Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          1zpcnl5fBzaXOL9c2rxGqnTwUeEDQbIsSY+zuL60/0g=
Subject key identifier:   EB:F8:12:E3:1F:6B:D1:69:D4:65:E6:43:E0:92:2D:98:2A:94:3C:FB
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       79310E5834898B40946132E47E20FD1FD7FE95F7
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:26 +0000
ROA not before:           Wed 26 Mar 2025 14:04:26 +0000
ROA not after:            Wed 25 Mar 2026 14:09:26 +0000
asID:                     268009
IP address blocks:        2804:5690:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 12:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:31:0e:58:34:89:8b:40:94:61:32:e4:7e:20:fd:1f:d7:fe:95:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:26 2025 GMT
            Not After : Mar 25 14:09:26 2026 GMT
        Subject: CN=EBF812E31F6BD169D465E643E0922D982A943CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:b7:a3:23:d0:6c:83:21:36:68:69:81:c3:
                    ab:7e:64:23:96:0b:0e:79:70:10:5b:e6:81:dc:7b:
                    e4:34:d6:53:a1:8b:d3:15:9a:ce:c4:21:02:7f:16:
                    63:1d:8e:6d:4a:e5:a1:2a:ef:10:cd:7c:63:2e:29:
                    17:d9:ad:3d:9a:12:bf:69:bb:2d:80:8d:2e:e9:54:
                    13:b9:91:35:78:6e:91:5d:ef:4a:00:f7:95:37:4b:
                    2e:00:39:7a:0c:9d:af:56:cb:c8:37:20:57:f9:19:
                    d0:69:41:be:57:c3:16:1a:01:9f:b4:0e:e7:1c:03:
                    e1:04:b4:6c:2c:31:a3:d3:3e:fc:5c:e1:e0:86:91:
                    35:35:9c:cd:6a:b7:ce:77:dd:fb:9a:40:b1:27:52:
                    e2:0a:96:c6:e2:b1:73:4b:74:ca:af:86:14:77:d6:
                    02:f3:9d:ef:c5:9e:d7:4e:80:c3:6f:df:fb:0e:de:
                    71:59:06:8c:2e:ab:9a:7f:44:9d:96:b4:70:1f:6a:
                    a2:5b:8a:d1:7d:a8:08:7c:e8:f6:aa:85:db:30:4d:
                    b0:1a:8a:9a:71:8f:8a:2b:04:9c:12:56:f2:09:c1:
                    e3:a0:24:06:50:7b:a9:4c:ab:5b:dd:2a:8a:86:d3:
                    e8:50:04:9b:12:c2:6f:9e:f3:a2:f8:dc:15:23:89:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:12:E3:1F:6B:D1:69:D4:65:E6:43:E0:92:2D:98:2A:94:3C:FB
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:29:32:18:9e:0d:c5:d8:df:6d:01:d4:77:a3:00:20:ee:46:
         1d:4c:ef:95:16:48:e7:48:dd:6e:a4:74:e1:63:df:97:1e:34:
         c2:71:72:ca:8a:af:36:40:66:ab:d0:08:f8:d3:bb:e6:75:23:
         a1:a6:58:82:f8:d9:bf:e4:81:bf:9b:ab:0c:a1:a4:8b:41:cf:
         b0:d6:4b:d6:5a:ba:80:9c:8c:ec:66:f2:a1:b3:e5:63:f3:d2:
         3e:0c:e9:8a:74:60:d0:c0:42:dc:db:64:43:5d:c1:e8:b9:08:
         97:66:cf:1f:28:02:73:2f:a7:8e:7e:41:e5:6b:65:2f:51:49:
         28:be:28:61:1b:c4:e1:97:3c:11:84:ec:c9:e0:81:00:9f:18:
         cf:5d:22:c2:9a:44:ee:f0:0b:3e:92:f1:cb:67:76:80:20:16:
         17:c6:47:3a:00:7b:50:df:c9:e3:34:bf:ad:4a:da:50:11:65:
         c2:8b:fa:da:04:03:d5:86:bb:ce:22:2d:35:dd:15:a9:7b:fd:
         e4:31:a6:45:2a:b8:28:04:65:18:93:41:c2:e9:d8:93:70:ce:
         4f:07:30:09:d6:98:1a:60:b3:ce:2a:f1:84:27:75:dc:80:76:
         98:fb:cd:e9:b1:e1:92:ee:f0:b6:9a:52:42:e0:92:7e:57:09:
         ee:70:3e:6e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeTEOWDSJi0CUYTLkfiD9H9f+lfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGNDYxMEJGMUQwNjEwNkJBNTBEMTRFODU5MDAwODlE
MDhDNjU4RjAeFw0yNTAzMjYxNDA0MjZaFw0yNjAzMjUxNDA5MjZaMDMxMTAvBgNV
BAMTKEVCRjgxMkUzMUY2QkQxNjlENDY1RTY0M0UwOTIyRDk4MkE5NDNDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHrejI9BsgyE2aGmBw6t+ZCOW
Cw55cBBb5oHce+Q01lOhi9MVms7EIQJ/FmMdjm1K5aEq7xDNfGMuKRfZrT2aEr9p
uy2AjS7pVBO5kTV4bpFd70oA95U3Sy4AOXoMna9Wy8g3IFf5GdBpQb5XwxYaAZ+0
DuccA+EEtGwsMaPTPvxc4eCGkTU1nM1qt8533fuaQLEnUuIKlsbisXNLdMqvhhR3
1gLzne/FntdOgMNv3/sO3nFZBowuq5p/RJ2WtHAfaqJbitF9qAh86PaqhdswTbAa
ippxj4orBJwSVvIJweOgJAZQe6lMq1vdKoqG0+hQBJsSwm+e86L43BUjiTJlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6/gS4x9r0WnUZeZD4JItmCqUPPswHwYDVR0j
BBgwFoAUP/RhC/HQYQa6UNFOhZAAidCMZY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFkZXZYaHRaenpkYVZpa0hkVG5jdVpuRURDUFdCYWM1Ym1YRVhBcTd5
NDMvMC8zRkY0NjEwQkYxRDA2MTA2QkE1MEQxNEU4NTkwMDA4OUQwOEM2NThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjQ2MTBCRjFEMDYxMDZC
QTUwRDE0RTg1OTAwMDg5RDA4QzY1OEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhxZGV2WGh0Wnp6ZGFWaWtIZFRuY3VabkVEQ1BXQmFjNWJtWEVYQXE3eTQzLzAv
MzIzODMwMzQzYTM1MzYzOTMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVpDwMA0GCSqGSIb3DQEBCwUA
A4IBAQCUKTIYng3F2N9tAdR3owAg7kYdTO+VFkjnSN1upHThY9+XHjTCcXLKiq82
QGar0Aj407vmdSOhpliC+Nm/5IG/m6sMoaSLQc+w1kvWWrqAnIzsZvKhs+Vj89I+
DOmKdGDQwELc22RDXcHouQiXZs8fKAJzL6eOfkHla2UvUUkovihhG8ThlzwRhOzJ
4IEAnxjPXSLCmkTu8As+kvHLZ3aAIBYXxkc6AHtQ38njNL+tStpQEWXCi/raBAPV
hrvOIi013RWpe/3kMaZFKrgoBGUYk0HC6diTcM5PBzAJ1pgaYLPOKvGEJ3XcgHaY
+83pseGS7vC2mlJC4JJ+VwnucD5u
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:12 2025 by rpki-client