Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/323830343a353138303a3a2f33322d313238203d3e20323638343536.roa
File:                     323830343a353138303a3a2f33322d313238203d3e20323638343536.roa (raw, json)
Hash identifier:          nX6pD6WWoRZ8fwRijcpbptii+vEusryPHN3lae/oj4E=
Subject key identifier:   72:80:83:33:01:53:80:C1:0E:E4:FF:C5:C6:6A:8E:F6:EC:0C:15:DB
Certificate issuer:       /CN=47F7BDC381D25855954B36ACF82259F7CE8074E5
Certificate serial:       3CF4BE0336BB8E5BB56E54B753441CAA1664655D
Authority key identifier: 47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/323830343a353138303a3a2f33322d313238203d3e20323638343536.roa
Signing time:             Wed 30 Apr 2025 15:09:02 +0000
ROA not before:           Wed 30 Apr 2025 15:04:02 +0000
ROA not after:            Wed 29 Apr 2026 15:09:02 +0000
asID:                     268456
IP address blocks:        2804:5180::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl
                          rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:be:03:36:bb:8e:5b:b5:6e:54:b7:53:44:1c:aa:16:64:65:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F7BDC381D25855954B36ACF82259F7CE8074E5
        Validity
            Not Before: Apr 30 15:04:02 2025 GMT
            Not After : Apr 29 15:09:02 2026 GMT
        Subject: CN=72808333015380C10EE4FFC5C66A8EF6EC0C15DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:b9:1f:ca:60:23:10:e8:b0:0d:c2:b3:c3:
                    b6:d5:a3:c7:8c:de:98:00:c2:85:dd:45:45:e3:fd:
                    0f:ee:e1:6f:87:79:a5:d6:a7:21:0b:26:f0:86:1b:
                    14:82:c2:b9:16:6d:f1:dc:65:04:8f:62:fb:ed:1f:
                    3f:c5:7b:1b:11:91:15:e7:f1:c3:69:85:9f:2a:5e:
                    39:b3:00:67:a8:8a:d1:df:64:7c:01:9a:30:81:9a:
                    d9:48:d0:4f:25:4b:4e:5c:74:f9:67:b8:66:24:7c:
                    67:4d:81:da:1f:35:71:77:08:23:e7:30:11:1f:2b:
                    86:56:ab:c7:3a:83:07:f7:42:63:64:ac:5f:a0:d7:
                    a5:74:63:ca:e1:17:2f:12:52:7b:bc:bc:2f:cb:7c:
                    4a:11:87:c2:26:1c:53:9d:fe:96:85:f5:37:58:ee:
                    df:24:9f:4d:8d:7f:83:ce:d9:04:ff:d9:c0:4a:3f:
                    e4:01:d5:a7:27:61:53:3a:4c:dd:2b:36:18:1c:89:
                    31:af:cf:96:dd:78:b6:3e:07:fa:05:a5:3e:04:46:
                    56:ca:5a:0e:ef:51:3f:80:54:d1:89:f9:ac:cc:a5:
                    88:15:50:68:29:f4:4e:3a:b1:01:62:3e:b8:e3:33:
                    66:a6:4b:63:4b:82:74:73:0d:dd:8c:a6:49:35:17:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:83:33:01:53:80:C1:0E:E4:FF:C5:C6:6A:8E:F6:EC:0C:15:DB
            X509v3 Authority Key Identifier:
                keyid:47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/323830343a353138303a3a2f33322d313238203d3e20323638343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:8e:a9:60:a2:95:dd:e5:0b:d0:73:bf:f8:74:e8:21:79:
         55:f3:e1:51:11:9a:51:39:0d:6f:c7:5e:bb:06:dd:fb:b0:9b:
         d2:3c:c0:da:89:9d:da:a2:e0:ca:b6:db:6d:d2:3e:ac:b5:45:
         2c:25:80:d6:63:56:0f:b8:9a:0f:72:b4:e2:86:dd:ad:93:b9:
         d5:ab:94:74:da:12:17:ca:53:f2:9d:35:08:91:52:21:2c:89:
         21:93:53:e3:c1:04:7e:8b:76:b0:70:5e:36:7a:4a:a2:cf:55:
         3c:b6:8d:ee:14:a4:da:11:79:13:e1:66:ea:d8:c8:db:06:ed:
         98:19:ed:93:52:71:d1:bf:ce:08:15:79:2e:f8:55:a0:37:e5:
         60:64:8f:ba:f7:77:56:1f:f3:cb:6c:bc:58:be:ec:df:c2:ea:
         b1:67:2e:37:ae:c7:5a:f3:31:12:c3:fc:71:cc:72:38:a7:3e:
         31:00:71:61:af:66:cb:a6:1e:64:0a:b0:3c:f7:da:05:b6:63:
         2c:61:b6:d5:77:19:45:36:0f:61:c9:ad:a4:2e:1b:9c:d5:d6:
         d7:b2:78:2e:07:cf:b1:e5:f4:26:fe:06:41:f1:22:82:4a:ba:
         7f:b5:9a:d7:1a:60:c5:af:09:56:a0:03:71:12:b2:fb:28:8e:
         fd:d2:77:eb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPPS+Aza7jlu1blS3U0QcqhZkZV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGN0JEQzM4MUQyNTg1NTk1NEIzNkFDRjgyMjU5RjdD
RTgwNzRFNTAeFw0yNTA0MzAxNTA0MDJaFw0yNjA0MjkxNTA5MDJaMDMxMTAvBgNV
BAMTKDcyODA4MzMzMDE1MzgwQzEwRUU0RkZDNUM2NkE4RUY2RUMwQzE1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgF7kfymAjEOiwDcKzw7bVo8eM
3pgAwoXdRUXj/Q/u4W+HeaXWpyELJvCGGxSCwrkWbfHcZQSPYvvtHz/FexsRkRXn
8cNphZ8qXjmzAGeoitHfZHwBmjCBmtlI0E8lS05cdPlnuGYkfGdNgdofNXF3CCPn
MBEfK4ZWq8c6gwf3QmNkrF+g16V0Y8rhFy8SUnu8vC/LfEoRh8ImHFOd/paF9TdY
7t8kn02Nf4PO2QT/2cBKP+QB1acnYVM6TN0rNhgciTGvz5bdeLY+B/oFpT4ERlbK
Wg7vUT+AVNGJ+azMpYgVUGgp9E46sQFiPrjjM2amS2NLgnRzDd2Mpkk1F74HAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcoCDMwFTgMEO5P/FxmqO9uwMFdswHwYDVR0j
BBgwFoAUR/e9w4HSWFWVSzas+CJZ986AdOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJoM2ZpMjl6cVJUcHRTazlFdm9neUJQUmNXQlhlYlhYZER2aGpCWG9q
OU0vMC80N0Y3QkRDMzgxRDI1ODU1OTU0QjM2QUNGODIyNTlGN0NFODA3NEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjdCREMzODFEMjU4NTU5
NTRCMzZBQ0Y4MjI1OUY3Q0U4MDc0RTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCaDNmaTI5enFSVHB0U2s5RXZvZ3lCUFJjV0JYZWJYWGREdmhqQlhvajlNLzAv
MzIzODMwMzQzYTM1MzEzODMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFGAMA0GCSqGSIb3DQEBCwUAA4IBAQBfg46p
YKKV3eUL0HO/+HToIXlV8+FREZpROQ1vx167Bt37sJvSPMDaiZ3aouDKtttt0j6s
tUUsJYDWY1YPuJoPcrTiht2tk7nVq5R02hIXylPynTUIkVIhLIkhk1PjwQR+i3aw
cF42ekqiz1U8to3uFKTaEXkT4Wbq2MjbBu2YGe2TUnHRv84IFXku+FWgN+VgZI+6
93dWH/PLbLxYvuzfwuqxZy43rsda8zESw/xxzHI4pz4xAHFhr2bLph5kCrA899oF
tmMsYbbVdxlFNg9hya2kLhuc1dbXsnguB8+x5fQm/gZB8SKCSrp/tZrXGmDFrwlW
oANxErL7KI790nfr
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:45:46 2025 by rpki-client