Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa
File:                     323830343a3332383a3a2f33322d3332203d3e20323632383638.roa (raw, json)
Hash identifier:          JRwnh8uMYPfaKFwUX2B0V6/LwgUnppsyO1e5M3CYVy0=
Subject key identifier:   07:4D:EF:54:2A:92:DE:67:00:C2:C5:3D:BD:6F:15:3C:A8:A2:DD:B6
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       77C6E20F759C7310FA63120497FBDE4C7E0DB48B
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa
Signing time:             Thu 06 Mar 2025 11:39:07 +0000
ROA not before:           Thu 06 Mar 2025 11:34:07 +0000
ROA not after:            Thu 05 Mar 2026 11:39:07 +0000
asID:                     262868
IP address blocks:        2804:328::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c6:e2:0f:75:9c:73:10:fa:63:12:04:97:fb:de:4c:7e:0d:b4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Mar  6 11:34:07 2025 GMT
            Not After : Mar  5 11:39:07 2026 GMT
        Subject: CN=074DEF542A92DE6700C2C53DBD6F153CA8A2DDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:42:07:2f:ef:db:46:f7:2c:d9:ae:4d:77:
                    4a:a8:6a:08:05:89:6b:80:82:03:15:d0:6f:34:44:
                    a2:e0:9d:ca:f8:85:46:0a:c4:9f:4d:90:0a:0d:7d:
                    12:e1:c9:bd:8a:c2:b3:75:39:09:c9:d8:bc:14:37:
                    87:f0:0a:d4:ea:36:e0:b4:9b:6a:e7:a8:45:88:48:
                    03:c7:42:1a:41:89:60:05:88:ad:c3:55:49:fe:54:
                    96:71:7b:04:39:c7:49:81:ce:d5:88:67:2d:37:5e:
                    9f:a4:ed:32:fd:01:bb:32:f7:81:64:04:b7:2b:c6:
                    b9:31:98:20:6e:61:0e:3c:64:99:59:aa:ec:73:75:
                    b3:5f:11:52:21:6a:ce:3d:96:37:96:0f:49:a6:1c:
                    ba:8c:89:1f:eb:f3:6b:2e:4c:53:76:f5:d1:32:64:
                    97:dc:fa:48:4f:cd:eb:e0:f3:e5:b9:ed:92:3e:3f:
                    b6:6d:be:4c:1b:1d:53:5d:e3:a3:34:ce:3b:17:26:
                    db:e2:9c:cf:1f:28:79:cc:0b:38:01:3e:b6:95:26:
                    0e:fe:74:f1:ff:d9:d3:95:73:d3:ee:43:21:c0:09:
                    5f:dc:84:66:a8:d0:13:d6:44:b9:5a:38:d8:b3:66:
                    bf:c5:ed:97:c3:1e:3d:c5:74:ba:7f:11:d7:6e:ba:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:EF:54:2A:92:DE:67:00:C2:C5:3D:BD:6F:15:3C:A8:A2:DD:B6
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a3a2f33322d3332203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:19:06:1e:18:bd:ad:69:3b:e0:7a:09:5a:7a:8e:49:4d:
         63:16:b3:20:e8:a1:81:be:14:da:eb:6d:7f:10:e4:85:73:8e:
         64:f9:a5:85:db:16:1e:c0:a7:11:e4:70:b1:bc:5e:e9:76:28:
         59:22:99:ee:a0:9c:df:65:ee:e2:c4:cb:ac:45:20:aa:aa:ee:
         43:d9:91:b3:f4:94:ce:ec:dd:d3:91:cd:dd:94:3f:72:18:65:
         0d:5a:34:56:a2:dc:6d:13:5a:d1:76:68:d9:e6:85:16:ad:87:
         95:00:04:86:83:dd:d6:82:fb:19:46:1c:32:5b:72:2e:6c:cd:
         70:b0:27:e1:f7:32:6d:02:09:00:72:96:37:73:c9:39:ca:28:
         e7:52:1e:bc:d0:09:bd:02:b7:30:25:4f:14:05:ce:63:61:48:
         86:90:39:57:57:7e:0e:74:b8:6d:9d:45:3f:e6:60:20:ef:3a:
         fa:c5:2c:43:41:ab:82:08:e2:93:b4:45:c2:0b:38:a3:1a:b5:
         b7:24:b5:87:d1:8b:6f:8e:ce:6e:35:84:d2:3d:ec:13:69:ba:
         89:da:fe:5c:48:d5:f5:fa:b2:71:a6:27:ae:7d:75:83:03:50:
         ac:48:b1:46:a5:a0:01:4a:94:7a:37:42:7e:17:23:2c:4a:b2:
         0d:6b:1b:e6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUd8biD3WccxD6YxIEl/veTH4NtIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNTAzMDYxMTM0MDdaFw0yNjAzMDUxMTM5MDdaMDMxMTAvBgNV
BAMTKDA3NERFRjU0MkE5MkRFNjcwMEMyQzUzREJENkYxNTNDQThBMkREQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2f0IHL+/bRvcs2a5Nd0qoaggF
iWuAggMV0G80RKLgncr4hUYKxJ9NkAoNfRLhyb2KwrN1OQnJ2LwUN4fwCtTqNuC0
m2rnqEWISAPHQhpBiWAFiK3DVUn+VJZxewQ5x0mBztWIZy03Xp+k7TL9Absy94Fk
BLcrxrkxmCBuYQ48ZJlZquxzdbNfEVIhas49ljeWD0mmHLqMiR/r82suTFN29dEy
ZJfc+khPzevg8+W57ZI+P7ZtvkwbHVNd46M0zjsXJtvinM8fKHnMCzgBPraVJg7+
dPH/2dOVc9PuQyHACV/chGao0BPWRLlaONizZr/F7ZfDHj3FdLp/Edduun1pAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUB03vVCqS3mcAwsU9vW8VPKii3bYwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzIzODMwMzQzYTMzMzIzODNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM4
MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAygwDQYJKoZIhvcNAQELBQADggEBAAyPGQYeGL2t
aTvgeglaeo5JTWMWsyDooYG+FNrrbX8Q5IVzjmT5pYXbFh7ApxHkcLG8Xul2KFki
me6gnN9l7uLEy6xFIKqq7kPZkbP0lM7s3dORzd2UP3IYZQ1aNFai3G0TWtF2aNnm
hRath5UABIaD3daC+xlGHDJbci5szXCwJ+H3Mm0CCQByljdzyTnKKOdSHrzQCb0C
tzAlTxQFzmNhSIaQOVdXfg50uG2dRT/mYCDvOvrFLENBq4II4pO0RcILOKMatbck
tYfRi2+Ozm41hNI97BNpuona/lxI1fX6snGmJ659dYMDUKxIsUaloAFKlHo3Qn4X
IyxKsg1rG+Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:19:12 2025 by rpki-client