Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          Y+fE8BkqszrbIP4g4wpzOkGPcdjysr1CqPeEWpUGIuA=
Subject key identifier:   18:FA:B6:B1:5D:3F:C3:80:58:CD:0A:D7:0E:C9:4E:4E:D8:A9:B3:EC
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       7F814D05B67358631C2CCA99483846FD3D738E8D
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 06 Mar 2025 08:32:29 +0000
ROA not before:           Thu 06 Mar 2025 08:27:29 +0000
ROA not after:            Thu 05 Mar 2026 08:32:29 +0000
asID:                     269647
IP address blocks:        2804:67bc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 08:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:81:4d:05:b6:73:58:63:1c:2c:ca:99:48:38:46:fd:3d:73:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Mar  6 08:27:29 2025 GMT
            Not After : Mar  5 08:32:29 2026 GMT
        Subject: CN=18FAB6B15D3FC38058CD0AD70EC94E4ED8A9B3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:f4:40:04:22:78:b0:6b:da:e7:8c:08:91:
                    e9:dc:56:d4:06:ab:e8:4c:6a:7b:5b:3b:56:57:49:
                    4a:7a:d7:e7:f7:95:3f:dd:c1:fc:a5:a7:75:47:26:
                    bf:20:65:48:7e:42:c2:8f:a2:53:58:72:71:99:1e:
                    ff:3f:5d:9f:ee:69:32:f0:63:89:1d:d8:1d:9f:64:
                    48:2d:4b:0e:1d:16:d4:ae:16:42:5f:cf:94:7a:66:
                    39:e7:84:34:9b:03:ed:d8:cc:ed:f9:ea:35:72:78:
                    9b:24:d0:07:79:4d:a9:42:fd:c9:3e:8a:92:5c:45:
                    95:b6:97:31:bb:85:35:b9:2f:92:16:17:b0:7b:0c:
                    66:b9:ca:f2:24:03:0c:2b:d9:82:d7:5f:de:69:21:
                    0b:60:91:7b:38:15:fb:12:cb:21:8b:ee:4e:6d:4f:
                    7c:0a:f0:b2:a7:81:e2:a9:0d:70:e7:48:9c:99:4d:
                    a5:88:fe:e9:09:cd:54:6f:8d:68:a4:75:f3:cf:7d:
                    59:0e:05:a5:cf:3d:56:75:c1:73:ee:25:0e:ba:09:
                    60:04:ac:bc:d6:21:e9:a7:b9:91:d7:45:8e:be:48:
                    b5:9e:0a:fc:db:f2:c6:59:e3:23:d4:8a:f0:fd:d4:
                    d9:08:95:cf:f6:72:77:90:f4:a4:77:4d:4d:3d:2d:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FA:B6:B1:5D:3F:C3:80:58:CD:0A:D7:0E:C9:4E:4E:D8:A9:B3:EC
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         af:c8:63:7d:48:2d:74:c8:9f:25:40:d6:5f:d6:17:5c:15:45:
         33:ed:09:ee:e8:73:d2:2c:b9:9e:59:3b:46:e1:1b:0c:3a:79:
         4c:36:8e:57:0d:7d:66:67:ea:87:20:9f:bf:e5:f3:51:74:44:
         cd:4b:4c:a1:d0:13:7a:e9:8b:cc:ff:0c:b2:97:e2:62:a7:8f:
         8a:37:2d:f1:1c:32:eb:29:34:bc:ba:d7:06:40:82:b5:48:30:
         92:24:f7:20:68:9a:36:57:4a:b0:26:7c:d7:4d:11:74:3b:46:
         92:09:ab:94:77:ba:5c:b5:99:4a:0e:9a:1b:5e:ae:53:f3:3f:
         ec:3d:14:04:c7:8d:e6:55:aa:7f:51:b5:3a:60:4d:f0:f9:f1:
         07:41:78:07:93:5e:33:0d:c1:3a:e7:b4:ca:1d:de:f3:76:53:
         d2:36:a0:fb:8d:53:a5:6a:af:83:9c:dd:64:cf:30:fa:e7:ad:
         88:96:ec:ed:13:e3:6c:00:ef:43:ee:63:2b:b4:4e:18:c8:e6:
         39:13:f1:b6:60:cd:66:d9:3c:9f:d2:d1:74:4c:99:8e:a0:e1:
         0b:c4:a5:c5:5b:88:b8:76:e2:75:5d:cf:a4:ee:c1:68:c3:59:
         a5:24:fb:90:8c:1a:c0:6a:e0:f3:70:30:a6:f2:4f:08:07:15:
         f1:8e:e9:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf4FNBbZzWGMcLMqZSDhG/T1zjo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1Rjc4RTYzMDM5ODQ3N0U5QkFFOTc2QjNFQUVEQjAw
NTk5OTREQjAeFw0yNTAzMDYwODI3MjlaFw0yNjAzMDUwODMyMjlaMDMxMTAvBgNV
BAMTKDE4RkFCNkIxNUQzRkMzODA1OENEMEFENzBFQzk0RTRFRDhBOUIzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdPRABCJ4sGva54wIkencVtQG
q+hMantbO1ZXSUp61+f3lT/dwfylp3VHJr8gZUh+QsKPolNYcnGZHv8/XZ/uaTLw
Y4kd2B2fZEgtSw4dFtSuFkJfz5R6ZjnnhDSbA+3YzO356jVyeJsk0Ad5TalC/ck+
ipJcRZW2lzG7hTW5L5IWF7B7DGa5yvIkAwwr2YLXX95pIQtgkXs4FfsSyyGL7k5t
T3wK8LKngeKpDXDnSJyZTaWI/ukJzVRvjWikdfPPfVkOBaXPPVZ1wXPuJQ66CWAE
rLzWIemnuZHXRY6+SLWeCvzb8sZZ4yPUivD91NkIlc/2cneQ9KR3TU09LcvzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGPq2sV0/w4BYzQrXDslOTtips+wwHwYDVR0j
BBgwFoAU2V945jA5hHfpuul2s+rtsAWZlNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMS9EOTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUY3OEU2MzAzOTg0NzdF
OUJBRTk3NkIzRUFFREIwMDU5OTk0REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhURjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzEv
MzIzODMwMzQzYTM2Mzc2MjYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzYzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARnvAAwDQYJKoZIhvcNAQELBQADggEBAK/IY31I
LXTInyVA1l/WF1wVRTPtCe7oc9IsuZ5ZO0bhGww6eUw2jlcNfWZn6ocgn7/l81F0
RM1LTKHQE3rpi8z/DLKX4mKnj4o3LfEcMuspNLy61wZAgrVIMJIk9yBomjZXSrAm
fNdNEXQ7RpIJq5R3uly1mUoOmhterlPzP+w9FATHjeZVqn9RtTpgTfD58QdBeAeT
XjMNwTrntMod3vN2U9I2oPuNU6Vqr4Oc3WTPMPrnrYiW7O0T42wA70PuYyu0ThjI
5jkT8bZgzWbZPJ/S0XRMmY6g4QvEpcVbiLh24nVdz6TuwWjDWaUk+5CMGsBq4PNw
MKbyTwgHFfGO6aw=
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:00:01 2025 by rpki-client