Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
File:                     323830343a3933343a3a2f33322d3332203d3e20323633303539.roa (raw, json)
Hash identifier:          SRBV6mpYR0ZUyZNWkeQD+6aiv1q41fakqXb4jpQq9VA=
Subject key identifier:   F6:0D:40:11:81:C7:05:96:1E:A2:01:E3:FD:26:48:87:F3:76:98:96
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       51C185B92EB949CE287F6383D361F2B00D86FFD8
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:08 +0000
ROA not before:           Thu 13 Feb 2025 20:45:08 +0000
ROA not after:            Thu 12 Feb 2026 20:50:08 +0000
asID:                     263059
IP address blocks:        2804:934::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c1:85:b9:2e:b9:49:ce:28:7f:63:83:d3:61:f2:b0:0d:86:ff:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:08 2025 GMT
            Not After : Feb 12 20:50:08 2026 GMT
        Subject: CN=F60D401181C705961EA201E3FD264887F3769896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:27:15:fd:3e:88:f0:e1:67:76:03:d1:02:
                    60:d8:63:69:41:56:1a:ff:b1:95:4e:81:20:26:5f:
                    f7:90:1b:41:5d:2e:d9:41:98:9b:a7:20:93:7c:d9:
                    a6:6a:41:4d:9f:db:a9:a0:ca:2a:bf:7a:92:9e:16:
                    51:c5:51:e4:f2:ca:21:57:2e:f7:d4:3f:0a:60:68:
                    bc:5e:10:e5:15:13:fd:76:a2:5e:ca:a9:33:c8:68:
                    c6:55:e8:a1:53:97:00:1a:83:ee:76:db:e4:61:a2:
                    4a:a8:3c:17:44:89:ab:de:9c:c6:bd:3f:ec:b4:63:
                    95:92:48:86:a1:b6:35:f9:b3:f8:19:34:bf:0f:1d:
                    89:95:69:7c:c0:58:da:49:8c:53:90:10:99:e9:6d:
                    49:4c:0f:9e:b9:01:33:39:58:fc:ae:86:25:b4:94:
                    7d:7f:d1:7a:98:ed:53:39:3e:cb:07:07:11:e3:49:
                    1e:6a:a7:87:19:55:68:fb:bf:9b:d8:91:85:97:62:
                    0c:94:91:e0:ac:fd:1c:fb:07:16:75:8b:a9:df:f2:
                    2a:ca:1c:ce:a5:a2:56:ba:3d:91:bc:1b:63:cc:1a:
                    f3:a3:7e:d4:48:b7:47:e6:1a:04:e0:be:bd:1a:23:
                    84:61:a8:71:08:61:46:a1:12:31:0f:db:6e:1b:38:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:40:11:81:C7:05:96:1E:A2:01:E3:FD:26:48:87:F3:76:98:96
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:1e:d9:f7:58:cd:f6:38:b1:83:f2:64:cc:e4:85:b8:65:
         bc:36:f3:ec:71:e1:3e:b7:a1:14:c0:2f:82:f8:d8:1a:6e:74:
         67:22:7e:61:8f:e5:71:35:bb:21:c0:94:54:79:a2:ab:cc:40:
         84:54:8a:8f:35:bb:ab:c2:80:69:a5:a8:5b:ef:57:fb:9f:4c:
         42:88:45:b4:68:7f:cf:7e:13:6f:8a:71:25:c7:8b:63:d1:e0:
         fc:b4:6b:04:fe:ec:19:95:1b:b4:10:46:5f:35:bb:ea:ee:cc:
         c5:a5:63:24:f5:19:18:94:6e:7e:74:74:3c:fe:0f:fb:1c:84:
         4e:02:bb:5c:40:89:26:1e:ff:49:90:b7:36:57:d1:05:c9:23:
         af:8a:72:2f:c8:6e:e3:36:fc:ab:d6:a7:cf:bc:25:f5:f7:34:
         e2:c5:5e:5c:3a:96:d6:4f:10:fa:da:a5:f0:ae:ad:82:15:23:
         4c:5a:ba:61:35:66:10:35:08:ec:79:eb:62:c7:f9:bc:0b:99:
         f9:0f:90:f6:9c:68:40:c3:c3:1c:2a:83:a2:8a:49:28:a1:d2:
         0a:44:a1:d9:8f:77:48:74:49:2e:6e:b9:fa:04:47:7b:2c:bb:
         d4:dc:d6:cc:35:31:0e:b8:1b:e6:35:6e:41:50:67:94:eb:92:
         19:dd:64:84
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUcGFuS65Sc4of2OD02HysA2G/9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFQkNFMkRCRDYyNTE1MzM3QzlBQzJEMjVGNDE3MDAw
RTFCNTNFMDAeFw0yNTAyMTMyMDQ1MDhaFw0yNjAyMTIyMDUwMDhaMDMxMTAvBgNV
BAMTKEY2MEQ0MDExODFDNzA1OTYxRUEyMDFFM0ZEMjY0ODg3RjM3Njk4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMScV/T6I8OFndgPRAmDYY2lB
Vhr/sZVOgSAmX/eQG0FdLtlBmJunIJN82aZqQU2f26mgyiq/epKeFlHFUeTyyiFX
LvfUPwpgaLxeEOUVE/12ol7KqTPIaMZV6KFTlwAag+522+RhokqoPBdEiavenMa9
P+y0Y5WSSIahtjX5s/gZNL8PHYmVaXzAWNpJjFOQEJnpbUlMD565ATM5WPyuhiW0
lH1/0XqY7VM5PssHBxHjSR5qp4cZVWj7v5vYkYWXYgyUkeCs/Rz7BxZ1i6nf8irK
HM6lola6PZG8G2PMGvOjftRIt0fmGgTgvr0aI4RhqHEIYUahEjEP224bODaFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9g1AEYHHBZYeogHj/SZIh/N2mJYwHwYDVR0j
BBgwFoAUYuvOLb1iUVM3yawtJfQXAA4bU+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MkVCQ0UyREJENjI1MTUzMzdDOUFDMkQyNUY0MTcwMDBFMUI1M0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRUJDRTJEQkQ2MjUxNTMz
N0M5QUMyRDI1RjQxNzAwMEUxQjUzRTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECTQwDQYJKoZIhvcNAQELBQADggEBAJwQHtn3WM32
OLGD8mTM5IW4Zbw28+xx4T63oRTAL4L42BpudGcifmGP5XE1uyHAlFR5oqvMQIRU
io81u6vCgGmlqFvvV/ufTEKIRbRof89+E2+KcSXHi2PR4Py0awT+7BmVG7QQRl81
u+ruzMWlYyT1GRiUbn50dDz+D/schE4Cu1xAiSYe/0mQtzZX0QXJI6+Kci/IbuM2
/KvWp8+8JfX3NOLFXlw6ltZPEPrapfCurYIVI0xaumE1ZhA1COx562LH+bwLmfkP
kPacaEDDwxwqg6KKSSih0gpEodmPd0h0SS5uufoER3ssu9Tc1sw1MQ64G+Y1bkFQ
Z5TrkhndZIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:58:59 2025 by rpki-client