Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d313238203d3e20323639333534.roa
File:                     323830343a363335343a3a2f33322d313238203d3e20323639333534.roa (raw, json)
Hash identifier:          9G+s+c5axmtrZlmuwWEDmCstRilL4y+C2w1mT6i0Pjw=
Subject key identifier:   0E:0B:62:35:E7:59:CE:0F:54:62:AC:17:CA:89:F3:2C:2B:ED:52:92
Certificate issuer:       /CN=7C192E2AD8890EED671307C3C7824B76983A1282
Certificate serial:       37FC19D3450FABC4FF951223DC13CD9DFF3FBF8D
Authority key identifier: 7C:19:2E:2A:D8:89:0E:ED:67:13:07:C3:C7:82:4B:76:98:3A:12:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C192E2AD8890EED671307C3C7824B76983A1282.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d313238203d3e20323639333534.roa
Signing time:             Fri 21 Feb 2025 11:43:47 +0000
ROA not before:           Fri 21 Feb 2025 11:38:47 +0000
ROA not after:            Fri 20 Feb 2026 11:43:47 +0000
asID:                     269354
IP address blocks:        2804:6354::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/7C192E2AD8890EED671307C3C7824B76983A1282.crl
                          rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/7C192E2AD8890EED671307C3C7824B76983A1282.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C192E2AD8890EED671307C3C7824B76983A1282.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fc:19:d3:45:0f:ab:c4:ff:95:12:23:dc:13:cd:9d:ff:3f:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C192E2AD8890EED671307C3C7824B76983A1282
        Validity
            Not Before: Feb 21 11:38:47 2025 GMT
            Not After : Feb 20 11:43:47 2026 GMT
        Subject: CN=0E0B6235E759CE0F5462AC17CA89F32C2BED5292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:90:5d:8e:a8:bf:66:ae:69:ef:2b:cd:db:74:
                    11:d9:85:f1:aa:2c:39:77:18:5a:15:b9:10:48:7a:
                    8e:ee:db:26:b3:6f:ee:10:26:8c:61:7a:d0:5f:55:
                    3e:a5:ab:b5:63:d3:1d:a4:4d:c2:54:c5:63:47:b7:
                    13:a6:37:41:e3:b2:8f:1f:3c:f0:a0:24:1a:fb:22:
                    3f:32:0a:5b:5a:21:01:c7:82:46:ac:4e:27:20:6b:
                    57:e2:ab:3a:19:c4:86:06:26:61:6e:a7:6e:39:24:
                    86:8c:c0:3d:1c:52:af:f4:5e:e6:a4:5f:e4:fb:b6:
                    ff:b4:51:85:f7:7d:f5:0a:86:84:91:21:af:7a:5e:
                    e5:58:b8:ef:8b:22:60:29:8c:b6:48:64:ec:51:dc:
                    92:5a:d4:5b:20:4a:eb:0e:58:c3:83:09:90:2d:64:
                    06:ae:dd:26:6d:b9:ee:56:1d:6b:ef:95:f9:34:57:
                    fe:4c:ef:ac:13:fa:87:22:56:cb:f5:f4:9f:67:48:
                    c3:bb:f7:ce:e8:4d:2d:64:90:28:65:d5:22:c1:22:
                    63:54:c3:8d:10:f9:51:8c:87:81:04:c6:80:c2:ff:
                    1a:a8:fe:58:51:fd:c7:6f:43:7c:ef:48:f0:27:92:
                    65:32:7f:73:e2:ed:98:fb:9f:4e:44:53:30:ee:7f:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0B:62:35:E7:59:CE:0F:54:62:AC:17:CA:89:F3:2C:2B:ED:52:92
            X509v3 Authority Key Identifier:
                keyid:7C:19:2E:2A:D8:89:0E:ED:67:13:07:C3:C7:82:4B:76:98:3A:12:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/7C192E2AD8890EED671307C3C7824B76983A1282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C192E2AD8890EED671307C3C7824B76983A1282.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d313238203d3e20323639333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6354::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:03:52:46:36:ca:07:eb:fe:78:6b:0f:7a:41:d8:e7:bd:
         2f:17:94:1c:e1:87:62:cc:5b:c1:af:94:46:b7:24:d6:c3:8b:
         4c:29:6f:f4:46:fa:5a:ff:1f:4b:a8:7d:b0:d3:c6:cf:69:c0:
         6b:c0:62:91:f3:90:bb:7a:e8:6c:c1:de:7a:45:91:ce:fe:00:
         4c:7f:17:84:94:d4:b0:4d:5d:08:ac:94:f5:98:4c:7f:ad:97:
         a1:4c:bc:7d:d8:5c:45:61:c7:9e:5a:cb:a9:65:c5:37:1b:44:
         b3:4c:ad:f2:4f:08:5a:3f:b4:a6:7c:27:18:59:f8:cf:83:a0:
         af:f1:15:56:1f:dd:32:45:65:9e:4e:c6:47:21:85:ba:13:d7:
         a6:81:dc:51:53:e6:2c:e1:af:09:9c:d3:de:2c:17:c4:22:56:
         c6:70:be:58:5e:68:e9:aa:fe:b8:f8:54:11:da:1b:ee:d5:3f:
         09:d7:91:da:8f:96:00:9e:25:31:3a:a7:95:7b:f5:2c:f1:ba:
         74:7a:ac:2c:ab:e3:f1:0f:d2:cc:2b:2e:29:ad:12:1a:e4:bc:
         29:50:8c:75:cd:c4:a6:c4:32:8f:b8:e4:4f:a5:78:e9:bd:83:
         54:c5:3e:37:b5:61:99:bb:96:51:cd:4a:b4:b6:e3:2a:d2:fa:
         34:26:46:41
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUN/wZ00UPq8T/lRIj3BPNnf8/v40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MxOTJFMkFEODg5MEVFRDY3MTMwN0MzQzc4MjRCNzY5
ODNBMTI4MjAeFw0yNTAyMjExMTM4NDdaFw0yNjAyMjAxMTQzNDdaMDMxMTAvBgNV
BAMTKDBFMEI2MjM1RTc1OUNFMEY1NDYyQUMxN0NBODlGMzJDMkJFRDUyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkF2OqL9mrmnvK83bdBHZhfGq
LDl3GFoVuRBIeo7u2yazb+4QJoxhetBfVT6lq7Vj0x2kTcJUxWNHtxOmN0Hjso8f
PPCgJBr7Ij8yCltaIQHHgkasTicga1fiqzoZxIYGJmFup245JIaMwD0cUq/0Xuak
X+T7tv+0UYX3ffUKhoSRIa96XuVYuO+LImApjLZIZOxR3JJa1FsgSusOWMODCZAt
ZAau3SZtue5WHWvvlfk0V/5M76wT+ociVsv19J9nSMO7987oTS1kkChl1SLBImNU
w40Q+VGMh4EExoDC/xqo/lhR/cdvQ3zvSPAnkmUyf3Pi7Zj7n05EUzDuf6QZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUDgtiNedZzg9UYqwXyonzLCvtUpIwHwYDVR0j
BBgwFoAUfBkuKtiJDu1nEwfDx4JLdpg6EoIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFnY2JZMXZwZE5UMU45MXhKbWQ5ZzlUcFpocHZlVEZ5Z0pHblRjc2FR
d3gvMC83QzE5MkUyQUQ4ODkwRUVENjcxMzA3QzNDNzgyNEI3Njk4M0ExMjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDMTkyRTJBRDg4OTBFRUQ2
NzEzMDdDM0M3ODI0Qjc2OTgzQTEyODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxZ2NiWTF2cGROVDFOOTF4Sm1kOWc5VHBaaHB2ZVRGeWdKR25UY3NhUXd4LzAv
MzIzODMwMzQzYTM2MzMzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGNUMA0GCSqGSIb3DQEBCwUAA4IBAQCXyQNS
RjbKB+v+eGsPekHY570vF5Qc4YdizFvBr5RGtyTWw4tMKW/0Rvpa/x9LqH2w08bP
acBrwGKR85C7euhswd56RZHO/gBMfxeElNSwTV0IrJT1mEx/rZehTLx92FxFYcee
WsupZcU3G0SzTK3yTwhaP7SmfCcYWfjPg6Cv8RVWH90yRWWeTsZHIYW6E9emgdxR
U+Ys4a8JnNPeLBfEIlbGcL5YXmjpqv64+FQR2hvu1T8J15Haj5YAniUxOqeVe/Us
8bp0eqwsq+PxD9LMKy4prRIa5LwpUIx1zcSmxDKPuORPpXjpvYNUxT43tWGZu5ZR
zUq0tuMq0vo0JkZB
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:08 2025 by rpki-client