Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/323830343a356163343a3a2f33322d313238203d3e20323638373935.roa
File:                     323830343a356163343a3a2f33322d313238203d3e20323638373935.roa (raw, json)
Hash identifier:          lebqd8fGqsJ/4AfHx/vgLo7wECUFjgY+TMrUDHdY4MQ=
Subject key identifier:   17:A8:79:9E:F2:D0:79:12:B5:B8:6D:FA:EF:A3:FC:C8:56:DD:FD:14
Certificate issuer:       /CN=6138CF2D30FCFED4F7762B658471A5318D10A574
Certificate serial:       12F953502E0D04BE9110319D555C783F98AE7321
Authority key identifier: 61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/323830343a356163343a3a2f33322d313238203d3e20323638373935.roa
Signing time:             Tue 18 Mar 2025 20:20:09 +0000
ROA not before:           Tue 18 Mar 2025 20:15:09 +0000
ROA not after:            Tue 17 Mar 2026 20:20:09 +0000
asID:                     268795
IP address blocks:        2804:5ac4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.crl
                          rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:53:50:2e:0d:04:be:91:10:31:9d:55:5c:78:3f:98:ae:73:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6138CF2D30FCFED4F7762B658471A5318D10A574
        Validity
            Not Before: Mar 18 20:15:09 2025 GMT
            Not After : Mar 17 20:20:09 2026 GMT
        Subject: CN=17A8799EF2D07912B5B86DFAEFA3FCC856DDFD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:73:4d:20:05:bd:eb:28:9b:d6:a9:cf:dc:
                    86:17:d4:e9:f2:e9:44:1d:22:62:a6:2f:97:80:3e:
                    b7:f6:94:43:e0:08:20:cc:f6:9b:75:88:4a:32:d9:
                    a5:60:c7:22:c6:16:e6:59:f7:2b:25:13:4c:64:f6:
                    ac:de:5d:9c:84:b1:8e:f7:9e:6e:f4:50:ff:d3:4e:
                    3b:fc:20:58:d1:52:96:58:6a:70:f5:49:a6:e9:69:
                    00:99:72:43:4a:c6:a1:7a:c3:24:af:d0:35:f3:10:
                    3e:48:38:9c:9d:e9:a8:b8:90:ff:b0:90:8e:cb:af:
                    e6:59:96:d8:e4:51:aa:c9:24:32:ac:17:66:86:da:
                    bd:54:87:47:53:fc:c4:bf:d2:41:f1:76:54:81:cc:
                    33:24:fb:8c:d2:32:17:19:75:b2:21:ba:8e:3f:0e:
                    a9:8b:0f:53:0b:49:41:ff:ae:97:bd:29:64:dd:7e:
                    57:94:65:45:91:4f:bc:a4:80:6d:93:3f:aa:8f:dd:
                    f7:c9:b9:ab:55:85:68:c5:7d:45:7d:a4:d0:c6:28:
                    73:18:b9:6a:46:99:8f:6e:28:be:c0:34:25:5c:32:
                    58:a2:6d:55:e6:6e:d6:64:d9:2c:85:8a:67:b6:dc:
                    2b:78:6f:5e:7e:54:1c:93:2c:3f:ac:e2:3d:ce:be:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:79:9E:F2:D0:79:12:B5:B8:6D:FA:EF:A3:FC:C8:56:DD:FD:14
            X509v3 Authority Key Identifier:
                keyid:61:38:CF:2D:30:FC:FE:D4:F7:76:2B:65:84:71:A5:31:8D:10:A5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/6138CF2D30FCFED4F7762B658471A5318D10A574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6138CF2D30FCFED4F7762B658471A5318D10A574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6uahnHbJ8AtTkefAYdQPi2R5GVW33sxf22qKBnBf6xoZ/0/323830343a356163343a3a2f33322d313238203d3e20323638373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:f4:1a:4a:c7:86:23:24:ce:7f:69:fe:f3:19:6b:d9:9d:
         d1:50:d6:51:a0:6b:2c:8f:33:6f:81:1a:81:9a:5f:6c:d3:e1:
         fb:1a:b6:69:c1:0d:fd:8b:1a:76:d3:37:0d:1c:2c:83:f7:89:
         02:48:74:77:26:d0:f2:4d:9a:87:6f:71:f7:bc:c3:24:85:88:
         46:9f:5b:f2:c5:12:7e:df:88:6d:95:12:3a:9a:64:cd:e7:ab:
         65:e1:13:5d:5a:46:9f:57:d0:45:87:67:27:e5:3c:8b:cb:70:
         1c:a4:32:ab:75:60:38:fd:1f:6f:bb:ab:49:6c:12:2b:cb:cf:
         0c:90:d4:9b:3d:87:2d:64:ae:8b:ff:92:aa:dc:13:a0:92:d8:
         d6:70:d4:e7:04:2a:84:0e:0e:3a:0a:34:e8:64:ee:c6:f2:e7:
         ad:7b:21:c2:22:1d:50:9d:31:ce:a5:5f:2f:d5:c1:1e:11:05:
         5d:c2:12:f5:d0:b4:2e:4d:56:68:2f:f0:e2:5a:23:c0:9c:80:
         0e:49:a2:b8:ab:7d:75:90:5a:9c:9b:e6:8d:70:0e:37:8a:64:
         64:13:c4:61:f4:f2:fe:6e:5f:55:67:e8:89:92:3f:a8:cb:2f:
         9b:67:5b:b3:be:f7:e2:c6:29:2d:38:f2:90:b0:7b:9a:6f:fd:
         80:54:fe:fa
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEvlTUC4NBL6REDGdVVx4P5iucyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzOENGMkQzMEZDRkVENEY3NzYyQjY1ODQ3MUE1MzE4
RDEwQTU3NDAeFw0yNTAzMTgyMDE1MDlaFw0yNjAzMTcyMDIwMDlaMDMxMTAvBgNV
BAMTKDE3QTg3OTlFRjJEMDc5MTJCNUI4NkRGQUVGQTNGQ0M4NTZEREZEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5knNNIAW96yib1qnP3IYX1Ony
6UQdImKmL5eAPrf2lEPgCCDM9pt1iEoy2aVgxyLGFuZZ9yslE0xk9qzeXZyEsY73
nm70UP/TTjv8IFjRUpZYanD1SabpaQCZckNKxqF6wySv0DXzED5IOJyd6ai4kP+w
kI7Lr+ZZltjkUarJJDKsF2aG2r1Uh0dT/MS/0kHxdlSBzDMk+4zSMhcZdbIhuo4/
DqmLD1MLSUH/rpe9KWTdfleUZUWRT7ykgG2TP6qP3ffJuatVhWjFfUV9pNDGKHMY
uWpGmY9uKL7ANCVcMliibVXmbtZk2SyFime23Ct4b15+VByTLD+s4j3OvoqNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUF6h5nvLQeRK1uG3676P8yFbd/RQwHwYDVR0j
BBgwFoAUYTjPLTD8/tT3ditlhHGlMY0QpXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnVhaG5IYko4QXRUa2VmQVlkUVBpMlI1R1ZXMzNzeGYyMnFLQm5CZjZ4
b1ovMC82MTM4Q0YyRDMwRkNGRUQ0Rjc3NjJCNjU4NDcxQTUzMThEMTBBNTc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMzhDRjJEMzBGQ0ZFRDRG
Nzc2MkI2NTg0NzFBNTMxOEQxMEE1NzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ1YWhuSGJKOEF0VGtlZkFZZFFQaTJSNUdWVzMzc3hmMjJxS0JuQmY2eG9aLzAv
MzIzODMwMzQzYTM1NjE2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFrEMA0GCSqGSIb3DQEBCwUAA4IBAQCoufQa
SseGIyTOf2n+8xlr2Z3RUNZRoGssjzNvgRqBml9s0+H7GrZpwQ39ixp20zcNHCyD
94kCSHR3JtDyTZqHb3H3vMMkhYhGn1vyxRJ+34htlRI6mmTN56tl4RNdWkafV9BF
h2cn5TyLy3AcpDKrdWA4/R9vu6tJbBIry88MkNSbPYctZK6L/5Kq3BOgktjWcNTn
BCqEDg46CjToZO7G8ueteyHCIh1QnTHOpV8v1cEeEQVdwhL10LQuTVZoL/DiWiPA
nIAOSaK4q311kFqcm+aNcA43imRkE8Rh9PL+bl9VZ+iJkj+oyy+bZ1uzvvfixikt
OPKQsHuab/2AVP76
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:26 2025 by rpki-client