Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa
File:                     323830343a376233343a3a2f33322d3431203d3e20323731343137.roa (raw, json)
Hash identifier:          VT4Z49w1dwlx47MpGYVbKRf/xzx+TAmla3NRfHg1SwU=
Subject key identifier:   A8:72:22:84:FA:8E:F6:A4:C9:57:99:85:3E:4D:E4:CD:F6:6E:14:9F
Certificate issuer:       /CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A
Certificate serial:       1E8632DCF171BC2F769E5503ECF05776099C06BC
Authority key identifier: BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa
Signing time:             Thu 06 Mar 2025 14:56:48 +0000
ROA not before:           Thu 06 Mar 2025 14:51:48 +0000
ROA not after:            Thu 05 Mar 2026 14:56:48 +0000
asID:                     271417
IP address blocks:        2804:7b34::/32 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl
                          rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 04:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:86:32:dc:f1:71:bc:2f:76:9e:55:03:ec:f0:57:76:09:9c:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A
        Validity
            Not Before: Mar  6 14:51:48 2025 GMT
            Not After : Mar  5 14:56:48 2026 GMT
        Subject: CN=A8722284FA8EF6A4C95799853E4DE4CDF66E149F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:a2:06:17:ee:1f:b6:a7:43:48:06:de:db:
                    d5:4f:29:92:a4:93:f1:82:4c:46:d3:d8:01:9c:f8:
                    23:04:17:2d:c5:d6:4a:a5:2f:ae:3b:f7:e3:5d:90:
                    eb:66:bc:48:bb:b0:27:e8:8e:da:9f:63:55:99:9c:
                    7b:be:72:9e:09:e7:1d:6f:4e:69:ed:d9:33:10:c2:
                    6d:81:3f:7a:6f:ba:33:f4:45:b7:9c:9f:d0:61:f5:
                    dd:07:87:ca:c2:1c:23:d5:08:f4:2c:c7:80:9c:c1:
                    25:cd:6a:27:44:21:43:fd:39:33:20:6a:5b:45:30:
                    f8:f2:ef:d9:e1:e4:98:5d:ff:bd:87:09:8e:96:96:
                    1e:cc:bc:0e:b6:4a:ec:68:53:4a:a4:37:3e:ca:1b:
                    a3:42:c6:67:cd:45:87:4a:c7:87:f1:bc:d9:9a:22:
                    0b:87:3a:22:c5:b6:31:f3:1e:f5:29:24:c0:24:3a:
                    e3:17:9f:b4:46:37:1f:ec:d6:0d:e7:6d:8f:05:8e:
                    a7:41:6b:ae:87:24:44:a0:20:15:e1:8a:c4:66:c8:
                    0d:ee:55:e3:d9:fa:b5:a6:e4:9e:db:86:8a:ae:e7:
                    dd:fb:9b:1d:2e:7d:bb:d6:9a:48:1c:42:95:32:9d:
                    11:43:fd:be:09:0b:3c:06:4b:23:1f:61:f7:f6:5a:
                    01:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:72:22:84:FA:8E:F6:A4:C9:57:99:85:3E:4D:E4:CD:F6:6E:14:9F
            X509v3 Authority Key Identifier:
                keyid:BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/323830343a376233343a3a2f33322d3431203d3e20323731343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b34::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:48:29:d3:6c:dd:75:e0:22:14:a1:38:e6:11:a4:91:1b:
         b2:8d:88:fd:dd:dd:11:2d:69:96:08:11:bf:26:2e:07:89:0f:
         36:08:ac:42:66:18:4e:ec:24:6c:3b:ad:84:17:6a:e4:6a:60:
         56:42:7f:8c:ef:3f:88:a8:07:40:d6:4b:5c:d7:37:60:13:59:
         a3:90:a6:36:54:6c:d0:a0:3b:36:81:f6:91:3d:d1:6c:41:ab:
         ca:8a:bd:07:3b:61:84:a8:d5:cb:47:5b:92:8c:34:08:77:12:
         12:73:ae:34:d9:c6:de:28:dd:07:85:58:fd:ce:8c:0f:f1:d5:
         b4:52:a1:39:3f:05:f3:7e:d1:ad:e4:21:ab:fd:42:2a:d1:89:
         9b:40:3f:f5:5d:e1:f1:64:b9:77:8b:21:54:16:19:70:74:9f:
         f4:d0:df:6f:fc:b1:04:f1:5c:8f:1c:b8:c3:cf:33:f4:7a:ab:
         d4:3c:51:7e:5d:0f:35:31:f9:f6:f1:44:9c:79:38:82:c5:10:
         77:19:0d:37:10:aa:0f:4e:a9:0f:05:5c:a2:5e:a1:95:ea:6b:
         9a:19:8a:30:70:11:f6:c6:97:e3:b5:85:76:0e:b2:0f:58:d8:
         4c:be:f5:1c:a7:c3:c9:ad:38:b5:17:02:f8:f6:2b:75:43:a9:
         af:c8:aa:61
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHoYy3PFxvC92nlUD7PBXdgmcBrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwQzMzNUI4RkFFNjQ5NzMyRUJGMTFDQzBGRUM2NEZD
NzAxNzk4QTAeFw0yNTAzMDYxNDUxNDhaFw0yNjAzMDUxNDU2NDhaMDMxMTAvBgNV
BAMTKEE4NzIyMjg0RkE4RUY2QTRDOTU3OTk4NTNFNERFNENERjY2RTE0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuaIGF+4ftqdDSAbe29VPKZKk
k/GCTEbT2AGc+CMEFy3F1kqlL6479+NdkOtmvEi7sCfojtqfY1WZnHu+cp4J5x1v
Tmnt2TMQwm2BP3pvujP0Rbecn9Bh9d0Hh8rCHCPVCPQsx4CcwSXNaidEIUP9OTMg
altFMPjy79nh5Jhd/72HCY6Wlh7MvA62SuxoU0qkNz7KG6NCxmfNRYdKx4fxvNma
IguHOiLFtjHzHvUpJMAkOuMXn7RGNx/s1g3nbY8FjqdBa66HJESgIBXhisRmyA3u
VePZ+rWm5J7bhoqu5937mx0ufbvWmkgcQpUynRFD/b4JCzwGSyMfYff2WgFHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqHIihPqO9qTJV5mFPk3kzfZuFJ8wHwYDVR0j
BBgwFoAUuwwzW4+uZJcy6/EcwP7GT8cBeYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVT
cFMvMS9CQjBDMzM1QjhGQUU2NDk3MzJFQkYxMUNDMEZFQzY0RkM3MDE3OThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMEMzMzVCOEZBRTY0OTcz
MkVCRjExQ0MwRkVDNjRGQzcwMTc5OEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1UnZVYzE5ck5oMWhxWWZjcDUxMUM0QVNZNkI5a0RiYmFKWlM4RVJlU3BTLzEv
MzIzODMwMzQzYTM3NjIzMzM0M2EzYTJmMzMzMjJkMzQzMTIwM2QzZTIwMzIzNzMx
MzQzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7NDANBgkqhkiG9w0BAQsFAAOCAQEAuatIKdNs
3XXgIhShOOYRpJEbso2I/d3dES1plggRvyYuB4kPNgisQmYYTuwkbDuthBdq5Gpg
VkJ/jO8/iKgHQNZLXNc3YBNZo5CmNlRs0KA7NoH2kT3RbEGryoq9BzthhKjVy0db
kow0CHcSEnOuNNnG3ijdB4VY/c6MD/HVtFKhOT8F837RreQhq/1CKtGJm0A/9V3h
8WS5d4shVBYZcHSf9NDfb/yxBPFcjxy4w88z9Hqr1DxRfl0PNTH59vFEnHk4gsUQ
dxkNNxCqD06pDwVcol6hleprmhmKMHAR9saX47WFdg6yD1jYTL71HKfDya04tRcC
+PYrdUOpr8iqYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:18 2025 by rpki-client