Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
File:                     323830343a333036383a3a2f33322d3336203d3e20323634393439.roa (raw, json)
Hash identifier:          rc7WhBWSLFTj3DHYplINutFAN5RcHqwSHfA0QkL77BI=
Subject key identifier:   B4:4E:E4:50:4A:DE:B2:8A:A4:5B:70:0F:48:F8:AF:C5:E2:22:36:80
Certificate issuer:       /CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
Certificate serial:       574944D9D6F94A28899D8AC75185875AB7591DF3
Authority key identifier: E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa
Signing time:             Thu 06 Mar 2025 04:54:48 +0000
ROA not before:           Thu 06 Mar 2025 04:49:48 +0000
ROA not after:            Thu 05 Mar 2026 04:54:48 +0000
asID:                     264949
IP address blocks:        2804:3068::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl
                          rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:49:44:d9:d6:f9:4a:28:89:9d:8a:c7:51:85:87:5a:b7:59:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A
        Validity
            Not Before: Mar  6 04:49:48 2025 GMT
            Not After : Mar  5 04:54:48 2026 GMT
        Subject: CN=B44EE4504ADEB28AA45B700F48F8AFC5E2223680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:02:e0:ac:18:4d:10:b2:51:4a:3e:b2:ff:
                    e6:fe:a0:c7:89:0d:d1:43:ac:8a:cd:ae:47:8d:c0:
                    2a:4f:90:6e:95:3b:57:f3:74:ef:53:ed:6f:b1:cb:
                    d9:12:73:ae:77:4b:97:98:a1:06:68:ae:29:cb:b7:
                    d4:f5:68:f0:16:05:8f:dc:96:b8:fb:d6:c3:ba:fc:
                    50:e3:eb:ed:6b:27:20:7c:38:09:19:56:0c:26:89:
                    2e:be:50:8a:62:d6:a4:76:17:f7:2d:0d:6d:3a:65:
                    8e:d0:10:e5:8d:f6:b4:20:c1:3b:9b:dc:e8:dc:f7:
                    b6:ef:5e:9d:1b:d1:9c:5b:4e:d1:6d:92:b1:1b:47:
                    9d:20:f9:e6:c4:14:3d:4a:1b:50:7f:58:91:5e:5a:
                    f9:fc:c7:a0:f1:82:0d:05:c6:d6:3b:1b:ee:84:c0:
                    1b:58:33:77:04:36:96:18:c0:e2:37:fb:a5:d5:e1:
                    ba:e8:54:c4:f2:a6:0e:1c:a6:ef:ae:1d:6c:6c:97:
                    74:65:a4:46:c2:b5:d3:2d:a7:d0:d4:9e:3d:17:ef:
                    0f:ed:d0:d9:da:8c:12:77:d5:4f:90:95:1e:7d:f9:
                    c1:28:13:20:d4:34:ad:ab:39:cf:51:66:05:be:4a:
                    a8:46:56:67:38:d9:b4:33:ba:5e:da:83:fd:79:d1:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:E4:50:4A:DE:B2:8A:A4:5B:70:0F:48:F8:AF:C5:E2:22:36:80
            X509v3 Authority Key Identifier:
                keyid:E1:BB:E6:FD:C4:4B:2F:AC:C0:E2:B5:85:5F:12:83:C7:96:68:0A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBE6FDC44B2FACC0E2B5855F1283C796680A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/1/323830343a333036383a3a2f33322d3336203d3e20323634393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3068::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:b9:4f:52:91:9c:72:5d:5f:78:66:76:32:fd:1d:29:df:
         b5:08:e3:f3:95:82:0d:8d:c5:d4:56:66:3d:66:51:df:b3:cd:
         4c:5f:42:b4:36:77:27:99:70:10:7e:39:2d:ef:eb:73:39:f7:
         69:62:37:ff:a1:60:3b:bf:64:30:d3:93:bf:08:ea:16:bc:b7:
         9a:8e:db:e2:dc:1b:ae:3a:09:f6:0a:b2:d3:50:d9:5f:65:16:
         2b:b4:0f:1b:b9:64:83:a2:36:28:d4:2d:6f:63:15:50:1d:d1:
         2a:25:47:78:63:ea:ce:3a:b1:84:ee:bd:18:c8:be:ef:93:31:
         dd:e2:44:77:51:7c:2f:ca:67:f9:51:4a:18:93:eb:fb:af:87:
         00:3d:dc:6e:3f:26:44:35:9b:a4:66:44:38:b1:43:11:da:cb:
         f2:29:6f:5e:4d:fa:2a:a8:1c:48:94:57:17:77:2f:26:43:8e:
         65:7b:99:28:f9:b3:b6:8a:9f:b2:12:bf:fa:d6:92:5e:5c:7d:
         e4:14:0b:cd:79:13:ad:58:e6:01:ce:f1:92:a1:ee:cf:70:61:
         16:70:03:a8:63:f3:e8:b0:57:2f:88:b7:75:39:0a:25:84:ef:
         73:fa:dd:35:4e:15:7b:8a:24:96:bb:16:64:43:51:0e:9f:fa:
         93:2f:26:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV0lE2db5SiiJnYrHUYWHWrdZHfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQkU2RkRDNDRCMkZBQ0MwRTJCNTg1NUYxMjgzQzc5
NjY4MEE4QTAeFw0yNTAzMDYwNDQ5NDhaFw0yNjAzMDUwNDU0NDhaMDMxMTAvBgNV
BAMTKEI0NEVFNDUwNEFERUIyOEFBNDVCNzAwRjQ4RjhBRkM1RTIyMjM2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkQLgrBhNELJRSj6y/+b+oMeJ
DdFDrIrNrkeNwCpPkG6VO1fzdO9T7W+xy9kSc653S5eYoQZorinLt9T1aPAWBY/c
lrj71sO6/FDj6+1rJyB8OAkZVgwmiS6+UIpi1qR2F/ctDW06ZY7QEOWN9rQgwTub
3Ojc97bvXp0b0ZxbTtFtkrEbR50g+ebEFD1KG1B/WJFeWvn8x6Dxgg0FxtY7G+6E
wBtYM3cENpYYwOI3+6XV4broVMTypg4cpu+uHWxsl3RlpEbCtdMtp9DUnj0X7w/t
0NnajBJ31U+QlR59+cEoEyDUNK2rOc9RZgW+SqhGVmc42bQzul7ag/150du9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtE7kUEresoqkW3APSPivxeIiNoAwHwYDVR0j
BBgwFoAU4bvm/cRLL6zA4rWFXxKDx5ZoCoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUZTenFWTU1aU0t3R0RiRnl6ekNxd25TNUsxdnF6MVJLREIzOWFISmVV
YzUvMS9FMUJCRTZGREM0NEIyRkFDQzBFMkI1ODU1RjEyODNDNzk2NjgwQThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkJFNkZEQzQ0QjJGQUND
MEUyQjU4NTVGMTI4M0M3OTY2ODBBOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVGU3pxVk1NWlNLd0dEYkZ5enpDcXduUzVLMXZxejFSS0RCMzlhSEplVWM1LzEv
MzIzODMwMzQzYTMzMzAzNjM4M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM0
MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwaDANBgkqhkiG9w0BAQsFAAOCAQEADFa5T1KR
nHJdX3hmdjL9HSnftQjj85WCDY3F1FZmPWZR37PNTF9CtDZ3J5lwEH45Le/rczn3
aWI3/6FgO79kMNOTvwjqFry3mo7b4twbrjoJ9gqy01DZX2UWK7QPG7lkg6I2KNQt
b2MVUB3RKiVHeGPqzjqxhO69GMi+75Mx3eJEd1F8L8pn+VFKGJPr+6+HAD3cbj8m
RDWbpGZEOLFDEdrL8ilvXk36KqgcSJRXF3cvJkOOZXuZKPmztoqfshK/+taSXlx9
5BQLzXkTrVjmAc7xkqHuz3BhFnADqGPz6LBXL4i3dTkKJYTvc/rdNU4Ve4oklrsW
ZENRDp/6ky8mhw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:47:48 2025 by rpki-client