Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa
File:                     323830343a353966383a3a2f33322d313238203d3e20323638373337.roa (raw, json)
Hash identifier:          36iucRR7kKtUxAKa39/CQHui+jhvMZ1ZsLlzYBYfc6U=
Subject key identifier:   A0:67:98:7A:5C:53:44:C1:B9:32:73:3D:A5:20:34:60:0E:00:C8:90
Certificate issuer:       /CN=5ECF0B69B6A75645B9568189FE8781FF6203232B
Certificate serial:       30D3C5F169AEC17AB42D36D9F2C4531FCF60AFBD
Authority key identifier: 5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa
Signing time:             Mon 31 Mar 2025 17:57:09 +0000
ROA not before:           Mon 31 Mar 2025 17:52:09 +0000
ROA not after:            Mon 30 Mar 2026 17:57:09 +0000
asID:                     268737
IP address blocks:        2804:59f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.crl
                          rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 13:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d3:c5:f1:69:ae:c1:7a:b4:2d:36:d9:f2:c4:53:1f:cf:60:af:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECF0B69B6A75645B9568189FE8781FF6203232B
        Validity
            Not Before: Mar 31 17:52:09 2025 GMT
            Not After : Mar 30 17:57:09 2026 GMT
        Subject: CN=A067987A5C5344C1B932733DA52034600E00C890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:e1:49:a9:5e:5f:68:25:31:22:a4:0f:70:
                    16:f9:07:3d:b5:84:a8:aa:8b:0e:a9:91:20:a5:6d:
                    b4:96:39:88:54:68:3f:4d:f0:23:8f:15:61:be:53:
                    b0:10:10:11:02:9d:fa:15:54:4f:f2:b5:ef:5f:20:
                    e6:e6:37:2a:37:ff:0c:2b:49:5a:3b:ce:71:ca:a5:
                    f1:f3:d5:c1:b5:40:61:cd:10:a5:eb:f0:b6:b1:5a:
                    f6:62:51:4c:e8:80:c3:b8:53:3d:a9:e8:4d:a8:05:
                    4f:ef:dd:4f:f9:e2:90:55:dc:53:d1:05:0f:67:50:
                    5b:9f:87:4f:f1:46:ba:ee:9b:1d:e4:5e:0e:95:f3:
                    09:26:e5:95:dc:6e:48:a3:bb:9f:98:2d:f1:ac:dd:
                    f2:e6:19:14:30:11:68:60:f3:53:a9:d1:40:fc:45:
                    be:09:c1:3f:64:e1:7d:ea:07:5a:ea:a7:89:e3:2b:
                    60:82:a1:4d:44:44:eb:e1:80:cb:06:1c:2e:ab:09:
                    2d:e5:f9:05:fc:b4:96:e1:06:b5:28:4f:96:50:f0:
                    e7:9b:48:db:f8:a8:95:4c:42:55:3d:66:2a:04:0e:
                    b2:88:34:f7:92:d2:2c:54:a9:ec:18:70:48:31:58:
                    96:0c:2f:cc:d2:d1:e8:27:8d:72:8f:f9:f3:33:8a:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:67:98:7A:5C:53:44:C1:B9:32:73:3D:A5:20:34:60:0E:00:C8:90
            X509v3 Authority Key Identifier:
                keyid:5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/323830343a353966383a3a2f33322d313238203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:ef:d1:f2:70:c0:ce:4b:d4:23:c7:5b:81:14:0f:28:76:
         3d:6a:5e:04:c2:27:4e:59:f8:a0:5a:9e:a7:33:74:15:c2:a8:
         3d:25:69:eb:38:8a:a8:1d:f7:cc:9a:95:91:e4:94:62:7a:8d:
         66:41:13:a4:2d:72:6f:4f:31:43:d6:b0:1e:b1:44:2f:a6:41:
         f1:04:f0:34:1f:b1:25:c3:74:a8:09:a0:a5:d4:eb:e5:a8:51:
         52:0c:ba:93:db:10:1e:aa:41:8d:f5:a4:3e:59:81:e6:42:6a:
         fe:3a:d6:7f:89:6a:9c:a0:55:9d:f8:6e:d0:5b:3c:02:4d:15:
         8b:73:f2:c1:8e:4a:f3:ab:86:ce:dc:8a:0b:81:f0:7e:98:4b:
         f8:44:e8:0e:11:65:bd:70:55:c7:33:99:de:b6:c9:43:d4:1b:
         f4:dd:32:6b:6e:85:f2:b7:a8:43:5c:df:b2:6e:ce:d2:de:7c:
         4e:ba:0f:dc:8a:b3:c7:5a:d0:13:af:eb:5f:a9:d2:d7:05:30:
         3d:11:0c:c3:55:38:19:c3:4b:55:a8:28:1b:b4:d5:91:fb:03:
         07:7b:b4:91:40:37:f5:76:b8:f7:58:ca:56:02:b3:5a:66:7f:
         64:a1:72:c5:3e:db:22:3f:b6:9a:8d:f1:1b:02:62:f7:64:1a:
         81:ee:94:89
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUMNPF8WmuwXq0LTbZ8sRTH89gr70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDRjBCNjlCNkE3NTY0NUI5NTY4MTg5RkU4NzgxRkY2
MjAzMjMyQjAeFw0yNTAzMzExNzUyMDlaFw0yNjAzMzAxNzU3MDlaMDMxMTAvBgNV
BAMTKEEwNjc5ODdBNUM1MzQ0QzFCOTMyNzMzREE1MjAzNDYwMEUwMEM4OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEOFJqV5faCUxIqQPcBb5Bz21
hKiqiw6pkSClbbSWOYhUaD9N8COPFWG+U7AQEBECnfoVVE/yte9fIObmNyo3/wwr
SVo7znHKpfHz1cG1QGHNEKXr8LaxWvZiUUzogMO4Uz2p6E2oBU/v3U/54pBV3FPR
BQ9nUFufh0/xRrrumx3kXg6V8wkm5ZXcbkiju5+YLfGs3fLmGRQwEWhg81Op0UD8
Rb4JwT9k4X3qB1rqp4njK2CCoU1EROvhgMsGHC6rCS3l+QX8tJbhBrUoT5ZQ8Oeb
SNv4qJVMQlU9ZioEDrKINPeS0ixUqewYcEgxWJYML8zS0egnjXKP+fMzimddAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoGeYelxTRMG5MnM9pSA0YA4AyJAwHwYDVR0j
BBgwFoAUXs8LabanVkW5VoGJ/oeB/2IDIyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtuOHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2
aUsvMC81RUNGMEI2OUI2QTc1NjQ1Qjk1NjgxODlGRTg3ODFGRjYyMDMyMzJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQ0YwQjY5QjZBNzU2NDVC
OTU2ODE4OUZFODc4MUZGNjIwMzIzMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLbjh3Z1FhcnBvMzZnb2hSM3N4YXV1VmdDUjZnR1dkTEZYZVZjYTR3dmlLLzAv
MzIzODMwMzQzYTM1Mzk2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFn4MA0GCSqGSIb3DQEBCwUAA4IBAQAcVu/R
8nDAzkvUI8dbgRQPKHY9al4EwidOWfigWp6nM3QVwqg9JWnrOIqoHffMmpWR5JRi
eo1mQROkLXJvTzFD1rAesUQvpkHxBPA0H7Elw3SoCaCl1OvlqFFSDLqT2xAeqkGN
9aQ+WYHmQmr+OtZ/iWqcoFWd+G7QWzwCTRWLc/LBjkrzq4bO3IoLgfB+mEv4ROgO
EWW9cFXHM5netslD1Bv03TJrboXyt6hDXN+ybs7S3nxOug/cirPHWtATr+tfqdLX
BTA9EQzDVTgZw0tVqCgbtNWR+wMHe7SRQDf1drj3WMpWArNaZn9koXLFPtsiP7aa
jfEbAmL3ZBqB7pSJ
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:11:31 2025 by rpki-client