Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          +9e4wAP4sat2m74xq4oxGU/OrSvBT+6hv33IvBTsi1s=
Subject key identifier:   AE:AC:47:CA:56:4E:B0:EB:19:23:B7:02:D8:02:76:DD:01:1F:D1:2D
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       1BDA6A7C965F1DBD057365268CFD1BAF73461689
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:43 +0000
ROA not before:           Thu 13 Feb 2025 20:45:43 +0000
ROA not after:            Thu 12 Feb 2026 20:50:43 +0000
asID:                     263059
IP address blocks:        2804:934:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:da:6a:7c:96:5f:1d:bd:05:73:65:26:8c:fd:1b:af:73:46:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:43 2025 GMT
            Not After : Feb 12 20:50:43 2026 GMT
        Subject: CN=AEAC47CA564EB0EB1923B702D80276DD011FD12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:66:8a:2f:9c:e6:ef:d0:4c:c3:fc:78:9b:
                    cf:a5:74:9a:8f:f6:a2:49:a7:53:55:77:1c:1a:21:
                    45:86:c6:d2:7c:91:45:46:09:2d:44:eb:3f:2c:09:
                    15:4c:91:28:27:97:53:80:c5:ab:6f:81:81:3b:04:
                    03:93:ff:49:c5:86:3c:77:41:35:53:cd:27:02:fc:
                    40:6b:81:b0:36:d6:81:7f:51:ef:52:a4:9e:d3:95:
                    ce:9b:20:22:be:3e:db:1f:36:71:b3:b0:8b:a3:69:
                    f1:2e:a5:63:20:15:68:04:b0:82:ac:48:32:3b:5b:
                    61:4f:80:c8:31:bc:03:0c:f2:fc:69:d6:be:12:a9:
                    4a:2f:52:0f:3b:88:d6:84:d5:1d:88:a9:32:d3:50:
                    ff:59:0d:4a:43:fa:91:72:d5:36:8c:8a:56:91:a1:
                    2e:81:f1:86:4d:88:0d:c8:bf:d5:02:9d:46:86:6e:
                    f6:f6:57:69:a8:c4:5d:1f:1e:c2:fc:0c:53:b4:07:
                    da:b0:fb:a6:86:20:46:e9:c3:48:de:bf:64:08:9d:
                    44:10:12:a3:ef:e7:bc:b3:a8:30:a3:db:63:cc:99:
                    f6:0f:ef:10:61:49:05:58:ab:08:e6:ba:f4:a5:4b:
                    b8:bb:ab:9f:35:f5:48:60:d6:e8:48:39:1b:45:2b:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:47:CA:56:4E:B0:EB:19:23:B7:02:D8:02:76:DD:01:1F:D1:2D
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:93:d7:a8:9c:58:00:fe:83:a5:fd:3c:d3:1c:0b:c5:09:
         ee:26:89:ff:2f:28:2a:ab:40:2e:ec:fb:a8:57:03:07:5b:0d:
         12:8b:f1:51:a9:ab:7c:44:1f:ed:02:2c:43:7e:25:68:89:b0:
         de:b3:0d:03:d2:4a:75:9a:3f:23:da:27:75:1d:00:25:aa:5c:
         b2:d9:d8:bc:03:2b:6f:ca:df:7c:b0:a7:9d:ba:34:95:76:6f:
         57:23:d1:08:79:a3:7e:61:01:74:eb:a4:e2:4e:d7:33:b7:ce:
         57:64:cb:14:8a:dc:d4:be:94:78:b6:50:65:7d:75:76:65:2a:
         4e:61:de:aa:5c:0e:d1:58:15:d8:d5:d1:5b:d0:08:e5:24:21:
         86:50:11:ca:a4:5d:4e:d9:68:f9:76:56:fd:cc:f7:92:2d:dd:
         00:cc:99:ef:3a:ae:e2:c8:11:22:c6:12:30:f5:5b:d5:5b:84:
         46:c4:18:13:98:ef:c3:df:5c:30:46:07:60:fa:0d:a6:ca:6c:
         9f:c5:03:af:75:42:66:05:bf:62:ba:ff:b2:16:e1:96:7d:93:
         e0:a2:d0:d7:68:13:1b:32:e6:9a:8d:4c:ad:a5:9e:f1:b7:38:
         59:2d:94:f3:d2:6c:d7:f0:be:52:c4:35:d2:ea:64:f7:da:37:
         e8:e2:9d:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG9pqfJZfHb0Fc2UmjP0br3NGFokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFQkNFMkRCRDYyNTE1MzM3QzlBQzJEMjVGNDE3MDAw
RTFCNTNFMDAeFw0yNTAyMTMyMDQ1NDNaFw0yNjAyMTIyMDUwNDNaMDMxMTAvBgNV
BAMTKEFFQUM0N0NBNTY0RUIwRUIxOTIzQjcwMkQ4MDI3NkREMDExRkQxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAGaKL5zm79BMw/x4m8+ldJqP
9qJJp1NVdxwaIUWGxtJ8kUVGCS1E6z8sCRVMkSgnl1OAxatvgYE7BAOT/0nFhjx3
QTVTzScC/EBrgbA21oF/Ue9SpJ7Tlc6bICK+PtsfNnGzsIujafEupWMgFWgEsIKs
SDI7W2FPgMgxvAMM8vxp1r4SqUovUg87iNaE1R2IqTLTUP9ZDUpD+pFy1TaMilaR
oS6B8YZNiA3Iv9UCnUaGbvb2V2moxF0fHsL8DFO0B9qw+6aGIEbpw0jev2QInUQQ
EqPv57yzqDCj22PMmfYP7xBhSQVYqwjmuvSlS7i7q5819Uhg1uhIORtFK+FpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrqxHylZOsOsZI7cC2AJ23QEf0S0wHwYDVR0j
BBgwFoAUYuvOLb1iUVM3yawtJfQXAA4bU+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MkVCQ0UyREJENjI1MTUzMzdDOUFDMkQyNUY0MTcwMDBFMUI1M0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRUJDRTJEQkQ2MjUxNTMz
N0M5QUMyRDI1RjQxNzAwMEUxQjUzRTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhNjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk0oDANBgkqhkiG9w0BAQsFAAOC
AQEAf3yT16icWAD+g6X9PNMcC8UJ7iaJ/y8oKqtALuz7qFcDB1sNEovxUamrfEQf
7QIsQ34laImw3rMNA9JKdZo/I9ondR0AJapcstnYvAMrb8rffLCnnbo0lXZvVyPR
CHmjfmEBdOuk4k7XM7fOV2TLFIrc1L6UeLZQZX11dmUqTmHeqlwO0VgV2NXRW9AI
5SQhhlARyqRdTtlo+XZW/cz3ki3dAMyZ7zqu4sgRIsYSMPVb1VuERsQYE5jvw99c
MEYHYPoNpspsn8UDr3VCZgW/Yrr/shbhln2T4KLQ12gTGzLmmo1MraWe8bc4WS2U
89Js1/C+UsQ10upk99o36OKdEg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:03:41 2025 by rpki-client