Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          ZSFjUpZgaRajF1X+J3gbzXqS/+yGBTVMssgBNudZLEs=
Subject key identifier:   B0:38:DC:4C:A6:B7:1B:ED:23:CB:A3:79:0A:81:0D:8A:D5:F8:25:60
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       020B7F875AE0D64EC71A694592995F041E85983D
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:32 +0000
ROA not before:           Thu 06 Mar 2025 08:15:32 +0000
ROA not after:            Thu 05 Mar 2026 08:20:32 +0000
asID:                     263146
IP address blocks:        2804:1778:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0b:7f:87:5a:e0:d6:4e:c7:1a:69:45:92:99:5f:04:1e:85:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:32 2025 GMT
            Not After : Mar  5 08:20:32 2026 GMT
        Subject: CN=B038DC4CA6B71BED23CBA3790A810D8AD5F82560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:76:28:41:03:71:0f:25:a6:3e:b3:2e:08:
                    c0:bf:3a:28:7a:e7:ee:9a:32:b0:cd:9b:6f:63:95:
                    50:d4:42:86:62:a5:e2:f1:16:3a:a9:55:e7:d2:f9:
                    96:cc:b8:2b:1e:22:31:b0:da:7b:3c:b2:cc:39:25:
                    bc:82:de:4a:e6:f8:d9:ae:c5:cd:c7:6c:0e:5f:d0:
                    47:e4:78:0a:19:ae:c5:2e:ee:aa:78:f0:c9:13:5f:
                    f4:4e:d0:d9:9b:37:96:bc:6e:6a:dc:d9:5d:23:28:
                    af:80:31:28:6a:4c:e8:6d:93:26:7e:84:f4:02:3c:
                    40:99:3f:66:70:51:e2:3f:dc:fc:f2:3c:7d:97:b6:
                    ea:12:0a:bc:c2:97:dd:17:b9:8e:69:8b:d4:85:b2:
                    25:f8:b3:67:e3:9e:3f:01:e9:c7:68:7f:a1:b8:b1:
                    e4:95:1a:95:b5:49:3c:17:ae:a1:99:b8:20:7c:e6:
                    a0:be:e1:bb:51:dc:4a:ed:eb:62:a0:66:10:94:95:
                    c5:f9:9b:d1:f5:c6:41:0f:f0:90:14:7b:54:af:79:
                    59:94:c9:8a:3c:96:2f:f7:c4:94:96:72:be:c3:b1:
                    42:7b:81:a6:3c:29:da:fd:3d:d3:86:78:88:c7:1a:
                    e3:d9:b6:2a:a0:67:0b:4b:7c:c8:b8:13:0a:d6:44:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:DC:4C:A6:B7:1B:ED:23:CB:A3:79:0A:81:0D:8A:D5:F8:25:60
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a653030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:a6:aa:51:7d:c6:d4:3d:57:ca:b7:a1:4c:f3:5f:9f:80:
         a3:43:20:cd:4d:d6:09:2f:6d:c7:99:92:c8:05:11:46:ea:6a:
         8a:dd:a0:d0:51:e3:58:fc:df:2a:50:26:50:ac:3c:db:34:ac:
         4d:85:e1:af:82:11:aa:7e:3b:98:7f:5e:59:07:a9:50:83:c7:
         55:55:76:aa:ce:dd:31:64:d1:1c:8e:ad:ad:0e:f5:37:34:a7:
         80:5a:5d:55:42:83:c0:ac:a9:22:23:e9:68:44:0f:7a:95:94:
         37:b5:4e:87:fa:f5:fb:d7:e4:48:13:de:31:63:ac:f2:4b:d6:
         44:b5:34:b1:5d:f5:2b:20:db:83:54:3f:ca:ea:4a:ae:4e:27:
         28:4f:e8:56:b3:9c:68:f6:25:9f:e8:1c:2b:e5:42:58:b8:fa:
         10:99:a9:12:b5:b8:83:ba:07:dc:f0:86:e8:f6:1d:a3:76:e7:
         9d:c9:31:7e:32:d8:9a:51:a2:ef:a2:ae:e6:cc:d7:d3:53:de:
         7c:07:23:c0:25:38:25:ab:6f:67:ad:df:d3:05:19:b8:a4:4e:
         cf:8d:f5:e1:73:14:6b:e4:74:24:f4:23:3a:4c:16:0e:31:51:
         0a:f5:04:1c:05:f7:c1:f6:92:14:b5:bf:d0:c0:7b:90:84:b3:
         e0:8e:a1:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAgt/h1rg1k7HGmlFkplfBB6FmD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF
OUIzRjQ5MzAeFw0yNTAzMDYwODE1MzJaFw0yNjAzMDUwODIwMzJaMDMxMTAvBgNV
BAMTKEIwMzhEQzRDQTZCNzFCRUQyM0NCQTM3OTBBODEwRDhBRDVGODI1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRXYoQQNxDyWmPrMuCMC/Oih6
5+6aMrDNm29jlVDUQoZipeLxFjqpVefS+ZbMuCseIjGw2ns8ssw5JbyC3krm+Nmu
xc3HbA5f0EfkeAoZrsUu7qp48MkTX/RO0NmbN5a8bmrc2V0jKK+AMShqTOhtkyZ+
hPQCPECZP2ZwUeI/3PzyPH2XtuoSCrzCl90XuY5pi9SFsiX4s2fjnj8B6cdof6G4
seSVGpW1STwXrqGZuCB85qC+4btR3Ert62KgZhCUlcX5m9H1xkEP8JAUe1SveVmU
yYo8li/3xJSWcr7DsUJ7gaY8Kdr9PdOGeIjHGuPZtiqgZwtLfMi4EwrWRJ8JAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsDjcTKa3G+0jy6N5CoENitX4JWAwHwYDVR0j
BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG
NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv
MzIzODMwMzQzYTMxMzczNzM4M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEF3jgMA0GCSqGSIb3DQEBCwUA
A4IBAQCxYqaqUX3G1D1XyrehTPNfn4CjQyDNTdYJL23HmZLIBRFG6mqK3aDQUeNY
/N8qUCZQrDzbNKxNheGvghGqfjuYf15ZB6lQg8dVVXaqzt0xZNEcjq2tDvU3NKeA
Wl1VQoPArKkiI+loRA96lZQ3tU6H+vX71+RIE94xY6zyS9ZEtTSxXfUrINuDVD/K
6kquTicoT+hWs5xo9iWf6Bwr5UJYuPoQmakStbiDugfc8Ibo9h2jduedyTF+Mtia
UaLvoq7mzNfTU958ByPAJTglq29nrd/TBRm4pE7PjfXhcxRr5HQk9CM6TBYOMVEK
9QQcBffB9pIUtb/QwHuQhLPgjqG4
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:28:46 2025 by rpki-client