Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa
File:                     323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (raw, json)
Hash identifier:          hVK/GH5J5gESoNpOj4BeuJw0gt9hYssVFQjGwQ3BqNw=
Subject key identifier:   FA:CE:52:25:48:E4:39:84:DA:14:E6:91:F6:76:E7:FC:6E:DB:10:C9
Certificate issuer:       /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial:       6BE21D3157349779A12CB07150A4022D021ADB21
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa
Signing time:             Thu 06 Mar 2025 03:00:11 +0000
ROA not before:           Thu 06 Mar 2025 02:55:11 +0000
ROA not after:            Thu 05 Mar 2026 03:00:11 +0000
asID:                     266632
IP address blocks:        2804:3ef8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
                          rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e2:1d:31:57:34:97:79:a1:2c:b0:71:50:a4:02:2d:02:1a:db:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
        Validity
            Not Before: Mar  6 02:55:11 2025 GMT
            Not After : Mar  5 03:00:11 2026 GMT
        Subject: CN=FACE522548E43984DA14E691F676E7FC6EDB10C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:1a:ca:0d:f9:27:47:0a:cf:52:c5:3f:8a:
                    f9:d3:85:98:8e:6a:a2:c4:04:cd:7f:a4:70:7b:a0:
                    77:88:a8:33:38:32:2a:45:8f:4b:18:33:6c:01:aa:
                    54:27:4f:c0:46:26:4d:1c:8f:d5:91:c8:cd:db:21:
                    07:f2:e3:6d:07:b9:98:63:2f:40:35:57:a5:9f:fa:
                    62:9c:af:b3:2a:49:11:0e:eb:46:e7:0d:da:27:2b:
                    29:46:a4:80:0e:d0:0a:71:ed:9e:5e:86:fe:23:bb:
                    9f:38:82:df:dd:01:b2:86:9d:a4:67:92:e9:42:2d:
                    24:1b:44:ed:b3:0f:5c:e7:90:95:93:74:ad:b9:5a:
                    c9:77:fd:7f:03:15:15:88:f4:8c:a2:1e:4f:82:42:
                    a5:11:56:7e:a6:b4:0d:4b:dc:17:e6:b5:e2:fb:0d:
                    a8:3d:64:57:5b:29:6e:16:f5:88:d5:87:44:2f:04:
                    18:85:4e:1a:ca:43:13:29:c2:42:45:60:8f:6e:6d:
                    0f:5f:06:7c:69:2b:0c:6b:e9:34:3d:d5:8a:1b:47:
                    c7:27:cf:67:08:a1:94:2e:f3:a8:c0:c3:c7:ae:79:
                    8c:5a:1b:41:df:09:78:ee:ab:d5:4a:e5:07:ff:b5:
                    fd:04:4e:4d:0d:d5:30:a1:89:65:32:54:ff:8f:fe:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CE:52:25:48:E4:39:84:DA:14:E6:91:F6:76:E7:FC:6E:DB:10:C9
            X509v3 Authority Key Identifier:
                keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/323830343a336566383a3a2f33322d3430203d3e20323636363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:b7:97:bb:2f:48:00:7b:cb:71:8e:7a:71:1f:b8:28:09:
         fe:ae:88:e8:f6:7a:63:b1:ae:64:69:55:cc:9c:06:8d:0b:db:
         37:d4:62:91:47:cb:26:01:42:4a:b3:02:fc:e7:fa:58:b0:80:
         7a:d8:d3:5d:5e:2a:60:3e:75:ba:77:c8:47:6a:f1:d0:3e:6f:
         91:14:e7:69:e0:82:7a:30:6c:9b:67:3f:7c:4a:6d:f7:e7:d4:
         e7:c9:57:e3:cd:5c:24:51:96:25:1d:a7:5d:98:a4:c1:e6:17:
         76:3f:48:b5:39:3a:a2:03:cc:7e:9e:1d:54:77:57:77:53:42:
         96:61:65:bc:86:cf:2a:22:5e:fe:f5:2a:22:3a:5e:43:22:55:
         e5:b0:b5:84:cd:0d:10:79:1c:30:60:d3:bb:ed:20:fa:60:70:
         22:3c:ea:04:86:a2:cb:27:b4:3e:b0:c4:3c:ad:55:4e:92:78:
         bb:dc:78:57:ac:99:9d:22:d6:26:4d:d0:00:9e:e1:9e:7e:ee:
         9a:85:be:7c:20:28:94:a1:75:e0:ec:71:40:48:a4:5d:4f:10:
         4a:0a:ab:ae:cd:ea:01:88:32:75:01:90:29:87:ff:78:d8:87:
         91:1c:50:6a:ed:49:6f:70:d0:42:1c:f1:b1:c6:d4:0b:f7:a6:
         97:5f:b4:a4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUa+IdMVc0l3mhLLBxUKQCLQIa2yEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2Nzg5OTdENjY2QkY5MjgxRkZFQUI3OEI2RDI4QTFG
QTUxRkY3ODAeFw0yNTAzMDYwMjU1MTFaFw0yNjAzMDUwMzAwMTFaMDMxMTAvBgNV
BAMTKEZBQ0U1MjI1NDhFNDM5ODREQTE0RTY5MUY2NzZFN0ZDNkVEQjEwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnRrKDfknRwrPUsU/ivnThZiO
aqLEBM1/pHB7oHeIqDM4MipFj0sYM2wBqlQnT8BGJk0cj9WRyM3bIQfy420HuZhj
L0A1V6Wf+mKcr7MqSREO60bnDdonKylGpIAO0Apx7Z5ehv4ju584gt/dAbKGnaRn
kulCLSQbRO2zD1znkJWTdK25Wsl3/X8DFRWI9IyiHk+CQqURVn6mtA1L3BfmteL7
Dag9ZFdbKW4W9YjVh0QvBBiFThrKQxMpwkJFYI9ubQ9fBnxpKwxr6TQ91YobR8cn
z2cIoZQu86jAw8eueYxaG0HfCXjuq9VK5Qf/tf0ETk0N1TChiWUyVP+P/k33AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+s5SJUjkOYTaFOaR9nbn/G7bEMkwHwYDVR0j
BBgwFoAUJWeJl9Zmv5KB/+q3i20oofpR/3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE
SzcvMS8yNTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Njc4OTk3RDY2NkJGOTI4
MUZGRUFCNzhCNkQyOEExRkE1MUZGNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKb24yczFZMUFrVkNzdE1ITkdZamJ0eUNlZnRBUUtSZVFwbzNxRnJiREs3LzEv
MzIzODMwMzQzYTMzNjU2NjM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM2
MzYzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ++DANBgkqhkiG9w0BAQsFAAOCAQEAXZW3l7sv
SAB7y3GOenEfuCgJ/q6I6PZ6Y7GuZGlVzJwGjQvbN9RikUfLJgFCSrMC/Of6WLCA
etjTXV4qYD51unfIR2rx0D5vkRTnaeCCejBsm2c/fEpt9+fU58lX481cJFGWJR2n
XZikweYXdj9ItTk6ogPMfp4dVHdXd1NClmFlvIbPKiJe/vUqIjpeQyJV5bC1hM0N
EHkcMGDTu+0g+mBwIjzqBIaiyye0PrDEPK1VTpJ4u9x4V6yZnSLWJk3QAJ7hnn7u
moW+fCAolKF14OxxQEikXU8QSgqrrs3qAYgydQGQKYf/eNiHkRxQau1Jb3DQQhzx
scbUC/eml1+0pA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:01:58 2025 by rpki-client