Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
File:                     323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa (raw, json)
Hash identifier:          Y3zTeIp8yiNYnvZ3ytP4fY7T11cg6qENc7Qkj4+Tn4c=
Subject key identifier:   3F:3F:85:F5:22:AE:34:89:79:40:2E:CA:07:81:52:8F:72:4B:E6:0F
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       6C696990733222083C0526637678D4DA0BEFE702
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 12:59:24 +0000
ROA not before:           Thu 05 Dec 2024 12:54:24 +0000
ROA not after:            Thu 04 Dec 2025 12:59:24 +0000
asID:                     53047
IP address blocks:        2804:6f0:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 06:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:69:90:73:32:22:08:3c:05:26:63:76:78:d4:da:0b:ef:e7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:54:24 2024 GMT
            Not After : Dec  4 12:59:24 2025 GMT
        Subject: CN=3F3F85F522AE348979402ECA0781528F724BE60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:72:ba:9f:95:5f:78:69:b2:48:2b:00:ef:
                    54:3c:f2:8a:73:0c:df:d3:6a:a3:ae:59:24:b6:a2:
                    5c:9b:12:e3:78:db:5b:27:34:df:c6:bb:fb:4f:1d:
                    44:05:1d:f0:c3:76:1d:49:d6:86:3a:7e:60:b3:ba:
                    d2:e8:32:22:86:59:87:4e:b3:fa:3a:f7:2a:de:0a:
                    3d:eb:4c:d0:07:de:5b:67:c1:4a:66:2a:25:35:2b:
                    23:0f:da:4c:71:e3:b5:fc:01:c5:af:88:56:65:ab:
                    f2:5e:86:f1:d4:fd:0a:26:62:b6:46:4c:37:9a:65:
                    ab:95:2a:08:7a:e6:c8:81:c2:00:10:39:0a:64:3d:
                    5e:1f:c0:03:19:75:a0:8e:92:3f:ee:8c:07:6c:a8:
                    fd:21:8a:9e:6a:2e:c3:9c:f2:4c:6d:46:67:e1:4a:
                    53:91:f9:5b:ff:bd:35:91:34:6a:47:13:fa:c5:78:
                    5c:79:84:02:17:3a:cf:ac:e8:7c:a4:34:32:52:d9:
                    9b:9d:2b:bf:af:ab:94:e0:35:a5:ee:85:f6:c8:20:
                    bb:5e:a7:52:d2:ee:fe:35:ae:88:de:d0:62:14:25:
                    f5:19:5b:47:30:c8:11:3d:63:41:ed:ce:b3:9f:5a:
                    1d:f2:98:b3:25:23:01:18:19:e7:ca:21:5c:91:85:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3F:85:F5:22:AE:34:89:79:40:2E:CA:07:81:52:8F:72:4B:E6:0F
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a666630303a3a2f34382d3438203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:f6:8a:95:47:7c:01:d4:43:21:b7:5e:9f:9b:f3:e3:25:
         ab:28:15:97:fc:c9:3e:5e:a7:66:6a:b9:69:c7:ed:43:81:1d:
         63:23:0a:b9:f3:1e:df:45:df:ba:f5:ec:71:ca:76:39:79:ce:
         fc:9d:56:87:7d:07:c3:f7:1c:6c:55:32:74:a9:39:13:bb:1b:
         e3:1e:ed:00:c1:a0:01:3c:ba:d5:bc:18:12:a0:9a:2c:c0:73:
         d7:d4:27:55:6b:85:f8:1c:c9:78:cf:51:f7:1a:77:26:e6:e1:
         5e:9e:5c:4b:8c:b7:a9:b7:19:eb:85:e9:0d:1d:5c:22:2c:c3:
         47:2e:b3:54:4a:0c:04:2a:2a:c4:bc:65:bf:9e:ac:9a:31:ae:
         14:15:97:04:13:ea:f4:c2:67:93:03:31:97:92:d1:55:8b:2c:
         6b:d0:31:2a:72:97:a5:a9:0e:a3:ff:34:d7:d4:18:d5:8e:03:
         5b:b3:24:db:5a:90:af:d8:bf:f2:0c:af:c3:5c:c2:42:d8:61:
         64:03:6a:92:69:83:ad:11:4b:ea:38:48:08:ea:f0:0c:0e:e3:
         d3:6e:cb:84:93:82:e1:46:6a:79:e4:04:a0:11:a9:02:c7:27:
         10:9f:82:e5:f0:95:a3:bb:a8:64:a4:98:3c:46:fb:e7:55:d7:
         1b:05:e2:e7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbGlpkHMyIgg8BSZjdnjU2gvv5wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjU0MjRaFw0yNTEyMDQxMjU5MjRaMDMxMTAvBgNV
BAMTKDNGM0Y4NUY1MjJBRTM0ODk3OTQwMkVDQTA3ODE1MjhGNzI0QkU2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZL3K6n5VfeGmySCsA71Q88opz
DN/TaqOuWSS2olybEuN421snNN/Gu/tPHUQFHfDDdh1J1oY6fmCzutLoMiKGWYdO
s/o69yreCj3rTNAH3ltnwUpmKiU1KyMP2kxx47X8AcWviFZlq/JehvHU/QomYrZG
TDeaZauVKgh65siBwgAQOQpkPV4fwAMZdaCOkj/ujAdsqP0hip5qLsOc8kxtRmfh
SlOR+Vv/vTWRNGpHE/rFeFx5hAIXOs+s6HykNDJS2ZudK7+vq5TgNaXuhfbIILte
p1LS7v41roje0GIUJfUZW0cwyBE9Y0HtzrOfWh3ymLMlIwEYGefKIVyRhfv1AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUPz+F9SKuNIl5QC7KB4FSj3JL5g8wHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzIzODMwMzQzYTM2NjYzMDNhNjY2NjMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMzMzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQG8P8AMA0GCSqGSIb3DQEBCwUAA4IB
AQAbp/aKlUd8AdRDIbden5vz4yWrKBWX/Mk+Xqdmarlpx+1DgR1jIwq58x7fRd+6
9exxynY5ec78nVaHfQfD9xxsVTJ0qTkTuxvjHu0AwaABPLrVvBgSoJoswHPX1CdV
a4X4HMl4z1H3Gncm5uFenlxLjLeptxnrhekNHVwiLMNHLrNUSgwEKirEvGW/nqya
Ma4UFZcEE+r0wmeTAzGXktFViyxr0DEqcpelqQ6j/zTX1BjVjgNbsyTbWpCv2L/y
DK/DXMJC2GFkA2qSaYOtEUvqOEgI6vAMDuPTbsuEk4LhRmp55ASgEakCxycQn4Ll
8JWju6hkpJg8RvvnVdcbBeLn
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:35:18 2025 by rpki-client