Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa
File:                     323830343a323836383a3a2f33332d3333203d3e20323633393631.roa (raw, json)
Hash identifier:          kB9j149Y0LjOJjhFwmotkBg62v/KiHwLE8+Raljt0lA=
Subject key identifier:   26:4D:75:2F:1B:F4:FC:9F:A2:E6:35:73:D4:77:A6:FA:FA:0D:9B:85
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       15CF6C91DE2BDBE89822D08CCCA4432EFCCC4A39
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa
Signing time:             Thu 06 Mar 2025 01:28:08 +0000
ROA not before:           Thu 06 Mar 2025 01:23:08 +0000
ROA not after:            Thu 05 Mar 2026 01:28:08 +0000
asID:                     263961
IP address blocks:        2804:2868::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:6c:91:de:2b:db:e8:98:22:d0:8c:cc:a4:43:2e:fc:cc:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Mar  6 01:23:08 2025 GMT
            Not After : Mar  5 01:28:08 2026 GMT
        Subject: CN=264D752F1BF4FC9FA2E63573D477A6FAFA0D9B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:0b:48:b2:9c:91:10:7f:60:26:4a:6f:87:
                    1e:5b:35:6c:29:94:fb:85:84:8d:80:94:df:a8:d6:
                    9d:8c:83:0c:44:04:e6:bb:72:e8:a8:49:03:bc:75:
                    5d:cb:8a:9c:46:5e:c9:d7:e6:ef:9b:07:0b:3b:3c:
                    b6:e8:18:39:b9:7b:fa:4b:0b:2c:62:5d:0e:15:ce:
                    53:e0:8e:3d:a6:c2:cd:30:05:12:91:27:3f:7d:e1:
                    6c:cf:5d:20:3d:1d:28:70:c9:15:ab:0a:91:40:73:
                    8b:a1:49:e4:cd:21:03:94:93:48:f3:68:13:74:d5:
                    6d:e8:92:37:8d:5c:2f:f2:81:07:3c:6b:90:f6:ea:
                    dd:bf:ad:70:c1:6c:15:2c:cf:b0:ab:35:7d:8b:73:
                    7d:03:3e:52:07:56:74:88:12:1b:57:e3:54:14:10:
                    a6:fb:52:f0:e9:e0:08:6a:a0:f1:85:f0:28:5c:2c:
                    b3:99:d0:3a:cc:2a:78:39:8f:5d:94:6e:fe:4b:44:
                    24:84:6f:33:56:8d:ed:c8:9a:d7:a0:52:90:98:ea:
                    f0:21:ba:0a:ba:a3:30:e5:f3:bb:41:8b:0e:5b:2d:
                    9b:4b:eb:0f:0b:83:c0:29:ac:64:3b:de:6f:e4:53:
                    78:ed:85:a7:97:04:a8:ee:93:9d:aa:64:aa:59:ec:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:75:2F:1B:F4:FC:9F:A2:E6:35:73:D4:77:A6:FA:FA:0D:9B:85
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:e9:67:d5:f8:71:e9:1e:4c:c3:f8:c6:eb:6d:ae:b2:8c:83:
         c3:15:f3:fa:b0:a2:6c:6a:39:06:07:f2:30:ac:41:e9:7b:8c:
         29:54:1b:18:c2:f4:55:b1:c1:2b:8b:28:8a:82:9e:6b:f1:20:
         6d:b6:98:45:f2:68:94:98:c1:47:c6:fe:ff:e2:65:5c:1a:9d:
         b3:18:89:88:96:f3:a3:05:a2:fa:62:fd:0c:8a:d6:08:e7:bc:
         fd:06:31:d4:c3:70:c1:6d:7c:18:9c:af:67:0c:2b:f6:dd:7a:
         6a:55:48:8d:d9:30:5d:4c:d6:d9:fd:43:b2:0f:3c:21:79:c5:
         e8:84:b6:74:28:4d:c0:1e:a9:e6:cc:98:3a:44:33:78:3e:84:
         8a:8f:6c:0e:d0:ed:78:93:12:f2:c6:0e:f6:d0:ef:d1:cb:1f:
         ab:c3:92:67:e1:47:60:d6:31:1a:f0:18:f9:de:d6:15:64:93:
         19:ce:27:d5:ce:3c:06:4c:cd:de:5a:62:f6:6b:69:17:96:f6:
         3f:7b:b9:ca:e0:55:3f:35:6c:0a:f0:64:1e:6a:17:53:d9:a9:
         cf:68:5e:aa:40:77:99:26:ff:00:6b:d7:d6:c9:55:ac:45:92:
         0f:49:b4:97:31:c2:f9:66:ec:f8:fd:ab:37:5e:dd:93:52:38:
         c6:ea:8f:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFc9skd4r2+iYItCMzKRDLvzMSjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOTQ5MkI2MjI3RUFCQjc3MjZBNUEwNjRCRUJFMDRF
NTNDODI0QTAeFw0yNTAzMDYwMTIzMDhaFw0yNjAzMDUwMTI4MDhaMDMxMTAvBgNV
BAMTKDI2NEQ3NTJGMUJGNEZDOUZBMkU2MzU3M0Q0NzdBNkZBRkEwRDlCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOAtIspyREH9gJkpvhx5bNWwp
lPuFhI2AlN+o1p2MgwxEBOa7cuioSQO8dV3LipxGXsnX5u+bBws7PLboGDm5e/pL
CyxiXQ4VzlPgjj2mws0wBRKRJz994WzPXSA9HShwyRWrCpFAc4uhSeTNIQOUk0jz
aBN01W3okjeNXC/ygQc8a5D26t2/rXDBbBUsz7CrNX2Lc30DPlIHVnSIEhtX41QU
EKb7UvDp4AhqoPGF8ChcLLOZ0DrMKng5j12Ubv5LRCSEbzNWje3ImtegUpCY6vAh
ugq6ozDl87tBiw5bLZtL6w8Lg8AprGQ73m/kU3jthaeXBKjuk52qZKpZ7FJHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJk11Lxv0/J+i5jVz1Hem+voNm4UwHwYDVR0j
BBgwFoAUCDlJK2In6rt3JqWgZL6+BOU8gkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMS8wODM5NDkyQjYyMjdFQUJCNzcyNkE1QTA2NEJFQkUwNEU1M0M4MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Mzk0OTJCNjIyN0VBQkI3
NzI2QTVBMDY0QkVCRTA0RTUzQzgyNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzEv
MzIzODMwMzQzYTMyMzgzNjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzkzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQoaAAwDQYJKoZIhvcNAQELBQADggEBAK7pZ9X4
cekeTMP4xuttrrKMg8MV8/qwomxqOQYH8jCsQel7jClUGxjC9FWxwSuLKIqCnmvx
IG22mEXyaJSYwUfG/v/iZVwanbMYiYiW86MFovpi/QyK1gjnvP0GMdTDcMFtfBic
r2cMK/bdempVSI3ZMF1M1tn9Q7IPPCF5xeiEtnQoTcAeqebMmDpEM3g+hIqPbA7Q
7XiTEvLGDvbQ79HLH6vDkmfhR2DWMRrwGPne1hVkkxnOJ9XOPAZMzd5aYvZraReW
9j97ucrgVT81bArwZB5qF1PZqc9oXqpAd5km/wBr19bJVaxFkg9JtJcxwvlm7Pj9
qzde3ZNSOMbqj14=
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:04:38 2025 by rpki-client