Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
File:                     323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (raw, json)
Hash identifier:          j50q5Q+ow8SJ6PGS5kNHGAOsLKmLHvprt+8f7xkhG/s=
Subject key identifier:   D7:25:4A:D5:87:86:A2:86:B0:BC:43:C2:38:1F:5E:DC:31:78:65:55
Certificate issuer:       /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
Certificate serial:       496289D3704ABB289E2F66795612DAFDE0844ACA
Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa
Signing time:             Wed 05 Mar 2025 21:00:20 +0000
ROA not before:           Wed 05 Mar 2025 20:55:20 +0000
ROA not after:            Wed 04 Mar 2026 21:00:20 +0000
asID:                     270735
IP address blocks:        2804:7094::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl
                          rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:89:d3:70:4a:bb:28:9e:2f:66:79:56:12:da:fd:e0:84:4a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Validity
            Not Before: Mar  5 20:55:20 2025 GMT
            Not After : Mar  4 21:00:20 2026 GMT
        Subject: CN=D7254AD58786A286B0BC43C2381F5EDC31786555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:4c:39:9d:24:f6:1a:98:1a:b2:69:a3:77:
                    f3:6a:74:d9:eb:22:32:aa:fe:54:72:2e:47:24:9b:
                    45:7f:03:03:5c:55:43:1c:33:8a:c0:c9:9a:d2:1c:
                    e3:57:6c:31:95:e0:41:52:ee:6d:66:96:d9:a2:22:
                    b9:c5:c6:a7:a9:a2:c1:eb:93:02:64:24:a1:a5:64:
                    1d:49:8a:bd:99:c3:2a:11:1c:0a:79:98:18:22:98:
                    df:98:c5:62:d9:4c:28:53:77:ba:9e:53:97:f2:f7:
                    b3:67:bc:92:56:ae:12:61:7e:51:8b:aa:8f:03:dc:
                    84:68:c4:76:08:5c:49:3a:53:42:83:39:a7:6b:1f:
                    90:dc:f2:78:97:fc:36:df:ae:8f:f3:39:0e:00:5b:
                    6e:f4:ee:9c:a5:3b:56:16:fb:de:90:30:cc:c5:64:
                    1a:e7:d8:6f:8d:e0:7e:36:c2:b7:1a:14:0c:ba:cd:
                    1b:32:58:37:3a:46:71:63:5b:61:18:b0:76:99:a6:
                    58:75:4b:3f:46:28:6d:6c:fe:e0:a9:cf:40:ec:07:
                    e3:6d:62:11:ef:c5:ca:ab:76:c6:9f:b1:5d:7e:c8:
                    f6:dc:37:28:07:bb:19:87:8d:63:21:15:11:c6:8a:
                    6a:6f:98:fd:d7:47:aa:71:e1:7c:7b:d8:23:59:0c:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:4A:D5:87:86:A2:86:B0:BC:43:C2:38:1F:5E:DC:31:78:65:55
            X509v3 Authority Key Identifier:
                keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/323830343a373039343a3a2f33322d3438203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7094::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:24:2d:9a:ee:ef:80:ef:88:3b:a1:a4:5d:ea:7f:fe:24:3d:
         88:ef:de:bf:54:60:ed:1c:05:89:cf:dc:b6:fe:ec:5b:94:69:
         4d:09:fb:3b:47:26:00:b9:37:78:2e:39:cd:0a:60:06:bd:30:
         bf:ea:8b:4d:a7:29:22:a6:1f:9f:bb:6b:cd:5b:89:9d:fb:99:
         ad:88:d7:9a:68:f7:4e:7a:08:10:1d:69:c1:de:9d:22:5a:67:
         a0:fd:d4:fd:aa:e4:56:3c:5c:1d:48:5b:02:6f:1b:93:10:dd:
         61:51:9f:dc:7d:12:b0:cd:fe:90:b1:52:7f:d3:93:a6:e1:60:
         ad:6f:60:29:af:f8:65:28:dd:69:98:4a:11:ab:69:2a:04:63:
         3d:3b:23:c7:26:96:fd:5a:66:0d:67:73:ca:ef:70:44:aa:f5:
         5d:7f:1f:cb:f7:17:1f:4f:48:f8:11:59:26:c2:c9:30:91:4c:
         51:0d:56:52:d8:63:6b:ab:cc:20:0c:64:98:20:25:25:bb:4d:
         8f:ef:f2:de:9c:29:79:38:54:1a:11:33:4f:65:4c:3e:b3:16:
         55:71:31:3c:84:3b:8c:8c:15:be:5b:9a:98:38:85:64:9c:92:
         ca:41:62:06:05:87:bc:46:67:fb:0a:70:18:12:78:16:e2:2f:
         51:c1:5b:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSWKJ03BKuyieL2Z5VhLa/eCESsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1RDlFMEYzRTZCQjQwQkJDOTBDOEJBMjY5OURENkEz
NTZEQTJBRTAeFw0yNTAzMDUyMDU1MjBaFw0yNjAzMDQyMTAwMjBaMDMxMTAvBgNV
BAMTKEQ3MjU0QUQ1ODc4NkEyODZCMEJDNDNDMjM4MUY1RURDMzE3ODY1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGnkw5nST2Gpgasmmjd/NqdNnr
IjKq/lRyLkckm0V/AwNcVUMcM4rAyZrSHONXbDGV4EFS7m1mltmiIrnFxqeposHr
kwJkJKGlZB1Jir2ZwyoRHAp5mBgimN+YxWLZTChTd7qeU5fy97NnvJJWrhJhflGL
qo8D3IRoxHYIXEk6U0KDOadrH5Dc8niX/Dbfro/zOQ4AW2707pylO1YW+96QMMzF
ZBrn2G+N4H42wrcaFAy6zRsyWDc6RnFjW2EYsHaZplh1Sz9GKG1s/uCpz0DsB+Nt
YhHvxcqrdsafsV1+yPbcNygHuxmHjWMhFRHGimpvmP3XR6px4Xx72CNZDCSXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1yVK1YeGooawvEPCOB9e3DF4ZVUwHwYDVR0j
BBgwFoAUJ12eDz5rtAu8kMi6JpndajVtoq4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEMzQ1hRckt5c0VEOUFoWm0yelB3R1ZVMXlIS1phVnZlVlVkcjNEeWdu
Y1IvMi8yNzVEOUUwRjNFNkJCNDBCQkM5MEM4QkEyNjk5REQ2QTM1NkRBMkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NUQ5RTBGM0U2QkI0MEJC
QzkwQzhCQTI2OTlERDZBMzU2REEyQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDM0NYUXJLeXNFRDlBaFptMnpQd0dWVTF5SEtaYVZ2ZVZVZHIzRHlnbmNSLzIv
MzIzODMwMzQzYTM3MzAzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARwlDANBgkqhkiG9w0BAQsFAAOCAQEAciQtmu7v
gO+IO6GkXep//iQ9iO/ev1Rg7RwFic/ctv7sW5RpTQn7O0cmALk3eC45zQpgBr0w
v+qLTacpIqYfn7trzVuJnfuZrYjXmmj3TnoIEB1pwd6dIlpnoP3U/arkVjxcHUhb
Am8bkxDdYVGf3H0SsM3+kLFSf9OTpuFgrW9gKa/4ZSjdaZhKEatpKgRjPTsjxyaW
/VpmDWdzyu9wRKr1XX8fy/cXH09I+BFZJsLJMJFMUQ1WUthja6vMIAxkmCAlJbtN
j+/y3pwpeThUGhEzT2VMPrMWVXExPIQ7jIwVvluamDiFZJySykFiBgWHvEZn+wpw
GBJ4FuIvUcFbxg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:15 2025 by rpki-client