Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa
File:                     323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa (raw, json)
Hash identifier:          pGz8XAHYcZTzzr3n8+FVs09rvdX5ZoM9EEEUBIZvs50=
Subject key identifier:   2B:38:D3:40:0A:A1:C3:45:41:12:A5:E3:5B:4C:7B:40:3B:7C:F1:EA
Certificate issuer:       /CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
Certificate serial:       78F365CCAB7094B5906020D088DCBE670563E759
Authority key identifier: A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa
Signing time:             Thu 06 Mar 2025 04:33:07 +0000
ROA not before:           Thu 06 Mar 2025 04:28:07 +0000
ROA not after:            Thu 05 Mar 2026 04:33:07 +0000
asID:                     266968
IP address blocks:        2804:4618:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl
                          rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:65:cc:ab:70:94:b5:90:60:20:d0:88:dc:be:67:05:63:e7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4
        Validity
            Not Before: Mar  6 04:28:07 2025 GMT
            Not After : Mar  5 04:33:07 2026 GMT
        Subject: CN=2B38D3400AA1C3454112A5E35B4C7B403B7CF1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:08:43:a4:3c:8d:5c:0b:6c:68:a1:91:e0:
                    92:59:55:bc:08:84:24:f8:64:48:49:a1:66:d2:0f:
                    2d:a6:aa:f1:80:75:14:b5:89:98:33:b5:cf:87:55:
                    34:46:26:ba:53:a8:21:ec:b5:03:66:cd:70:4b:81:
                    17:ff:74:14:56:4b:18:9b:22:8c:e4:66:43:d8:8d:
                    54:dc:d2:0c:eb:8f:ef:71:ef:46:63:c2:27:81:fc:
                    7b:84:17:8e:c3:82:8b:4e:47:0a:0e:ed:bd:dc:7b:
                    0b:a0:e1:bb:e1:8a:06:8f:87:21:f6:ee:26:5b:7b:
                    ae:a7:b6:4c:0f:9e:d8:ad:c2:75:d9:5b:03:54:fa:
                    f9:3b:e1:6a:1b:fb:6b:30:f6:cb:60:cd:92:43:fa:
                    02:ac:e3:78:16:03:da:f0:e6:50:eb:35:13:5a:14:
                    66:45:16:92:f2:ba:da:24:37:bd:87:ef:a6:22:a3:
                    f1:eb:46:f3:fe:c1:f6:d9:da:83:71:9f:8c:42:65:
                    da:98:7d:f0:62:0f:98:c8:97:b8:77:3f:4f:aa:ff:
                    95:77:47:d6:c7:76:fe:0e:70:43:9b:af:43:16:9a:
                    f1:27:71:7d:3a:88:73:dd:09:78:b7:47:d2:64:66:
                    72:c2:91:56:af:a7:a4:c7:9a:f1:49:e1:de:e0:2d:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:D3:40:0A:A1:C3:45:41:12:A5:E3:5B:4C:7B:40:3B:7C:F1:EA
            X509v3 Authority Key Identifier:
                keyid:A6:53:12:DF:E9:3D:F2:E9:A1:10:9A:17:CD:E8:A7:C0:7F:71:F2:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A65312DFE93DF2E9A1109A17CDE8A7C07F71F2B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/1/323830343a343631383a323130303a3a2f34302d3430203d3e20323636393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4618:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:7a:85:7f:9c:28:21:d7:48:c9:f1:ad:f7:be:38:4b:19:
         6b:b2:1b:95:19:a7:51:0b:12:2b:6d:1c:b0:7f:2c:d9:bc:37:
         5d:1b:35:25:96:72:3a:53:32:5d:c4:bc:7b:13:cf:41:08:a0:
         5b:a2:58:05:bc:06:27:77:b7:37:ed:70:df:1d:85:cc:e3:d0:
         7b:b6:8a:68:6e:b8:1d:5a:42:76:68:cb:03:89:a7:a5:a5:1e:
         66:05:51:28:2c:08:11:8f:46:00:96:c5:b1:69:76:00:77:74:
         af:ee:de:a3:9e:ff:ee:99:12:bc:05:6b:ea:a9:d8:36:73:85:
         33:67:41:24:ca:39:b6:e9:13:63:26:f3:89:b9:29:2a:9c:f7:
         10:c3:87:51:79:f8:c4:fa:7c:45:a6:fd:f6:68:cd:ef:0e:6a:
         68:f2:d9:c8:75:ad:88:6d:f3:dc:2a:d4:47:98:d8:20:b9:93:
         a5:34:0c:ba:19:3a:09:60:c7:56:53:4e:f5:61:7a:f6:13:33:
         ca:26:90:8f:8b:f3:c7:76:18:aa:7b:83:3d:89:8e:88:52:19:
         55:9f:77:7c:45:67:60:27:54:ad:c0:0e:11:69:88:31:49:4b:
         00:73:88:d4:79:60:d5:d5:09:a6:09:c5:f3:5d:2b:6a:58:64:
         06:5a:71:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUePNlzKtwlLWQYCDQiNy+ZwVj51kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1MzEyREZFOTNERjJFOUExMTA5QTE3Q0RFOEE3QzA3
RjcxRjJCNDAeFw0yNTAzMDYwNDI4MDdaFw0yNjAzMDUwNDMzMDdaMDMxMTAvBgNV
BAMTKDJCMzhEMzQwMEFBMUMzNDU0MTEyQTVFMzVCNEM3QjQwM0I3Q0YxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFAhDpDyNXAtsaKGR4JJZVbwI
hCT4ZEhJoWbSDy2mqvGAdRS1iZgztc+HVTRGJrpTqCHstQNmzXBLgRf/dBRWSxib
IozkZkPYjVTc0gzrj+9x70ZjwieB/HuEF47DgotORwoO7b3cewug4bvhigaPhyH2
7iZbe66ntkwPntitwnXZWwNU+vk74Wob+2sw9stgzZJD+gKs43gWA9rw5lDrNRNa
FGZFFpLyutokN72H76Yio/HrRvP+wfbZ2oNxn4xCZdqYffBiD5jIl7h3P0+q/5V3
R9bHdv4OcEObr0MWmvEncX06iHPdCXi3R9JkZnLCkVavp6THmvFJ4d7gLbsDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKzjTQAqhw0VBEqXjW0x7QDt88eowHwYDVR0j
BBgwFoAUplMS3+k98umhEJoXzeinwH9x8rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRXUzh6NTZTb2R5TlZyQlI1WHFWQ0dINFdXaEdod3ZZR2dUQjlFZkRp
NXIvMS9BNjUzMTJERkU5M0RGMkU5QTExMDlBMTdDREU4QTdDMDdGNzFGMkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTMxMkRGRTkzREYyRTlB
MTEwOUExN0NERThBN0MwN0Y3MUYyQjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0V1M4ejU2U29keU5WckJSNVhxVkNHSDRXV2hHaHd2WUdnVEI5RWZEaTVyLzEv
MzIzODMwMzQzYTM0MzYzMTM4M2EzMjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjM5MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgERhghMA0GCSqGSIb3DQEBCwUA
A4IBAQB3+3qFf5woIddIyfGt9744SxlrshuVGadRCxIrbRywfyzZvDddGzUllnI6
UzJdxLx7E89BCKBbolgFvAYnd7c37XDfHYXM49B7topobrgdWkJ2aMsDiaelpR5m
BVEoLAgRj0YAlsWxaXYAd3Sv7t6jnv/umRK8BWvqqdg2c4UzZ0Ekyjm26RNjJvOJ
uSkqnPcQw4dRefjE+nxFpv32aM3vDmpo8tnIda2IbfPcKtRHmNgguZOlNAy6GToJ
YMdWU071YXr2EzPKJpCPi/PHdhiqe4M9iY6IUhlVn3d8RWdgJ1StwA4RaYgxSUsA
c4jUeWDV1QmmCcXzXStqWGQGWnE1
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:38:01 2025 by rpki-client