Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/323830343a323938303a3a2f33322d313238203d3e203533313732.roa
File:                     323830343a323938303a3a2f33322d313238203d3e203533313732.roa (raw, json)
Hash identifier:          noo9CnK8b+ZBOYaxBrPhEjf2vRApCvi1hI1y7VNaBW4=
Subject key identifier:   72:D7:49:45:9D:AB:87:01:7E:22:A5:58:EE:5A:D8:ED:E0:3F:0C:CB
Certificate issuer:       /CN=642D27C2B88FC1E644188313B8DE644A2705C863
Certificate serial:       634EE8BBA05EEEF915BB9DE5F76E953CA55946E3
Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/323830343a323938303a3a2f33322d313238203d3e203533313732.roa
Signing time:             Wed 05 Mar 2025 20:12:13 +0000
ROA not before:           Wed 05 Mar 2025 20:07:13 +0000
ROA not after:            Wed 04 Mar 2026 20:12:13 +0000
asID:                     53172
IP address blocks:        2804:2980::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl
                          rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4e:e8:bb:a0:5e:ee:f9:15:bb:9d:e5:f7:6e:95:3c:a5:59:46:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863
        Validity
            Not Before: Mar  5 20:07:13 2025 GMT
            Not After : Mar  4 20:12:13 2026 GMT
        Subject: CN=72D749459DAB87017E22A558EE5AD8EDE03F0CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:ab:88:c7:aa:50:4e:89:26:81:3b:d7:a2:
                    c8:fe:e2:ba:ba:b2:8a:cc:85:a0:48:18:f1:f4:1d:
                    77:0c:7f:7c:7b:a3:b7:d0:f3:d3:84:5d:6a:d9:c3:
                    3e:58:a8:e0:30:a5:c2:00:9e:d1:8d:de:45:22:08:
                    b3:b7:bc:69:00:de:c7:ef:4f:68:e4:07:7d:4f:af:
                    46:62:1e:44:e9:df:ea:d7:4a:b9:f8:33:71:32:e0:
                    c1:1d:fc:75:0f:3f:f3:64:cf:2f:1e:92:70:b9:e5:
                    d5:cb:7f:05:6c:7a:9f:74:f4:c1:69:bf:e0:61:72:
                    cb:04:2d:53:72:b6:82:f0:85:5f:9d:03:4e:72:c0:
                    e1:79:2b:3e:a5:5f:0a:1b:45:c3:9d:b9:aa:82:5a:
                    59:47:a3:f2:a5:e4:f6:6f:14:71:ce:19:e2:11:03:
                    a7:62:d3:ed:35:4c:c0:42:94:48:49:b4:23:b8:2c:
                    90:a5:90:5e:5d:8f:8b:f4:68:c7:0a:16:cd:f4:7f:
                    75:f7:6c:ee:1e:bb:59:76:00:14:ff:f6:33:1b:a0:
                    17:de:33:25:8f:71:dd:4f:3f:0b:8e:ea:3a:f2:1b:
                    9f:e2:06:f9:47:16:21:65:4a:04:5c:9d:6e:2d:06:
                    aa:86:56:c0:c4:53:4b:32:43:45:1b:07:47:88:23:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:49:45:9D:AB:87:01:7E:22:A5:58:EE:5A:D8:ED:E0:3F:0C:CB
            X509v3 Authority Key Identifier:
                keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/323830343a323938303a3a2f33322d313238203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2980::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:7e:5b:08:b4:0c:78:9d:58:fd:d2:e3:03:f2:61:c9:87:
         63:bd:fb:43:c5:6d:cd:0a:50:b7:08:83:54:d0:d4:84:4e:e8:
         15:7a:bb:c3:55:93:86:c0:d7:7b:67:79:6c:f2:a7:96:6f:40:
         0d:c5:6a:fb:3f:51:88:68:70:33:29:8f:19:30:81:7b:76:f2:
         87:e5:44:79:7c:31:3f:8b:22:d0:1a:cd:6b:7d:6b:69:38:36:
         7d:44:20:cb:f3:6a:37:dc:11:63:ac:54:96:e1:b4:92:d4:a6:
         69:c1:9d:b4:de:df:10:84:ea:e9:0d:35:49:72:73:76:58:09:
         b5:4e:17:e3:ca:0d:b3:d0:5c:ef:3b:6e:28:c0:50:73:52:c3:
         45:3f:b5:2b:29:d9:b9:ef:d1:b4:b7:cd:d1:69:a0:c0:e7:5e:
         bb:d8:2a:e8:ab:85:23:cc:b7:31:62:fa:84:55:cb:c3:04:53:
         90:3d:5b:db:1c:4d:2e:23:ae:a7:be:09:0c:f0:28:81:c3:01:
         6c:1b:69:bd:c7:31:b8:5b:e8:36:cf:86:5a:b5:12:af:04:32:
         b0:7b:0b:0d:6f:ec:31:8e:13:72:b5:46:76:0b:cb:24:8f:5c:
         da:8f:8a:5d:28:3a:36:03:f9:b8:8f:58:75:c1:84:ac:38:ec:
         55:10:4c:01
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY07ou6Be7vkVu53l926VPKVZRuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy
NzA1Qzg2MzAeFw0yNTAzMDUyMDA3MTNaFw0yNjAzMDQyMDEyMTNaMDMxMTAvBgNV
BAMTKDcyRDc0OTQ1OURBQjg3MDE3RTIyQTU1OEVFNUFEOEVERTAzRjBDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLKuIx6pQTokmgTvXosj+4rq6
sorMhaBIGPH0HXcMf3x7o7fQ89OEXWrZwz5YqOAwpcIAntGN3kUiCLO3vGkA3sfv
T2jkB31Pr0ZiHkTp3+rXSrn4M3Ey4MEd/HUPP/Nkzy8eknC55dXLfwVsep909MFp
v+BhcssELVNytoLwhV+dA05ywOF5Kz6lXwobRcOduaqCWllHo/Kl5PZvFHHOGeIR
A6di0+01TMBClEhJtCO4LJClkF5dj4v0aMcKFs30f3X3bO4eu1l2ABT/9jMboBfe
MyWPcd1PPwuO6jryG5/iBvlHFiFlSgRcnW4tBqqGVsDEU0syQ0UbB0eIIyDjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUctdJRZ2rhwF+IqVY7lrY7eA/DMswHwYDVR0j
BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu
NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0
NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoSjRSQ05QUXZZblJUbVNwREZ6Y2YxUFdheFE5WTExb2tFeHI3ZHE1bjVrLzEv
MzIzODMwMzQzYTMyMzkzODMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMz
MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpgDANBgkqhkiG9w0BAQsFAAOCAQEAZQp+Wwi0
DHidWP3S4wPyYcmHY737Q8VtzQpQtwiDVNDUhE7oFXq7w1WThsDXe2d5bPKnlm9A
DcVq+z9RiGhwMymPGTCBe3byh+VEeXwxP4si0BrNa31raTg2fUQgy/NqN9wRY6xU
luG0ktSmacGdtN7fEITq6Q01SXJzdlgJtU4X48oNs9Bc7ztuKMBQc1LDRT+1KynZ
ue/RtLfN0WmgwOdeu9gq6KuFI8y3MWL6hFXLwwRTkD1b2xxNLiOup74JDPAogcMB
bBtpvccxuFvoNs+GWrUSrwQysHsLDW/sMY4TcrVGdgvLJI9c2o+KXSg6NgP5uI9Y
dcGErDjsVRBMAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:20:22 2025 by rpki-client