Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          o/FdtkZMFliIbQw+ObhHLpLpSxs3SVuLueja0y06KJU=
Subject key identifier:   39:73:B3:B4:C1:12:B5:F2:5C:6F:A4:A2:2F:73:E4:A9:20:BA:5E:68
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       3933DB47B7055776AD1433A70DC7C7F1C1DCD83D
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:51:09 +0000
ROA not before:           Thu 13 Feb 2025 20:46:09 +0000
ROA not after:            Thu 12 Feb 2026 20:51:09 +0000
asID:                     263059
IP address blocks:        2804:934:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:33:db:47:b7:05:57:76:ad:14:33:a7:0d:c7:c7:f1:c1:dc:d8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:46:09 2025 GMT
            Not After : Feb 12 20:51:09 2026 GMT
        Subject: CN=3973B3B4C112B5F25C6FA4A22F73E4A920BA5E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:0d:4d:75:02:d0:17:50:5a:a9:84:a5:c3:
                    db:31:02:c1:58:89:3e:66:60:d7:cb:b2:dd:f3:28:
                    a9:16:b7:d8:20:8d:72:a9:62:c0:15:ef:c9:6c:94:
                    f3:02:2c:d6:da:07:a3:60:de:3a:17:20:ca:5c:76:
                    d1:e9:af:6b:2b:42:27:a5:f3:d3:3b:57:b8:9e:40:
                    f0:f3:7c:57:80:c8:83:15:95:e4:4d:ad:db:a0:59:
                    e1:e4:78:47:51:ee:c4:71:9b:41:f6:04:15:0f:02:
                    70:c5:87:ba:fc:79:ad:23:f9:79:ce:1c:0a:04:ea:
                    b7:7f:a1:f0:88:66:5e:4b:c8:ed:2c:35:27:5e:ba:
                    09:af:ae:c0:1d:e4:35:7a:00:c0:78:92:15:c5:b0:
                    49:90:90:a0:3c:f8:10:9f:e0:7f:f2:c9:3c:3d:d9:
                    0f:7f:c2:83:8a:26:fa:64:5b:32:96:72:4f:10:93:
                    d5:c9:38:2f:07:0e:34:62:92:1f:7c:c9:f4:b6:69:
                    88:65:5a:cc:10:86:cb:2a:94:e1:22:be:b3:a5:5b:
                    a0:1d:3b:8d:44:f1:45:5f:09:5c:b0:ed:4d:d3:82:
                    48:50:a2:bc:53:19:5c:81:57:eb:dd:75:ff:d7:7f:
                    3b:36:06:e1:21:1c:a1:b9:77:d7:e3:73:6e:31:2f:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:B3:B4:C1:12:B5:F2:5C:6F:A4:A2:2F:73:E4:A9:20:BA:5E:68
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a663030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:fd:74:80:1a:f7:10:76:04:34:95:09:26:08:df:c1:0e:26:
         3d:0c:66:9a:40:73:a8:39:da:f8:d2:f7:0f:88:11:50:60:af:
         6d:ca:4e:b4:62:50:33:cc:36:11:46:3c:ac:f2:eb:86:be:9e:
         bc:64:24:13:1b:db:b4:4b:dd:49:26:61:28:4d:e2:7c:91:b6:
         75:60:44:bd:85:ba:05:57:bd:16:09:af:89:81:e6:fd:c9:06:
         57:21:a9:16:c6:49:13:8e:39:63:d8:e6:c7:de:e7:b2:97:f6:
         7a:9f:c1:36:21:25:22:0b:b1:f9:2b:29:07:e7:d7:9b:09:0c:
         9d:c8:cd:d6:1b:a6:39:0b:12:26:01:5b:5f:38:ab:9a:ca:88:
         f5:d2:62:8e:5d:c2:47:6f:8d:ef:00:b3:b6:29:a1:98:fc:17:
         8f:60:23:9a:9b:d0:57:ca:cf:c7:fa:7b:ef:7c:ec:69:b0:f5:
         6a:75:b7:81:81:92:ae:43:4e:71:3f:ac:52:1f:fa:1c:fe:d5:
         96:92:b5:f4:fe:d3:3d:f3:79:9a:c0:5a:5e:66:9e:82:bc:0f:
         50:32:df:a4:54:b4:d7:a3:bf:42:9f:52:ce:e3:01:05:11:78:
         73:17:1a:c0:95:14:04:1d:1a:47:a3:60:76:a9:8e:75:17:5e:
         b1:f8:ed:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOTPbR7cFV3atFDOnDcfH8cHc2D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFQkNFMkRCRDYyNTE1MzM3QzlBQzJEMjVGNDE3MDAw
RTFCNTNFMDAeFw0yNTAyMTMyMDQ2MDlaFw0yNjAyMTIyMDUxMDlaMDMxMTAvBgNV
BAMTKDM5NzNCM0I0QzExMkI1RjI1QzZGQTRBMjJGNzNFNEE5MjBCQTVFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBQ1NdQLQF1BaqYSlw9sxAsFY
iT5mYNfLst3zKKkWt9ggjXKpYsAV78lslPMCLNbaB6Ng3joXIMpcdtHpr2srQiel
89M7V7ieQPDzfFeAyIMVleRNrdugWeHkeEdR7sRxm0H2BBUPAnDFh7r8ea0j+XnO
HAoE6rd/ofCIZl5LyO0sNSdeugmvrsAd5DV6AMB4khXFsEmQkKA8+BCf4H/yyTw9
2Q9/woOKJvpkWzKWck8Qk9XJOC8HDjRikh98yfS2aYhlWswQhssqlOEivrOlW6Ad
O41E8UVfCVyw7U3TgkhQorxTGVyBV+vddf/Xfzs2BuEhHKG5d9fjc24xL3WrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOXOztMEStfJcb6SiL3PkqSC6XmgwHwYDVR0j
BBgwFoAUYuvOLb1iUVM3yawtJfQXAA4bU+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MkVCQ0UyREJENjI1MTUzMzdDOUFDMkQyNUY0MTcwMDBFMUI1M0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRUJDRTJEQkQ2MjUxNTMz
N0M5QUMyRDI1RjQxNzAwMEUxQjUzRTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhNjYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk08DANBgkqhkiG9w0BAQsFAAOC
AQEAe/10gBr3EHYENJUJJgjfwQ4mPQxmmkBzqDna+NL3D4gRUGCvbcpOtGJQM8w2
EUY8rPLrhr6evGQkExvbtEvdSSZhKE3ifJG2dWBEvYW6BVe9FgmviYHm/ckGVyGp
FsZJE445Y9jmx97nspf2ep/BNiElIgux+SspB+fXmwkMncjN1humOQsSJgFbXzir
msqI9dJijl3CR2+N7wCztimhmPwXj2AjmpvQV8rPx/p773zsabD1anW3gYGSrkNO
cT+sUh/6HP7VlpK19P7TPfN5msBaXmaegrwPUDLfpFS016O/Qp9SzuMBBRF4cxca
wJUUBB0aR6NgdqmOdRdesfjtMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:21 2025 by rpki-client