Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383030303a3a2f33332d3333203d3e20323633393334.roa
File:                     323830343a323830303a383030303a3a2f33332d3333203d3e20323633393334.roa (raw, json)
Hash identifier:          drampjUEEeNSSiYjSF4VHammwWzWdWMvA9aTnnySKXI=
Subject key identifier:   3C:F5:B5:D8:72:3B:77:9A:FD:88:A5:99:C1:1D:FD:BA:5F:AF:45:0C
Certificate issuer:       /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial:       6D172B65A814032263C924F1EE91890612F3B9C3
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383030303a3a2f33332d3333203d3e20323633393334.roa
Signing time:             Thu 03 Apr 2025 14:15:16 +0000
ROA not before:           Thu 03 Apr 2025 14:10:16 +0000
ROA not after:            Thu 02 Apr 2026 14:15:16 +0000
asID:                     263934
IP address blocks:        2804:2800:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 13:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:2b:65:a8:14:03:22:63:c9:24:f1:ee:91:89:06:12:f3:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
        Validity
            Not Before: Apr  3 14:10:16 2025 GMT
            Not After : Apr  2 14:15:16 2026 GMT
        Subject: CN=3CF5B5D8723B779AFD88A599C11DFDBA5FAF450C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:19:f5:f0:b0:bb:98:ce:93:75:f3:9c:95:
                    da:0f:4e:9b:4e:0f:be:10:b1:44:ba:a7:a0:62:95:
                    93:1b:ff:4a:ee:d3:d0:e0:70:fd:df:b3:80:97:b9:
                    2b:82:a1:66:56:a1:90:7e:02:59:25:53:fd:81:0a:
                    34:e6:70:53:a3:26:15:4a:a2:58:72:37:2e:e1:9b:
                    51:72:5c:cd:f4:96:38:22:fe:83:58:f3:78:ca:a5:
                    96:0b:dd:9b:98:be:fc:35:7c:02:9b:66:a0:43:94:
                    0a:e3:e5:e0:06:1f:a1:ee:b1:e6:30:69:60:ca:77:
                    43:a7:e4:32:09:62:d0:0a:a8:de:5a:b8:96:28:a7:
                    b9:fb:21:4d:fe:35:99:12:13:72:b4:7b:ae:eb:64:
                    5d:36:d5:d3:13:cd:d1:dc:74:10:8d:23:d7:d2:39:
                    68:f5:83:f9:32:6b:0f:44:69:db:5c:01:83:65:eb:
                    7f:dd:72:d5:0b:48:b9:a2:18:de:fc:f5:21:10:81:
                    d0:7e:1b:9a:fc:60:65:eb:9e:66:9e:63:aa:c6:6e:
                    f8:42:b0:2a:d5:de:30:6b:a0:d9:fd:c0:21:f0:5e:
                    ba:fb:46:46:64:b6:b2:8d:00:3e:d9:38:37:3a:af:
                    58:7e:59:9e:3e:97:18:19:a7:cf:15:b1:de:03:97:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:B5:D8:72:3B:77:9A:FD:88:A5:99:C1:1D:FD:BA:5F:AF:45:0C
            X509v3 Authority Key Identifier:
                keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a383030303a3a2f33332d3333203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2800:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:3b:4d:84:8f:4d:10:42:ed:7f:85:86:5b:b6:f6:fd:87:
         f9:03:ef:b8:53:3e:42:f9:bc:58:12:6a:95:ea:6f:4c:24:9d:
         5b:cf:9a:e6:40:30:21:64:2a:38:b9:c9:90:bd:ea:8a:fc:6e:
         dd:d2:0c:04:ab:0d:b2:3f:7e:8c:27:8c:49:cf:cb:fa:3b:f7:
         cf:b4:f0:6b:dd:01:69:a6:fc:d8:50:93:4d:14:e7:b5:08:d8:
         e7:ca:a8:3d:e4:76:c4:f5:fe:db:05:39:4f:ef:a8:6c:8a:a5:
         5d:f5:dd:13:6f:32:51:a1:5b:dd:c1:29:08:4b:51:3d:ea:86:
         dd:21:a8:df:12:4e:a4:52:ea:b9:74:8c:f4:37:a2:a6:3a:3e:
         6f:57:fe:3e:4f:c1:f1:3a:35:e1:a1:58:9e:5a:93:ed:95:e2:
         2c:fd:30:61:cd:7e:53:66:43:dc:e8:25:7e:18:67:28:8d:a4:
         ec:41:a3:63:60:14:ca:95:df:49:5d:6d:68:29:65:50:9a:60:
         8a:ad:89:52:c0:af:49:e9:78:23:cd:89:8e:2e:09:84:52:e3:
         34:c8:c2:94:7d:9c:91:c6:63:30:dd:35:db:14:e3:7f:c2:a4:
         5c:e4:df:46:7a:1a:0d:62:fd:89:a1:65:60:5b:6d:85:26:32:
         cb:1f:78:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbRcrZagUAyJjySTx7pGJBhLzucMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1NTIwRjFFMTUxMDlDNTBCNDRGNTZFQTc5OUZFMkU2
ODUwOTJENDAeFw0yNTA0MDMxNDEwMTZaFw0yNjA0MDIxNDE1MTZaMDMxMTAvBgNV
BAMTKDNDRjVCNUQ4NzIzQjc3OUFGRDg4QTU5OUMxMURGREJBNUZBRjQ1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobRn18LC7mM6TdfOcldoPTptO
D74QsUS6p6BilZMb/0ru09DgcP3fs4CXuSuCoWZWoZB+AlklU/2BCjTmcFOjJhVK
olhyNy7hm1FyXM30ljgi/oNY83jKpZYL3ZuYvvw1fAKbZqBDlArj5eAGH6HuseYw
aWDKd0On5DIJYtAKqN5auJYop7n7IU3+NZkSE3K0e67rZF021dMTzdHcdBCNI9fS
OWj1g/kyaw9EadtcAYNl63/dctULSLmiGN789SEQgdB+G5r8YGXrnmaeY6rGbvhC
sCrV3jBroNn9wCHwXrr7RkZktrKNAD7ZODc6r1h+WZ4+lxgZp88Vsd4Dl0pdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUPPW12HI7d5r9iKWZwR39ul+vRQwwHwYDVR0j
BBgwFoAUolUg8eFRCcULRPVup5n+LmhQktQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC9BMjU1MjBGMUUxNTEwOUM1MEI0NEY1NkVBNzk5RkUyRTY4NTA5MkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNTUyMEYxRTE1MTA5QzUw
QjQ0RjU2RUE3OTlGRTJFNjg1MDkyRDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzIzODMwMzQzYTMyMzgzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEKACAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqljtNhI9NEELtf4WGW7b2/Yf5A++4Uz5C+bxYEmqV6m9MJJ1bz5rmQDAh
ZCo4ucmQveqK/G7d0gwEqw2yP36MJ4xJz8v6O/fPtPBr3QFppvzYUJNNFOe1CNjn
yqg95HbE9f7bBTlP76hsiqVd9d0TbzJRoVvdwSkIS1E96obdIajfEk6kUuq5dIz0
N6KmOj5vV/4+T8HxOjXhoVieWpPtleIs/TBhzX5TZkPc6CV+GGcojaTsQaNjYBTK
ld9JXW1oKWVQmmCKrYlSwK9J6XgjzYmOLgmEUuM0yMKUfZyRxmMw3TXbFON/wqRc
5N9GehoNYv2JoWVgW22FJjLLH3g1
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:48 2025 by rpki-client