Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33332d3333203d3e20323638363834.roa
File:                     323830343a353530343a383030303a3a2f33332d3333203d3e20323638363834.roa (raw, json)
Hash identifier:          3eHuIap5nlXBtoMm6DyOfdtMjl7MnH3EueW5651GgZI=
Subject key identifier:   27:E6:FD:02:8F:E7:EC:2A:50:56:C9:0B:E5:61:AE:3A:18:63:69:EB
Certificate issuer:       /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial:       7764FEB0103E461685DC0465EBE2CA87EBB8614B
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33332d3333203d3e20323638363834.roa
Signing time:             Wed 22 Jan 2025 20:39:15 +0000
ROA not before:           Wed 22 Jan 2025 20:34:15 +0000
ROA not after:            Wed 21 Jan 2026 20:39:15 +0000
asID:                     268684
IP address blocks:        2804:5504:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 15:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:64:fe:b0:10:3e:46:16:85:dc:04:65:eb:e2:ca:87:eb:b8:61:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
        Validity
            Not Before: Jan 22 20:34:15 2025 GMT
            Not After : Jan 21 20:39:15 2026 GMT
        Subject: CN=27E6FD028FE7EC2A5056C90BE561AE3A186369EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:fb:23:29:c5:dd:64:1a:1e:0d:40:2d:35:
                    d9:de:d7:0a:57:f7:0d:18:4e:c1:58:fd:a3:d4:ec:
                    34:8e:07:44:01:9d:44:f1:76:15:13:3e:9c:13:2f:
                    64:2c:eb:9a:20:0e:ca:15:a9:af:e1:13:0f:3a:9a:
                    40:0d:fe:e2:22:91:0c:48:12:7d:b9:7d:d6:90:d6:
                    5d:68:1d:b5:b2:50:a9:11:a3:9e:ad:fc:f7:3b:c4:
                    00:11:06:f2:c2:08:8b:cb:84:5a:9a:a8:d9:89:c5:
                    7d:13:af:81:8f:17:4e:a3:00:a3:ea:a0:d8:20:dd:
                    cf:1c:07:27:a9:44:a6:6d:cd:48:49:94:e0:9b:4b:
                    dd:4d:13:8e:4a:7d:a7:a3:7a:c7:3d:69:5a:be:07:
                    65:37:c7:9d:fc:9a:57:9c:7d:ca:3e:ed:3e:7c:02:
                    8d:f0:ec:a0:fe:1f:ff:62:b6:de:39:f2:91:fc:a7:
                    b8:a6:16:8b:93:06:bf:a4:98:6d:74:de:aa:1a:61:
                    12:21:69:74:cf:c6:23:de:68:ae:51:7b:16:24:a2:
                    34:0f:55:28:fd:d3:ad:4a:be:34:03:48:52:4f:a3:
                    a0:3a:22:a3:ea:60:b0:bc:84:d9:be:9a:37:db:5d:
                    25:66:86:6b:7b:21:24:30:8c:b6:e1:a3:fb:a2:1e:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:FD:02:8F:E7:EC:2A:50:56:C9:0B:E5:61:AE:3A:18:63:69:EB
            X509v3 Authority Key Identifier:
                keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a383030303a3a2f33332d3333203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5504:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:42:76:7c:be:05:e9:99:55:90:7a:77:72:35:86:fb:b4:
         d5:87:7e:83:8e:5e:90:4f:bf:13:fa:8e:b1:e5:01:35:19:d7:
         4e:93:2d:ec:c7:1a:a8:1d:6c:0d:22:2c:85:e8:34:1c:99:b1:
         96:92:42:1c:ba:ae:33:0d:d9:7d:64:3f:be:1a:54:93:13:68:
         d0:d9:51:5b:3a:b4:0b:10:35:bd:e4:05:4b:73:84:9c:2f:ec:
         8e:66:97:57:99:5b:25:6e:29:f4:2f:44:c0:52:31:56:69:54:
         99:e7:c1:c6:5c:09:63:80:c8:73:29:b0:c9:52:c8:81:5e:8b:
         a4:90:a5:58:ee:a6:9e:9a:b2:ab:e2:c6:f5:ce:a8:ee:83:3a:
         be:db:42:29:62:d4:c3:90:52:f3:4d:4b:0b:93:48:e9:7d:84:
         47:77:0e:f6:6f:d5:17:c0:da:f4:3f:9f:3b:18:35:52:fa:e2:
         84:95:49:b6:c5:97:5a:e2:fd:62:91:71:24:d5:c3:62:77:47:
         75:92:de:b7:6c:98:70:ad:a3:2b:af:50:0b:4e:87:4a:01:f4:
         53:65:38:6d:5e:80:ba:ee:1c:92:d0:e7:2d:4e:1a:fa:24:c2:
         27:ea:fd:f2:17:31:27:ae:79:43:13:e0:0d:da:6e:4f:7a:50:
         b0:72:50:44
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd2T+sBA+RhaF3ARl6+LKh+u4YUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1MThEMzVGMkU5MDY3MjU4MDRDOTkwNkVCN0Y3Q0E5
RTcyMzIyNTAeFw0yNTAxMjIyMDM0MTVaFw0yNjAxMjEyMDM5MTVaMDMxMTAvBgNV
BAMTKDI3RTZGRDAyOEZFN0VDMkE1MDU2QzkwQkU1NjFBRTNBMTg2MzY5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIvsjKcXdZBoeDUAtNdne1wpX
9w0YTsFY/aPU7DSOB0QBnUTxdhUTPpwTL2Qs65ogDsoVqa/hEw86mkAN/uIikQxI
En25fdaQ1l1oHbWyUKkRo56t/Pc7xAARBvLCCIvLhFqaqNmJxX0Tr4GPF06jAKPq
oNgg3c8cByepRKZtzUhJlOCbS91NE45Kfaejesc9aVq+B2U3x538mlecfco+7T58
Ao3w7KD+H/9itt458pH8p7imFouTBr+kmG103qoaYRIhaXTPxiPeaK5RexYkojQP
VSj9061KvjQDSFJPo6A6IqPqYLC8hNm+mjfbXSVmhmt7ISQwjLbho/uiHgxTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJ+b9Ao/n7CpQVskL5WGuOhhjaeswHwYDVR0j
BBgwFoAU4lGNNfLpBnJYBMmQbrf3yp5yMiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZMYXU5eEdhM3hNRU1Od0pQQnRjVmRmeDd5QzE2TGV3Um1aNk5TWUhS
R1ovMC9FMjUxOEQzNUYyRTkwNjcyNTgwNEM5OTA2RUI3RjdDQTlFNzIzMjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNTE4RDM1RjJFOTA2NzI1
ODA0Qzk5MDZFQjdGN0NBOUU3MjMyMjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmTGF1OXhHYTN4TUVNTndKUEJ0Y1ZkZng3eUMxNkxld1JtWjZOU1lIUkdaLzAv
MzIzODMwMzQzYTM1MzUzMDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEVQSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBKEEJ2fL4F6ZlVkHp3cjWG+7TVh36Djl6QT78T+o6x5QE1GddOky3sxxqo
HWwNIiyF6DQcmbGWkkIcuq4zDdl9ZD++GlSTE2jQ2VFbOrQLEDW95AVLc4ScL+yO
ZpdXmVslbin0L0TAUjFWaVSZ58HGXAljgMhzKbDJUsiBXoukkKVY7qaemrKr4sb1
zqjugzq+20IpYtTDkFLzTUsLk0jpfYRHdw72b9UXwNr0P587GDVS+uKElUm2xZda
4v1ikXEk1cNid0d1kt63bJhwraMrr1ALTodKAfRTZThtXoC67hyS0OctThr6JMIn
6v3yFzEnrnlDE+AN2m5PelCwclBE
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:53:52 2025 by rpki-client