idG2e5cgE4w/7OAap/dBwOPHwXUTTLUL1pwHvVSOvpfWMklr
v9o3IzZRtIq4pnPWf5zaNSsu0LqusHw3Fxv91JCmQJ7nBowHKWWLTQuMYltcq3Zh
LJP58GG4HrOPQBEBQBV40zMyUACUKaDPvrk9R7ZuqR0+1+zpc6QmRzAAYOm3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMoYktWsE1kKt1Ms49EM4W/q+VCQwHwYDVR0j
BBgwFoAULumM16ZJriJZ6drTCZc2w8WV6dUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dnd0N0RWNnbjJBOUNvRFVrWUhUclRBUG5VTGdQbzhqZzl6cEVxN0pU
aEEvMS8yRUU5OENEN0E2NDlBRTIyNTlFOURBRDMwOTk3MzZDM0M1OTVFOUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRTk4Q0Q3QTY0OUFFMjI1
OUU5REFEMzA5OTczNkMzQzU5NUU5RDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnZ3dDdEVjZ24yQTlDb0RVa1lIVHJUQVBuVUxnUG84amc5enBFcTdKVGhBLzEv
MzIzODMwMzQzYTM0MzM2MjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDsDANBgkqhkiG9w0BAQsFAAOCAQEAd8Y5agoE
MkC1Qy8RRWORJH8ypWfiN3/Fy+vbSUdF1yRIDyx0czlNQ9AzQ+x1X+Ywte8Sjns3
qd2QDEqAFHMfNVIJyGZAUavKhkCXkv0m1TpM328Jci+IH3ODz52th0gCdVWzRyu0
dKr4yxP4KZMEwQD2G89Wq79F4LDYMLW9tzTaHg+q3X/HsXHajPQ53IeFRtOsjMTZ
4AQZnqAcR85mtg1BiJW5lIRGJP9gG14EJyX66P91d2z8oXLo221mWsuhe+mSsMIE
6zzB1qUnkG/HEN5zsUXgHXaHUpJgTlGykicymdNZyjb8aD8tjjQcJC0Xf1ie1I/d
OsoPEfReVy4cuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:20 2025 by rpki-client