Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
File:                     323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier:          qtuspLtfhJGtziiKYXLGv6WvKggSArjQNxgrfgBMncc=
Subject key identifier:   E7:61:AE:A4:FE:A2:7C:67:96:5E:0B:64:63:1A:14:25:80:29:8D:6E
Certificate issuer:       /CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
Certificate serial:       2C346CE4BF06328569CB95EDB86AEAF7807AA8EE
Authority key identifier: F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa
Signing time:             Fri 14 Feb 2025 17:48:00 +0000
ROA not before:           Fri 14 Feb 2025 17:43:00 +0000
ROA not after:            Fri 13 Feb 2026 17:48:00 +0000
asID:                     273663
IP address blocks:        2804:8a58:aa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 14:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:34:6c:e4:bf:06:32:85:69:cb:95:ed:b8:6a:ea:f7:80:7a:a8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
        Validity
            Not Before: Feb 14 17:43:00 2025 GMT
            Not After : Feb 13 17:48:00 2026 GMT
        Subject: CN=E761AEA4FEA27C67965E0B64631A142580298D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:1e:1a:64:ac:e1:d1:12:18:a9:f6:8d:98:
                    2e:9e:a2:b8:3c:10:19:ab:8f:5f:dd:1a:3a:59:5c:
                    88:22:07:2a:9f:a1:0a:34:52:2b:cc:8f:4f:a4:29:
                    fb:33:07:36:3b:b8:dd:e8:a7:f8:89:92:c8:23:a8:
                    fa:18:48:ec:2b:41:2f:86:7c:09:02:0f:dd:30:2f:
                    a7:6e:b0:ea:e5:61:7d:ad:8d:4d:a5:24:99:33:f3:
                    61:c0:1e:c4:37:9f:fa:df:0d:07:59:68:72:4e:2a:
                    dd:df:65:77:ad:70:51:a4:29:74:0a:05:bb:b4:c6:
                    19:14:55:5a:73:0b:98:18:84:f1:0a:c2:47:43:c0:
                    39:a5:3d:04:5c:9b:f9:79:40:fe:f7:6e:bf:71:0c:
                    51:2e:f9:eb:e9:23:a0:aa:83:77:03:11:4c:75:72:
                    a4:38:e3:dd:12:ad:d8:29:db:1e:53:05:1e:08:60:
                    85:f9:f2:05:92:19:ff:9d:de:63:fe:a8:2a:2b:94:
                    18:ee:0e:94:96:38:75:c8:2a:d4:6f:f1:40:13:61:
                    2d:7b:4e:1c:45:7f:f6:55:21:9e:98:cd:da:ae:37:
                    58:0a:1a:f8:87:1a:cc:40:38:1e:1c:29:fd:6f:78:
                    08:5e:f3:0e:a6:5d:41:04:9a:b1:be:72:53:2f:fc:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:AE:A4:FE:A2:7C:67:96:5E:0B:64:63:1A:14:25:80:29:8D:6E
            X509v3 Authority Key Identifier:
                keyid:F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:05:c7:c9:2f:ea:09:e2:08:e3:5c:f7:f2:db:92:c7:f6:
         88:a5:d1:50:84:56:02:fe:95:8d:44:b1:9f:9a:57:af:e6:ff:
         40:49:65:21:0f:b2:80:47:0d:c8:83:cf:24:15:66:8f:6c:1a:
         b1:2b:75:ca:81:0d:ad:77:dd:a9:db:26:26:ff:3d:8d:32:fa:
         02:43:dc:4d:6e:93:9e:f9:4c:8f:e7:0a:90:03:bd:88:d2:41:
         89:56:83:59:b8:41:eb:2e:d2:3e:c8:28:ca:97:08:3f:68:23:
         7d:52:3d:5f:7b:23:6b:a3:5e:a4:ae:c1:f7:29:67:60:b4:56:
         35:13:50:ae:ac:0e:5f:6a:4a:ae:f4:9e:46:59:21:04:63:71:
         ee:e3:e2:f5:49:e5:ad:df:1e:fe:30:c4:e0:38:7b:0f:a2:0a:
         54:98:33:94:9c:60:db:6c:b0:63:7c:53:3a:e9:ae:e4:d8:9c:
         0b:52:5d:3d:ac:53:b8:77:08:23:13:18:27:3d:f8:b2:75:c5:
         9c:80:f1:25:0c:07:32:5b:b5:8a:09:dc:2e:17:05:d9:a3:e6:
         de:b4:2c:f5:b6:41:db:93:a5:76:c5:08:43:d6:2b:b0:4b:56:
         a8:a8:a0:66:39:27:bd:90:d9:86:a2:33:93:a5:84:3e:3d:f0:
         ef:f4:c0:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIULDRs5L8GMoVpy5XtuGrq94B6qO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUzNTA0OTA1QzdEQkI1MkY4RUE5MkQ5RTVEOUMyMjRD
NTJBQjhDQTAeFw0yNTAyMTQxNzQzMDBaFw0yNjAyMTMxNzQ4MDBaMDMxMTAvBgNV
BAMTKEU3NjFBRUE0RkVBMjdDNjc5NjVFMEI2NDYzMUExNDI1ODAyOThENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRR4aZKzh0RIYqfaNmC6eorg8
EBmrj1/dGjpZXIgiByqfoQo0UivMj0+kKfszBzY7uN3op/iJksgjqPoYSOwrQS+G
fAkCD90wL6dusOrlYX2tjU2lJJkz82HAHsQ3n/rfDQdZaHJOKt3fZXetcFGkKXQK
Bbu0xhkUVVpzC5gYhPEKwkdDwDmlPQRcm/l5QP73br9xDFEu+evpI6Cqg3cDEUx1
cqQ4490Srdgp2x5TBR4IYIX58gWSGf+d3mP+qCorlBjuDpSWOHXIKtRv8UATYS17
ThxFf/ZVIZ6YzdquN1gKGviHGsxAOB4cKf1veAhe8w6mXUEEmrG+clMv/LlJAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU52GupP6ifGeWXgtkYxoUJYApjW4wHwYDVR0j
BBgwFoAU9TUEkFx9u1L46pLZ5dnCJMUquMowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby82M3hKZjJONWltMjIycGFBRkhEajZkTjRXcjZLY3B5VXZ2d25xdFhxSnR6
LzAvRjUzNTA0OTA1QzdEQkI1MkY4RUE5MkQ5RTVEOUMyMjRDNTJBQjhDQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GNTM1MDQ5MDVDN0RCQjUyRjhF
QTkyRDlFNUQ5QzIyNEM1MkFCOENBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82
M3hKZjJONWltMjIycGFBRkhEajZkTjRXcjZLY3B5VXZ2d25xdFhxSnR6LzAvMzIz
ODMwMzQzYTM4NjEzNTM4M2E2MTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzczMzM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEiliqMA0GCSqGSIb3DQEBCwUAA4IB
AQBGagXHyS/qCeII41z38tuSx/aIpdFQhFYC/pWNRLGfmlev5v9ASWUhD7KARw3I
g88kFWaPbBqxK3XKgQ2td92p2yYm/z2NMvoCQ9xNbpOe+UyP5wqQA72I0kGJVoNZ
uEHrLtI+yCjKlwg/aCN9Uj1feyNro16krsH3KWdgtFY1E1CurA5fakqu9J5GWSEE
Y3Hu4+L1SeWt3x7+MMTgOHsPogpUmDOUnGDbbLBjfFM66a7k2JwLUl09rFO4dwgj
ExgnPfiydcWcgPElDAcyW7WKCdwuFwXZo+betCz1tkHbk6V2xQhD1iuwS1aoqKBm
OSe9kNmGojOTpYQ+PfDv9MBf
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:05 2025 by rpki-client