Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=
Subject key identifier:   5F:07:FD:5A:13:F3:D1:CB:9C:E4:D1:1B:50:7A:92:53:61:57:AD:A0
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       57DFED880F88A5F03B17F120E62FEB52155BC8B3
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Mon 23 Dec 2024 13:30:33 +0000
ROA not before:           Mon 23 Dec 2024 13:25:33 +0000
ROA not after:            Mon 22 Dec 2025 13:30:33 +0000
asID:                     272518
IP address blocks:        2804:8268:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:ed:88:0f:88:a5:f0:3b:17:f1:20:e6:2f:eb:52:15:5b:c8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Dec 23 13:25:33 2024 GMT
            Not After : Dec 22 13:30:33 2025 GMT
        Subject: CN=5F07FD5A13F3D1CB9CE4D11B507A92536157ADA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:9d:09:ea:75:d3:b3:d1:72:c4:6c:33:a2:
                    19:d0:ea:d4:6e:35:77:91:ca:77:6a:64:4d:23:df:
                    b7:74:c0:b2:93:b8:fd:3f:78:7c:30:41:13:b5:80:
                    a7:13:93:a8:28:29:b3:52:c1:70:1e:1b:8e:0a:81:
                    16:48:15:5b:ba:2d:5c:9f:47:b1:4c:bd:af:99:bc:
                    1a:3d:3d:e2:08:c2:c4:1d:e8:d3:e0:d1:24:89:20:
                    8b:46:24:53:d6:08:fb:21:f2:d3:16:08:5e:ca:b5:
                    53:aa:39:97:8a:51:a6:2c:5d:65:ab:36:8d:fa:34:
                    bf:b0:2b:da:bb:0e:4e:c3:8a:67:32:e0:7c:98:d4:
                    05:5f:3f:8e:f0:79:7b:8f:38:c8:59:c9:a0:87:16:
                    8f:d7:e6:cb:a7:80:c2:f2:75:e9:8e:5e:71:5e:5c:
                    88:57:6c:a8:2c:e1:0d:c4:40:33:74:25:28:03:71:
                    89:60:a2:0a:18:96:38:be:1c:31:6c:c8:99:bd:69:
                    00:7c:58:5a:72:8e:94:2e:30:06:04:09:88:14:e3:
                    6e:6a:bc:2f:f3:c8:f1:f8:a1:a1:49:a5:1e:9f:eb:
                    81:74:0b:d5:8d:66:62:db:4d:20:64:5a:f1:12:d9:
                    f7:34:ce:d6:53:8f:c9:a0:b5:1c:25:72:c6:08:be:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:FD:5A:13:F3:D1:CB:9C:E4:D1:1B:50:7A:92:53:61:57:AD:A0
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:80:59:35:bd:7b:ac:6e:ee:c6:14:82:a5:6b:d5:86:44:
         34:1d:c1:03:81:42:a4:13:80:13:51:a4:93:26:c6:41:73:f7:
         91:14:83:cf:9f:c9:ff:51:eb:fc:cb:3a:5b:cb:1a:d9:5b:2a:
         43:05:67:9d:25:46:9a:79:0a:af:4b:34:5c:c0:98:41:bf:05:
         94:0e:5f:15:6f:ff:05:6d:b4:b0:12:f2:5c:4c:a5:cd:b8:f4:
         a1:9d:e7:41:ca:2b:69:12:64:ec:56:a6:f3:cd:18:a9:e3:06:
         3b:f4:ac:1c:83:44:9b:c7:6f:79:d1:b5:3a:6b:23:48:a9:89:
         9b:8b:db:fd:67:73:e1:2a:b2:92:5b:f7:17:b1:71:66:5c:b7:
         c1:be:fc:a7:fa:13:b6:99:d3:95:29:87:76:57:cc:08:f1:7e:
         8c:d0:f4:42:6d:ee:fe:6c:3e:5d:b4:a6:f6:1c:76:17:0c:3a:
         fa:1b:36:ff:86:9a:87:8b:ba:5c:61:49:a8:2b:49:58:53:32:
         78:70:27:67:b6:ae:ab:ea:fd:fc:6a:0e:0d:08:aa:8b:43:4f:
         9f:e8:13:3b:5c:0a:7b:35:7f:3f:30:57:73:5b:67:fb:ac:5f:
         f6:5e:90:56:4c:91:13:8a:cd:74:ca:1d:65:46:f5:54:b6:df:
         52:16:6e:18
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUV9/tiA+IpfA7F/Eg5i/rUhVbyLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5
NEE3RUE5NDAeFw0yNDEyMjMxMzI1MzNaFw0yNTEyMjIxMzMwMzNaMDMxMTAvBgNV
BAMTKDVGMDdGRDVBMTNGM0QxQ0I5Q0U0RDExQjUwN0E5MjUzNjE1N0FEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LJ0J6nXTs9FyxGwzohnQ6tRu
NXeRyndqZE0j37d0wLKTuP0/eHwwQRO1gKcTk6goKbNSwXAeG44KgRZIFVu6LVyf
R7FMva+ZvBo9PeIIwsQd6NPg0SSJIItGJFPWCPsh8tMWCF7KtVOqOZeKUaYsXWWr
No36NL+wK9q7Dk7Dimcy4HyY1AVfP47weXuPOMhZyaCHFo/X5sungMLydemOXnFe
XIhXbKgs4Q3EQDN0JSgDcYlgogoYlji+HDFsyJm9aQB8WFpyjpQuMAYECYgU425q
vC/zyPH4oaFJpR6f64F0C9WNZmLbTSBkWvES2fc0ztZTj8mgtRwlcsYIvndHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXwf9WhPz0cuc5NEbUHqSU2FXraAwHwYDVR0j
BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2
eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD
MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCMkdUaTdwWWpFZkdXeFlEYTZGamFMdEplc2hRRlhKc1U5U3NaZ1ZGNnh0LzAv
MzIzODMwMzQzYTM4MzIzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgmiAMA0GCSqGSIb3DQEBCwUA
A4IBAQA9YoBZNb17rG7uxhSCpWvVhkQ0HcEDgUKkE4ATUaSTJsZBc/eRFIPPn8n/
Uev8yzpbyxrZWypDBWedJUaaeQqvSzRcwJhBvwWUDl8Vb/8FbbSwEvJcTKXNuPSh
nedByitpEmTsVqbzzRip4wY79Kwcg0Sbx2950bU6ayNIqYmbi9v9Z3PhKrKSW/cX
sXFmXLfBvvyn+hO2mdOVKYd2V8wI8X6M0PRCbe7+bD5dtKb2HHYXDDr6Gzb/hpqH
i7pcYUmoK0lYUzJ4cCdntq6r6v38ag4NCKqLQ0+f6BM7XAp7NX8/MFdzW2f7rF/2
XpBWTJETis10yh1lRvVUtt9SFm4Y
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:39:32 2025 by rpki-client