Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          jOkZkNvbEv8eWb+e9TXqmtND57CKQOnJY5Jl5it39/M=
Subject key identifier:   A1:18:2A:F0:F7:DB:9E:6A:BA:21:93:C9:96:A4:FF:41:DE:FD:4E:BA
Certificate issuer:       /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial:       41122C8C8A7A7DC8717B397A03439AB7836B936C
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 13 Mar 2025 15:10:45 +0000
ROA not before:           Thu 13 Mar 2025 15:05:45 +0000
ROA not after:            Thu 12 Mar 2026 15:10:45 +0000
asID:                     271484
IP address blocks:        2804:7c40:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:2c:8c:8a:7a:7d:c8:71:7b:39:7a:03:43:9a:b7:83:6b:93:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Validity
            Not Before: Mar 13 15:05:45 2025 GMT
            Not After : Mar 12 15:10:45 2026 GMT
        Subject: CN=A1182AF0F7DB9E6ABA2193C996A4FF41DEFD4EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:98:3e:5e:54:4c:53:c1:68:65:a8:22:f6:
                    92:0f:a1:e7:a6:08:6a:fd:30:f3:2d:4d:f2:77:9d:
                    cd:64:77:64:8c:7c:0d:02:f3:3d:c7:f3:6c:d4:7b:
                    a0:59:25:8b:5f:dc:4b:49:02:d5:d5:f4:3a:89:55:
                    ef:02:70:79:c4:2e:e5:45:27:23:15:af:48:8b:5c:
                    ca:7d:ab:2b:a0:af:4b:60:fa:90:17:1a:8a:36:32:
                    08:26:e7:88:2e:9a:80:e0:77:9c:40:55:51:e5:3c:
                    7d:ca:49:b3:7e:ed:ce:c9:af:87:55:ce:dd:94:8c:
                    ee:1d:d3:7d:e2:04:f7:5e:50:44:34:3e:d6:9d:f9:
                    a9:06:51:d1:bf:86:ad:5e:ea:4a:f3:19:13:95:c8:
                    f4:5f:5a:fd:f6:91:32:b5:54:63:61:ee:ab:cb:ad:
                    f0:ad:93:84:04:bc:79:e2:aa:4d:ac:18:81:91:90:
                    61:45:f2:85:11:2f:74:2d:b0:c9:ef:97:83:2a:55:
                    f1:c3:66:ca:9a:f8:5a:8f:e7:d2:40:8c:c0:b5:68:
                    7d:0d:3f:2c:88:ac:be:18:d3:53:3f:6f:1b:48:e9:
                    fa:8f:3e:da:f6:2c:eb:22:8f:e0:0c:f2:0b:90:a3:
                    53:e6:c7:3e:92:0f:30:5b:a5:90:27:d4:91:5d:50:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:2A:F0:F7:DB:9E:6A:BA:21:93:C9:96:A4:FF:41:DE:FD:4E:BA
            X509v3 Authority Key Identifier:
                keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:6e:76:2e:fb:a1:50:a4:61:4a:4e:5e:ad:88:71:3b:8d:cd:
         84:94:83:b3:75:b7:be:0d:54:89:c7:51:e3:4b:9b:f7:48:3b:
         9f:10:b0:79:72:02:11:04:f2:55:e3:aa:3a:ad:cd:96:94:84:
         9b:e8:af:28:cd:b3:3c:5e:07:ce:e5:50:4c:0c:39:61:b7:6d:
         9c:66:5e:0e:22:4b:32:f6:09:40:a7:5a:e7:44:e1:08:51:c4:
         eb:b9:af:d5:92:df:a7:e4:87:31:5d:87:79:6c:a9:2f:56:d8:
         67:11:bd:cc:be:50:2e:30:11:4a:3e:c3:39:9c:1d:91:5e:8e:
         fb:fb:45:5a:5d:80:1c:16:41:ff:52:29:27:e6:86:34:30:eb:
         3e:e5:5a:ff:2a:52:ce:a0:46:2d:d1:fa:f9:f1:51:53:e5:e2:
         05:3a:07:ba:f9:a1:e5:c3:a5:62:6d:ac:b3:2c:c5:be:fb:2a:
         75:85:5a:dc:4f:14:8c:d3:4b:ac:30:78:c4:c6:9f:68:5d:e4:
         75:50:30:22:31:6f:47:e7:aa:24:21:83:42:5c:05:b7:1d:46:
         c5:5d:3e:ac:b6:d8:1a:d0:a5:b7:6e:83:83:18:68:6b:a5:54:
         f7:16:8d:09:1b:3f:2e:9f:38:58:07:8c:15:ef:23:16:77:82:
         bc:75:ab:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQRIsjIp6fchxezl6A0Oat4Nrk2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I1QkJDRTdGOEYyOEM0MUJGQzMwN0I4NDMwQTU2QTE2
QzY3RTgwMDAeFw0yNTAzMTMxNTA1NDVaFw0yNjAzMTIxNTEwNDVaMDMxMTAvBgNV
BAMTKEExMTgyQUYwRjdEQjlFNkFCQTIxOTNDOTk2QTRGRjQxREVGRDRFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH5g+XlRMU8FoZagi9pIPoeem
CGr9MPMtTfJ3nc1kd2SMfA0C8z3H82zUe6BZJYtf3EtJAtXV9DqJVe8CcHnELuVF
JyMVr0iLXMp9qyugr0tg+pAXGoo2Mggm54gumoDgd5xAVVHlPH3KSbN+7c7Jr4dV
zt2UjO4d033iBPdeUEQ0Ptad+akGUdG/hq1e6krzGROVyPRfWv32kTK1VGNh7qvL
rfCtk4QEvHniqk2sGIGRkGFF8oURL3QtsMnvl4MqVfHDZsqa+FqP59JAjMC1aH0N
PyyIrL4Y01M/bxtI6fqPPtr2LOsij+AM8guQo1Pmxz6SDzBbpZAn1JFdUAOFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoRgq8Pfbnmq6IZPJlqT/Qd79TrowHwYDVR0j
BBgwFoAUO1u85/jyjEG/wwe4QwpWoWxn6AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC8zQjVCQkNFN0Y4RjI4QzQxQkZDMzA3Qjg0MzBBNTZBMTZDNjdFODAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNUJCQ0U3RjhGMjhDNDFC
RkMzMDdCODQzMEE1NkExNkM2N0U4MDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzIzODMwMzQzYTM3NjMzNDMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBHxAATANBgkqhkiG9w0BAQsFAAOC
AQEAOm52LvuhUKRhSk5erYhxO43NhJSDs3W3vg1UicdR40ub90g7nxCweXICEQTy
VeOqOq3NlpSEm+ivKM2zPF4HzuVQTAw5YbdtnGZeDiJLMvYJQKda50ThCFHE67mv
1ZLfp+SHMV2HeWypL1bYZxG9zL5QLjARSj7DOZwdkV6O+/tFWl2AHBZB/1IpJ+aG
NDDrPuVa/ypSzqBGLdH6+fFRU+XiBToHuvmh5cOlYm2ssyzFvvsqdYVa3E8UjNNL
rDB4xMafaF3kdVAwIjFvR+eqJCGDQlwFtx1GxV0+rLbYGtClt26Dgxhoa6VU9xaN
CRs/Lp84WAeMFe8jFneCvHWr8w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:10 2025 by rpki-client