Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3132303a3a2f34342d3434203d3e20323731343636.roa
File:                     323830343a376266383a3132303a3a2f34342d3434203d3e20323731343636.roa (raw, json)
Hash identifier:          F6BdSFn9UHa1cdRAeRjhOCWpjtv5B02yS9lIvjnIPNo=
Subject key identifier:   E1:0F:86:21:EE:ED:7D:79:AB:97:98:BC:B6:C0:D9:64:DE:42:0F:5A
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       6C6A41CD34BB954B895160432D69293C83352E3B
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3132303a3a2f34342d3434203d3e20323731343636.roa
Signing time:             Mon 02 Dec 2024 18:07:30 +0000
ROA not before:           Mon 02 Dec 2024 18:02:30 +0000
ROA not after:            Mon 01 Dec 2025 18:07:30 +0000
asID:                     271466
IP address blocks:        2804:7bf8:120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:41:cd:34:bb:95:4b:89:51:60:43:2d:69:29:3c:83:35:2e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Dec  2 18:02:30 2024 GMT
            Not After : Dec  1 18:07:30 2025 GMT
        Subject: CN=E10F8621EEED7D79AB9798BCB6C0D964DE420F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:a3:06:b9:0c:1c:c5:f7:2a:88:17:58:2d:
                    97:b9:fe:68:06:f3:03:86:86:b3:70:54:2e:10:5d:
                    7b:ac:da:be:cb:ea:25:0a:87:10:51:64:0a:a7:b8:
                    c7:31:df:ae:ba:22:34:06:dc:71:5d:af:6f:a4:0e:
                    e2:27:4f:e6:00:f8:10:92:9e:3a:00:93:53:f5:b4:
                    e0:e9:b9:af:3e:d6:d9:a8:db:83:b6:7b:59:cf:53:
                    29:87:49:0e:1b:9a:f3:e4:96:5c:37:c6:82:61:c6:
                    0d:0b:67:9e:11:07:24:c7:8d:3d:dc:e7:cc:42:52:
                    bf:49:f1:6f:86:56:d9:5a:c4:7c:18:bc:ab:53:09:
                    3a:dd:c0:38:c5:1a:86:0d:5f:6b:24:6d:40:9f:4c:
                    02:96:c5:db:15:e7:e4:1b:ad:c7:80:c2:1e:5b:d8:
                    e4:96:d8:52:91:b1:f0:49:77:04:92:74:96:0e:9c:
                    2d:5c:c6:67:24:e4:b7:18:c7:86:bd:ba:64:4f:08:
                    4c:98:3d:7d:84:fa:43:94:93:7b:20:41:41:36:bf:
                    85:47:c4:af:5f:83:7f:75:a0:91:91:5f:95:bc:4c:
                    d8:ec:b5:81:e8:64:56:10:3a:77:d6:d8:62:ff:b3:
                    ab:c7:46:6d:7b:d7:d1:f1:7a:5a:66:f7:89:5f:63:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:86:21:EE:ED:7D:79:AB:97:98:BC:B6:C0:D9:64:DE:42:0F:5A
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3132303a3a2f34342d3434203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:6f:b6:4c:5d:1d:de:04:e1:83:8d:e1:24:bd:f2:a7:e7:27:
         c8:78:aa:bd:75:55:84:43:54:fc:be:66:ea:1c:eb:e2:81:c4:
         2d:e2:d8:d2:06:49:11:a9:73:88:63:81:21:b6:84:88:e0:be:
         90:08:d3:7b:49:1f:22:2f:25:99:a1:b8:72:b7:3c:23:c8:0c:
         e0:95:4f:c3:c5:09:f0:22:91:8f:b7:8b:8e:1d:0c:89:ab:c4:
         2d:4b:86:83:14:e2:ac:30:24:8a:7f:0b:3e:e5:44:01:35:c4:
         4d:a5:fd:d4:07:16:0a:81:d3:46:44:73:c9:a2:e5:8a:0b:50:
         ab:4a:db:a9:7e:20:54:28:99:03:11:fe:07:c8:6e:b8:3a:ed:
         15:44:63:48:a0:a3:61:c1:0b:64:2f:bc:70:9f:9c:32:d7:6b:
         28:da:40:a8:8b:a1:c2:2e:c1:ea:d0:04:44:92:15:0e:a9:07:
         6a:70:d2:cf:09:1d:22:d0:18:f6:df:88:16:f7:cf:62:32:65:
         36:43:91:37:7a:3c:b0:bb:0e:40:9b:0c:55:b0:0a:d1:20:81:
         eb:0f:bc:0b:0c:90:42:d6:8d:46:63:c6:58:66:18:05:5d:33:
         bf:b2:55:a3:d9:f1:3e:1e:c1:59:5c:9b:1d:06:c3:81:85:64:
         00:bb:48:e0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUbGpBzTS7lUuJUWBDLWkpPIM1LjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThDODJGQzQ1MDAzRkVCMDBEQjkyOEU2QUY0MTlFNTc3
MjE5MzNFQzAeFw0yNDEyMDIxODAyMzBaFw0yNTEyMDExODA3MzBaMDMxMTAvBgNV
BAMTKEUxMEY4NjIxRUVFRDdENzlBQjk3OThCQ0I2QzBEOTY0REU0MjBGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOg6MGuQwcxfcqiBdYLZe5/mgG
8wOGhrNwVC4QXXus2r7L6iUKhxBRZAqnuMcx3666IjQG3HFdr2+kDuInT+YA+BCS
njoAk1P1tODpua8+1tmo24O2e1nPUymHSQ4bmvPkllw3xoJhxg0LZ54RByTHjT3c
58xCUr9J8W+GVtlaxHwYvKtTCTrdwDjFGoYNX2skbUCfTAKWxdsV5+QbrceAwh5b
2OSW2FKRsfBJdwSSdJYOnC1cxmck5LcYx4a9umRPCEyYPX2E+kOUk3sgQUE2v4VH
xK9fg391oJGRX5W8TNjstYHoZFYQOnfW2GL/s6vHRm1719Hxelpm94lfY50bAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU4Q+GIe7tfXmrl5i8tsDZZN5CD1owHwYDVR0j
BBgwFoAU6MgvxFAD/rANuSjmr0GeV3IZM+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMS9FOEM4MkZDNDUwMDNGRUIwMERCOTI4RTZBRjQxOUU1NzcyMTkzM0VDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QzgyRkM0NTAwM0ZFQjAw
REI5MjhFNkFGNDE5RTU3NzIxOTMzRUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzEv
MzIzODMwMzQzYTM3NjI2NjM4M2EzMTMyMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM3MzEzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBHv4ASAwDQYJKoZIhvcNAQELBQAD
ggEBAH1vtkxdHd4E4YON4SS98qfnJ8h4qr11VYRDVPy+Zuoc6+KBxC3i2NIGSRGp
c4hjgSG2hIjgvpAI03tJHyIvJZmhuHK3PCPIDOCVT8PFCfAikY+3i44dDImrxC1L
hoMU4qwwJIp/Cz7lRAE1xE2l/dQHFgqB00ZEc8mi5YoLUKtK26l+IFQomQMR/gfI
brg67RVEY0igo2HBC2QvvHCfnDLXayjaQKiLocIuwerQBESSFQ6pB2pw0s8JHSLQ
GPbfiBb3z2IyZTZDkTd6PLC7DkCbDFWwCtEggesPvAsMkELWjUZjxlhmGAVdM7+y
VaPZ8T4ewVlcmx0Gw4GFZAC7SOA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:42:41 2025 by rpki-client