Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          FFiSHoPLwc3w+Qzl3YF5W2WjQJrkGtN0l7AsAbGniY0=
Subject key identifier:   DF:49:28:19:A4:AA:CE:20:12:44:78:19:19:88:D6:47:BA:16:A1:80
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       1E3F16980481151E9E0FBCE8F3BA37F91894CDCC
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:52 +0000
ROA not before:           Thu 13 Feb 2025 20:45:52 +0000
ROA not after:            Thu 12 Feb 2026 20:50:52 +0000
asID:                     263059
IP address blocks:        2804:934:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3f:16:98:04:81:15:1e:9e:0f:bc:e8:f3:ba:37:f9:18:94:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:52 2025 GMT
            Not After : Feb 12 20:50:52 2026 GMT
        Subject: CN=DF492819A4AACE20124478191988D647BA16A180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:15:da:50:3a:21:3e:fc:b5:82:76:90:72:
                    0c:c0:0d:7d:d5:8c:cc:42:65:b0:d7:49:a3:3e:7b:
                    6e:2b:29:93:43:25:4d:36:4d:03:a9:0b:29:0f:63:
                    79:fe:8c:34:f7:04:c5:12:f1:a0:14:13:9b:c5:31:
                    0d:10:61:82:87:fb:8a:2e:25:6b:d3:44:26:2a:2e:
                    1a:93:89:e4:ce:0b:85:31:9d:dc:ca:a5:22:bd:d1:
                    c5:fb:3e:93:ee:16:f1:78:64:cf:92:c1:a3:fa:1b:
                    17:37:17:f6:96:ea:db:80:19:d5:5a:10:d1:df:70:
                    7a:d6:e1:4d:6a:a9:03:77:98:64:24:34:c7:c1:f8:
                    61:ec:56:6f:ff:b4:62:97:ee:0d:36:c8:79:4b:15:
                    05:a6:ad:d4:57:57:3b:57:98:b0:15:5f:00:83:d6:
                    10:22:6b:57:2d:d8:6d:3a:df:65:28:85:4f:19:9d:
                    f9:f3:34:5c:78:14:8d:1e:0b:47:36:ad:2f:b8:a3:
                    d2:3d:16:61:44:da:23:98:9e:10:2e:25:30:42:7d:
                    24:05:3b:84:63:3f:ef:cc:86:b5:8c:a1:63:7c:2a:
                    cd:c7:69:2c:d8:7a:85:f2:da:97:4c:30:cf:61:0f:
                    4a:d0:0f:02:83:5b:f5:62:7f:d7:57:0f:b5:f0:f5:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:28:19:A4:AA:CE:20:12:44:78:19:19:88:D6:47:BA:16:A1:80
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a643030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:a6:cb:47:fe:da:ae:c9:c5:ed:87:ae:3d:f1:6b:61:e4:de:
         22:02:db:15:c1:19:b5:e3:c2:f4:14:ad:d7:dd:52:62:d4:c2:
         2a:ec:48:21:61:8d:5b:63:7d:15:60:3f:a0:f4:f9:a8:ff:31:
         a0:25:f6:de:0f:5d:cb:a7:1f:15:97:2c:9b:64:4b:7c:1a:b4:
         53:1c:ab:9c:04:a9:b4:33:cd:ef:0e:88:8d:66:0f:31:d1:85:
         b7:5f:2b:28:0e:f8:84:70:13:d1:78:06:db:6a:c6:fe:e7:d2:
         49:a4:d8:33:02:96:2f:a1:a4:0f:bd:58:ba:25:62:8d:3e:4a:
         aa:30:48:6e:f2:01:56:5d:5b:f6:0e:99:82:f5:ce:04:9e:64:
         da:e8:65:82:3b:99:5c:f8:a5:9c:1e:4c:5b:5d:fe:98:e6:15:
         d0:f9:9c:0d:f7:39:fa:2d:9f:2a:45:a2:91:75:de:75:64:59:
         c0:60:40:47:30:d4:dc:be:86:4a:eb:2c:02:1f:b7:63:b7:7b:
         e8:72:31:72:2e:11:12:59:a8:8d:27:1b:9f:64:29:38:63:bd:
         c2:b8:4c:f1:5d:54:8e:d7:a3:dc:c5:a6:be:62:1c:b5:f1:e3:
         4b:17:f5:d9:55:85:ca:5d:a8:b5:a4:d6:9d:b7:21:ae:28:49:
         7e:ba:10:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHj8WmASBFR6eD7zo87o3+RiUzcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFQkNFMkRCRDYyNTE1MzM3QzlBQzJEMjVGNDE3MDAw
RTFCNTNFMDAeFw0yNTAyMTMyMDQ1NTJaFw0yNjAyMTIyMDUwNTJaMDMxMTAvBgNV
BAMTKERGNDkyODE5QTRBQUNFMjAxMjQ0NzgxOTE5ODhENjQ3QkExNkExODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvhXaUDohPvy1gnaQcgzADX3V
jMxCZbDXSaM+e24rKZNDJU02TQOpCykPY3n+jDT3BMUS8aAUE5vFMQ0QYYKH+4ou
JWvTRCYqLhqTieTOC4UxndzKpSK90cX7PpPuFvF4ZM+SwaP6Gxc3F/aW6tuAGdVa
ENHfcHrW4U1qqQN3mGQkNMfB+GHsVm//tGKX7g02yHlLFQWmrdRXVztXmLAVXwCD
1hAia1ct2G0632UohU8ZnfnzNFx4FI0eC0c2rS+4o9I9FmFE2iOYnhAuJTBCfSQF
O4RjP+/MhrWMoWN8Ks3HaSzYeoXy2pdMMM9hD0rQDwKDW/Vif9dXD7Xw9RxxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU30koGaSqziASRHgZGYjWR7oWoYAwHwYDVR0j
BBgwFoAUYuvOLb1iUVM3yawtJfQXAA4bU+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MkVCQ0UyREJENjI1MTUzMzdDOUFDMkQyNUY0MTcwMDBFMUI1M0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRUJDRTJEQkQ2MjUxNTMz
N0M5QUMyRDI1RjQxNzAwMEUxQjUzRTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhNjQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk00DANBgkqhkiG9w0BAQsFAAOC
AQEANqbLR/7arsnF7YeuPfFrYeTeIgLbFcEZtePC9BSt191SYtTCKuxIIWGNW2N9
FWA/oPT5qP8xoCX23g9dy6cfFZcsm2RLfBq0UxyrnASptDPN7w6IjWYPMdGFt18r
KA74hHAT0XgG22rG/ufSSaTYMwKWL6GkD71YuiVijT5KqjBIbvIBVl1b9g6ZgvXO
BJ5k2uhlgjuZXPilnB5MW13+mOYV0PmcDfc5+i2fKkWikXXedWRZwGBARzDU3L6G
SussAh+3Y7d76HIxci4RElmojScbn2QpOGO9wrhM8V1Ujtej3MWmvmIctfHjSxf1
2VWFyl2otaTWnbchrihJfroQKg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:18 2025 by rpki-client