Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa
File:                     323830343a6538633a3a2f33322d313238203d3e203532353631.roa (raw, json)
Hash identifier:          Gg0q3DfxZmPhnkRQl6LHy4NCAkw8MG/Fy3pAAefnQHk=
Subject key identifier:   7D:40:E6:9E:35:36:72:8D:BE:AC:88:CB:72:09:4C:6A:32:24:B6:33
Certificate issuer:       /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial:       49F8E9FEF2CF59B8AD2F2CFDF7DBC57057A9B637
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa
Signing time:             Thu 19 Dec 2024 22:07:04 +0000
ROA not before:           Thu 19 Dec 2024 22:02:04 +0000
ROA not after:            Thu 18 Dec 2025 22:07:04 +0000
asID:                     52561
IP address blocks:        2804:e8c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f8:e9:fe:f2:cf:59:b8:ad:2f:2c:fd:f7:db:c5:70:57:a9:b6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
        Validity
            Not Before: Dec 19 22:02:04 2024 GMT
            Not After : Dec 18 22:07:04 2025 GMT
        Subject: CN=7D40E69E3536728DBEAC88CB72094C6A3224B633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:67:a4:97:51:fd:0a:9f:bf:1a:7e:92:64:1f:
                    1d:38:d6:58:7f:9b:c0:27:36:c9:5e:e9:64:fd:2a:
                    82:d1:3e:04:e4:8a:07:96:0e:dc:01:2a:e4:9c:46:
                    e1:e7:b6:f3:32:b1:85:09:82:59:f1:09:7b:ee:96:
                    f2:ed:80:40:fc:90:3c:6b:f5:7f:5e:5b:5b:29:76:
                    28:8e:20:85:06:cb:ba:b1:2d:a7:f2:f6:cf:a0:19:
                    18:49:f0:c8:f8:4c:0a:44:2e:44:dc:1d:b4:ab:33:
                    2c:e8:29:02:fd:15:50:33:3b:6a:26:9f:49:4b:40:
                    35:e1:a0:45:60:7f:a9:06:4b:98:d1:c6:7f:51:02:
                    da:67:a7:46:f9:24:4c:a5:dc:a6:57:d5:6d:5e:05:
                    61:d1:97:a8:c7:6a:13:c2:6e:a9:33:a0:93:3a:af:
                    0b:f5:4b:5c:e3:08:4d:cb:19:67:d0:ba:75:24:05:
                    f7:48:8e:b1:ee:76:1f:4a:16:09:9f:55:90:e3:a4:
                    4b:e2:f3:29:7b:62:ff:c1:06:54:3c:e0:3a:e9:e1:
                    2b:51:d7:c1:08:f7:99:23:78:89:0d:90:6e:44:62:
                    7a:72:f7:e8:26:18:e1:f6:c4:33:71:0a:64:e8:07:
                    7a:55:6b:4f:45:64:77:b1:83:d1:97:b5:b6:e3:47:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:40:E6:9E:35:36:72:8D:BE:AC:88:CB:72:09:4C:6A:32:24:B6:33
            X509v3 Authority Key Identifier:
                keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/323830343a6538633a3a2f33322d313238203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:02:de:d6:14:29:87:e8:62:42:61:cc:42:b9:7f:9f:60:
         90:6d:cf:56:34:20:02:73:53:bb:ac:ae:6d:29:ba:62:c6:69:
         6f:1d:20:01:f7:ab:6a:68:e4:1f:0b:b7:1a:eb:6e:0d:7d:14:
         cb:bc:7d:82:15:98:6d:c4:40:5c:89:09:84:3d:90:52:3c:f0:
         26:50:c9:1e:c3:f5:b2:9e:b7:8f:12:50:da:d1:5e:21:20:33:
         22:3d:2b:19:49:fb:c6:0b:bf:42:fa:68:62:fa:ee:67:f6:fb:
         3d:7b:21:7e:d8:51:41:a7:c1:07:c3:b3:59:eb:3b:c4:f2:46:
         b1:e7:6d:57:c9:17:24:4b:58:3b:e8:b3:ef:4c:4b:2c:7a:b7:
         6f:07:ea:82:28:35:99:a4:51:1d:26:c7:3d:d6:1a:ab:a9:75:
         3d:38:94:09:c2:48:6c:dd:3b:6d:87:e9:c3:46:a3:8d:45:25:
         df:8b:05:fb:9b:0a:27:3c:15:4a:ab:ab:be:89:99:70:7e:00:
         1b:87:a6:32:9c:ab:84:70:f9:1b:88:b3:d9:c5:6c:fd:6f:57:
         07:59:b7:fa:90:fc:a4:79:6f:6d:03:52:78:41:a1:a5:55:11:
         87:dc:f4:db:f1:74:6f:bd:f1:34:7c:22:b7:09:84:54:cd:23:
         fa:e7:c0:82
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSfjp/vLPWbitLyz999vFcFeptjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZCMEE0MzVBQTcxOTY1RkQ3Nzc0ODg3QkZFMEFFMzRF
NkUzOUIwMzAeFw0yNDEyMTkyMjAyMDRaFw0yNTEyMTgyMjA3MDRaMDMxMTAvBgNV
BAMTKDdENDBFNjlFMzUzNjcyOERCRUFDODhDQjcyMDk0QzZBMzIyNEI2MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwZ6SXUf0Kn78afpJkHx041lh/
m8AnNsle6WT9KoLRPgTkigeWDtwBKuScRuHntvMysYUJglnxCXvulvLtgED8kDxr
9X9eW1spdiiOIIUGy7qxLafy9s+gGRhJ8Mj4TApELkTcHbSrMyzoKQL9FVAzO2om
n0lLQDXhoEVgf6kGS5jRxn9RAtpnp0b5JEyl3KZX1W1eBWHRl6jHahPCbqkzoJM6
rwv1S1zjCE3LGWfQunUkBfdIjrHudh9KFgmfVZDjpEvi8yl7Yv/BBlQ84Drp4StR
18EI95kjeIkNkG5EYnpy9+gmGOH2xDNxCmToB3pVa09FZHexg9GXtbbjRyxTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfUDmnjU2co2+rIjLcglMajIktjMwHwYDVR0j
BBgwFoAUj7CkNapxll/Xd0iHv+CuNObjmwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnAyZm5TV1JkMlRGb2V6am11a3NoRWFCMVN0MWVKYXNEUTVLd2NLUTZm
VE0vMC84RkIwQTQzNUFBNzE5NjVGRDc3NzQ4ODdCRkUwQUUzNEU2RTM5QjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQjBBNDM1QUE3MTk2NUZE
Nzc3NDg4N0JGRTBBRTM0RTZFMzlCMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZwMmZuU1dSZDJURm9lemptdWtzaEVhQjFTdDFlSmFzRFE1S3djS1E2ZlRNLzAv
MzIzODMwMzQzYTY1Mzg2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM1
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDowwDQYJKoZIhvcNAQELBQADggEBAGXsAt7WFCmH
6GJCYcxCuX+fYJBtz1Y0IAJzU7usrm0pumLGaW8dIAH3q2po5B8Ltxrrbg19FMu8
fYIVmG3EQFyJCYQ9kFI88CZQyR7D9bKet48SUNrRXiEgMyI9KxlJ+8YLv0L6aGL6
7mf2+z17IX7YUUGnwQfDs1nrO8TyRrHnbVfJFyRLWDvos+9MSyx6t28H6oIoNZmk
UR0mxz3WGqupdT04lAnCSGzdO22H6cNGo41FJd+LBfubCic8FUqrq76JmXB+ABuH
pjKcq4Rw+RuIs9nFbP1vVwdZt/qQ/KR5b20DUnhBoaVVEYfc9NvxdG+98TR8IrcJ
hFTNI/rnwII=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:37:26 2025 by rpki-client