Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          KkaheDp/SpMsNL9YNlCTdnsl4+lW70uBmzjoskOFRlc=
Subject key identifier:   F5:32:0D:CA:4B:A4:FD:60:EC:C2:36:EE:D4:10:2C:8B:0F:79:47:41
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       22DE25EAB67288FED055D1FF0D0D0C6E4F512E50
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:29 +0000
ROA not before:           Thu 06 Mar 2025 00:55:29 +0000
ROA not after:            Thu 05 Mar 2026 01:00:29 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:de:25:ea:b6:72:88:fe:d0:55:d1:ff:0d:0d:0c:6e:4f:51:2e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:29 2025 GMT
            Not After : Mar  5 01:00:29 2026 GMT
        Subject: CN=F5320DCA4BA4FD60ECC236EED4102C8B0F794741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:82:80:60:5a:37:81:a6:c1:4b:7c:08:ae:
                    5e:d4:47:57:b5:14:17:e1:71:ed:1c:1a:ca:3b:4e:
                    40:0d:e5:e4:20:fc:49:3a:d8:f2:c8:37:9a:32:13:
                    e8:b7:2f:f5:e9:ba:fd:d9:58:bc:68:a0:ac:f1:e3:
                    0b:92:11:9d:36:e8:69:dc:16:52:3e:88:52:e3:4f:
                    cb:41:b2:05:1a:9d:c3:aa:cd:a6:84:d2:d1:f0:2a:
                    37:62:10:74:52:4f:c7:67:e9:a2:31:f1:a6:c7:82:
                    74:a4:10:8c:e6:30:df:28:ca:a2:f4:cb:d3:2c:0a:
                    79:2e:96:13:8f:05:51:25:80:6c:2f:da:ac:30:3a:
                    81:db:f0:75:45:21:50:5e:5c:3d:8d:36:b9:fd:6d:
                    f6:b3:58:02:21:fd:a0:c8:e7:fd:b9:d9:b6:f0:b0:
                    ff:b3:25:65:72:f0:16:ae:80:8e:fc:35:f2:6c:ef:
                    e3:ef:99:c9:41:1e:f5:43:d9:88:72:d6:ff:6b:5b:
                    6b:44:04:00:56:89:9f:9b:e7:85:c9:e8:35:a9:30:
                    21:50:5e:16:61:d1:a3:4d:da:92:f8:ba:1f:cd:de:
                    c7:0f:78:5b:70:23:aa:fe:72:a1:cb:09:2d:9a:6e:
                    2e:66:c3:9c:ea:ef:ab:05:ea:45:a4:9c:2a:f8:b0:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:0D:CA:4B:A4:FD:60:EC:C2:36:EE:D4:10:2C:8B:0F:79:47:41
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:f2:4d:cc:a2:26:ca:c3:67:76:b2:ac:23:dd:9a:f1:92:
         cd:6d:72:b0:9b:ba:99:fa:da:2a:3b:f5:bb:d3:a2:d2:9f:29:
         06:e5:83:f7:e4:f6:52:41:67:ab:4b:0e:49:b5:06:c9:cc:17:
         33:58:87:5b:5a:ad:53:2e:e4:f2:a2:1a:0d:52:be:77:2d:a0:
         87:45:a6:c1:ce:9c:77:00:61:62:e0:22:75:81:0d:01:e8:76:
         c3:d3:84:1a:11:1a:59:36:29:94:be:3e:f8:9c:de:cd:fd:53:
         28:32:98:19:dd:3c:46:53:9f:9b:46:e7:60:99:64:27:8b:dd:
         35:3b:f1:50:03:25:05:47:3b:54:69:3b:23:45:fb:67:a3:ba:
         73:90:4b:df:69:61:b4:4a:55:c7:bc:91:b7:1c:de:bf:ee:bf:
         c1:28:11:03:7d:52:81:dd:ee:8c:24:e1:ec:e7:85:e3:f7:61:
         8d:62:97:b0:1a:a9:a6:90:c3:b8:86:2a:13:72:bf:88:ca:a9:
         8a:ce:ab:aa:cc:50:58:cb:78:24:cb:bc:d7:32:14:84:87:96:
         e0:f2:cb:a5:7d:6b:24:1e:ad:95:f0:32:07:ea:3b:d9:83:1a:
         48:22:fa:94:e3:bb:87:fe:d5:00:e3:ed:de:24:f3:1f:ce:5d:
         c4:38:00:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIt4l6rZyiP7QVdH/DQ0Mbk9RLlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNTAzMDYwMDU1MjlaFw0yNjAzMDUwMTAwMjlaMDMxMTAvBgNV
BAMTKEY1MzIwRENBNEJBNEZENjBFQ0MyMzZFRUQ0MTAyQzhCMEY3OTQ3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWYKAYFo3gabBS3wIrl7UR1e1
FBfhce0cGso7TkAN5eQg/Ek62PLIN5oyE+i3L/Xpuv3ZWLxooKzx4wuSEZ026Gnc
FlI+iFLjT8tBsgUancOqzaaE0tHwKjdiEHRST8dn6aIx8abHgnSkEIzmMN8oyqL0
y9MsCnkulhOPBVElgGwv2qwwOoHb8HVFIVBeXD2NNrn9bfazWAIh/aDI5/252bbw
sP+zJWVy8BaugI78NfJs7+PvmclBHvVD2Yhy1v9rW2tEBABWiZ+b54XJ6DWpMCFQ
XhZh0aNN2pL4uh/N3scPeFtwI6r+cqHLCS2abi5mw5zq76sF6kWknCr4sDmHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9TINykuk/WDswjbu1BAsiw95R0EwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBwYgDANBgkqhkiG9w0BAQsFAAOC
AQEAcvPyTcyiJsrDZ3ayrCPdmvGSzW1ysJu6mfraKjv1u9Oi0p8pBuWD9+T2UkFn
q0sOSbUGycwXM1iHW1qtUy7k8qIaDVK+dy2gh0Wmwc6cdwBhYuAidYENAeh2w9OE
GhEaWTYplL4++Jzezf1TKDKYGd08RlOfm0bnYJlkJ4vdNTvxUAMlBUc7VGk7I0X7
Z6O6c5BL32lhtEpVx7yRtxzev+6/wSgRA31Sgd3ujCTh7OeF4/dhjWKXsBqpppDD
uIYqE3K/iMqpis6rqsxQWMt4JMu81zIUhIeW4PLLpX1rJB6tlfAyB+o72YMaSCL6
lOO7h/7VAOPt3iTzH85dxDgATQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:05 2025 by rpki-client