Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
File:                     323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa (raw, json)
Hash identifier:          cMXDoQTqas9e3d1wpFa46R//yq+70BElzhezkgt08Ek=
Subject key identifier:   C9:0D:9C:B9:F7:FF:92:F2:95:B2:2E:95:BA:31:8E:17:AA:15:B0:C9
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       357CC62B7C85C986D5D4626D523D253172837309
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa
Signing time:             Wed 05 Mar 2025 20:25:51 +0000
ROA not before:           Wed 05 Mar 2025 20:20:51 +0000
ROA not after:            Wed 04 Mar 2026 20:25:51 +0000
asID:                     11242
IP address blocks:        2801:80:a80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7c:c6:2b:7c:85:c9:86:d5:d4:62:6d:52:3d:25:31:72:83:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:51 2025 GMT
            Not After : Mar  4 20:25:51 2026 GMT
        Subject: CN=C90D9CB9F7FF92F295B22E95BA318E17AA15B0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:1b:81:90:8f:79:3b:d0:5e:2b:bc:a1:13:
                    35:37:52:b2:65:2d:20:f2:2c:32:53:42:df:36:8f:
                    7d:25:9e:2f:3c:04:ce:bb:a7:08:79:e3:fa:68:5a:
                    a4:e2:c5:60:d4:9a:57:f5:4b:bc:5a:d5:9f:a0:94:
                    41:b3:4a:ad:93:f1:ec:d2:f1:3b:e6:ca:db:d6:ad:
                    65:65:11:99:ba:0f:3d:00:50:f4:d2:49:06:74:72:
                    91:6b:85:4b:9d:70:f9:d2:61:b6:0d:9f:07:76:db:
                    c5:36:9c:e3:c5:e2:a4:01:e0:48:49:18:16:25:ba:
                    71:13:19:74:87:e0:9a:a1:8f:be:53:d0:d8:5c:72:
                    34:dc:39:7c:ac:12:d7:78:8e:8a:e4:5f:87:76:ef:
                    5e:7d:49:a7:31:b6:29:b1:10:6a:40:8d:f9:24:cb:
                    61:ce:d9:e1:6d:f1:56:69:63:2e:c1:4a:e4:b6:6e:
                    27:07:d7:fd:2c:cb:5d:4c:43:4b:10:eb:bb:e1:3b:
                    86:d3:81:7f:05:93:39:d2:2f:e4:e2:76:40:f4:67:
                    68:78:96:4d:24:f7:89:35:f0:bb:d4:ec:67:d4:fd:
                    3c:66:93:20:1b:d3:a7:c2:ee:f9:d9:3b:d8:e4:be:
                    b3:c1:1a:67:f4:eb:14:66:79:2d:2f:30:a7:ec:e9:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0D:9C:B9:F7:FF:92:F2:95:B2:2E:95:BA:31:8E:17:AA:15:B0:C9
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830313a38303a6138303a3a2f34342d3438203d3e203131323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:a80::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:43:4a:a8:74:fb:d9:4c:6c:12:9b:97:69:ab:67:26:e7:
         85:8a:85:68:24:16:85:ae:27:77:b0:c4:b6:8a:7d:d5:9b:51:
         fa:b4:b3:ae:76:8d:b9:24:45:57:99:3e:b3:86:d4:5c:33:bc:
         8d:24:89:ce:8f:d6:8f:c7:87:36:d5:5d:ab:1e:4d:af:89:19:
         21:f8:32:3d:e8:bf:93:f7:ac:5c:c0:15:48:ba:63:1f:2e:85:
         7c:6d:d6:61:ba:53:24:d9:f6:06:80:77:54:a3:48:3f:02:da:
         c5:73:22:f6:8d:b3:4c:b3:73:3b:c6:fa:f5:87:cd:0f:81:9b:
         60:d6:3b:fe:87:e3:02:d5:fb:24:c5:d3:43:b7:29:31:4d:66:
         57:50:c1:7c:c3:e6:58:1d:a1:00:70:dd:f4:89:91:fb:4d:03:
         13:cd:ec:27:62:9e:1a:8e:7d:60:8f:40:6e:54:fa:4f:6f:98:
         49:ef:e9:25:af:21:da:0b:22:3a:e2:38:ab:76:e2:f2:97:fd:
         8d:f6:2b:ba:65:41:bf:0b:24:e3:d9:11:fc:6c:83:df:20:85:
         66:cb:4f:a1:64:8b:7c:2d:88:be:b2:25:80:f5:7d:11:ff:5a:
         61:e8:09:bb:96:6b:ac:62:3c:bf:61:a8:2e:c3:b5:f3:0a:3f:
         7e:86:5d:86
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUNXzGK3yFyYbV1GJtUj0lMXKDcwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NkFCMTNERjE5RjJFODkzNUNBRkIxMTlFNDAzMDhE
MEEwODE0NjAeFw0yNTAzMDUyMDIwNTFaFw0yNjAzMDQyMDI1NTFaMDMxMTAvBgNV
BAMTKEM5MEQ5Q0I5RjdGRjkyRjI5NUIyMkU5NUJBMzE4RTE3QUExNUIwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjRuBkI95O9BeK7yhEzU3UrJl
LSDyLDJTQt82j30lni88BM67pwh54/poWqTixWDUmlf1S7xa1Z+glEGzSq2T8ezS
8TvmytvWrWVlEZm6Dz0AUPTSSQZ0cpFrhUudcPnSYbYNnwd228U2nOPF4qQB4EhJ
GBYlunETGXSH4Jqhj75T0NhccjTcOXysEtd4jorkX4d27159SacxtimxEGpAjfkk
y2HO2eFt8VZpYy7BSuS2bicH1/0sy11MQ0sQ67vhO4bTgX8FkznSL+TidkD0Z2h4
lk0k94k18LvU7GfU/TxmkyAb06fC7vnZO9jkvrPBGmf06xRmeS0vMKfs6Rf7AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUyQ2cuff/kvKVsi6VujGOF6oVsMkwHwYDVR0j
BBgwFoAU5WarE98Z8uiTXK+xGeQDCNCggUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlF2blVuRVhlNUpUZjdWaFFIblVGUndkemVFcGJGNHJ0M2I1UExydmRl
eXkvMS9FNTY2QUIxM0RGMTlGMkU4OTM1Q0FGQjExOUU0MDMwOEQwQTA4MTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjZBQjEzREYxOUYyRTg5
MzVDQUZCMTE5RTQwMzA4RDBBMDgxNDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRdm5VbkVYZTVKVGY3VmhRSG5VRlJ3ZHplRXBiRjRydDNiNVBMcnZkZXl5LzEv
MzIzODMwMzEzYTM4MzAzYTYxMzgzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMx
MzEzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQoAQCACoAwDQYJKoZIhvcNAQELBQADggEBAAg/
Q0qodPvZTGwSm5dpq2cm54WKhWgkFoWuJ3ewxLaKfdWbUfq0s652jbkkRVeZPrOG
1FwzvI0kic6P1o/HhzbVXaseTa+JGSH4Mj3ov5P3rFzAFUi6Yx8uhXxt1mG6UyTZ
9gaAd1SjSD8C2sVzIvaNs0yzczvG+vWHzQ+Bm2DWO/6H4wLV+yTF00O3KTFNZldQ
wXzD5lgdoQBw3fSJkftNAxPN7CdinhqOfWCPQG5U+k9vmEnv6SWvIdoLIjriOKt2
4vKX/Y32K7plQb8LJOPZEfxsg98ghWbLT6Fki3wtiL6yJYD1fRH/WmHoCbuWa6xi
PL9hqC7DtfMKP36GXYY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:29 2025 by rpki-client