Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa
File:                     323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (raw, json)
Hash identifier:          DJ6pO5xL0y0myCGGnaxN29PFLO6qKHeYi6tb6Erlx5c=
Subject key identifier:   FD:3C:02:3B:27:3B:F6:84:B8:75:15:A2:C9:F5:D1:64:95:FD:E9:40
Certificate issuer:       /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
Certificate serial:       3EBE4DA25938EABCB054236FDDBA8155FA66586A
Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa
Signing time:             Thu 06 Mar 2025 16:14:30 +0000
ROA not before:           Thu 06 Mar 2025 16:09:30 +0000
ROA not after:            Thu 05 Mar 2026 16:14:30 +0000
asID:                     268243
IP address blocks:        2804:4e28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl
                          rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:4d:a2:59:38:ea:bc:b0:54:23:6f:dd:ba:81:55:fa:66:58:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE
        Validity
            Not Before: Mar  6 16:09:30 2025 GMT
            Not After : Mar  5 16:14:30 2026 GMT
        Subject: CN=FD3C023B273BF684B87515A2C9F5D16495FDE940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:20:49:b3:f3:b0:90:0a:5b:40:ba:77:21:
                    22:87:6c:1d:40:97:51:96:2f:a2:e6:cd:53:28:07:
                    78:d8:51:fa:62:c9:ef:a6:f0:35:9f:6d:30:d0:4a:
                    b7:25:5a:23:be:18:2e:38:67:aa:6e:f3:43:8d:c4:
                    cc:bc:fc:8f:6c:5c:b4:b6:4f:3e:42:d2:a3:69:80:
                    8c:0a:64:e8:f3:c7:b7:50:dd:4e:12:ad:bf:11:27:
                    9a:e8:bf:c7:3e:16:22:9b:64:10:4a:10:f3:5c:f5:
                    bf:9d:b1:0c:b9:ff:c9:56:fb:e7:93:12:89:76:9b:
                    35:38:ce:c9:4a:a7:3a:f4:4e:5b:1a:24:df:4d:09:
                    c3:10:5c:16:9d:36:39:d6:22:a9:61:ac:20:ff:e9:
                    02:fd:e5:08:f9:4c:32:de:ac:11:66:9a:55:1d:07:
                    ac:75:47:4e:ff:38:bf:e2:9b:79:0c:f1:a6:7a:05:
                    94:65:ac:a5:c3:0f:a2:1c:5d:53:bb:d3:05:b1:9d:
                    c6:19:27:eb:c9:24:db:df:d6:37:51:b1:f6:18:80:
                    a1:52:a2:a8:54:87:c7:ea:7c:96:7e:92:32:78:13:
                    63:d5:0a:3f:ec:a4:52:99:59:55:b7:a6:60:3e:04:
                    4e:c4:91:34:e4:3f:fb:f1:ca:68:76:24:9e:a2:19:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3C:02:3B:27:3B:F6:84:B8:75:15:A2:C9:F5:D1:64:95:FD:E9:40
            X509v3 Authority Key Identifier:
                keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/323830343a346532383a3a2f33322d313238203d3e20323638323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:4b:61:c0:e4:8a:fb:97:11:ed:12:d6:7e:05:b1:9e:0f:
         ca:bb:d3:43:af:87:e4:7f:3b:82:e1:b8:9e:ba:64:9d:76:55:
         5f:89:33:51:25:e7:33:03:20:a7:4f:04:09:c5:41:63:17:c6:
         a1:ec:b8:67:ea:a6:2f:56:c1:f6:4f:80:4e:65:3c:ab:61:75:
         50:05:cd:fb:8d:65:c4:2f:11:fa:e3:b5:3d:a4:6d:63:58:08:
         38:9d:42:31:52:d1:78:8b:5d:10:d4:75:8d:34:0a:8b:ff:78:
         f3:02:aa:c3:3a:11:d6:5c:19:4d:58:3c:46:6d:ed:9f:ae:2f:
         b1:6d:87:fa:87:21:ca:31:bd:3f:df:d6:12:01:17:64:b0:13:
         11:c6:5a:90:ed:22:da:13:bf:6d:27:92:81:25:90:bb:6c:e7:
         91:30:ba:04:3f:19:39:00:b7:d9:a0:be:36:cf:07:28:e0:ff:
         8e:6d:50:de:b7:c9:71:c9:85:81:8a:63:24:8a:fa:56:f6:80:
         cb:96:66:18:c7:0f:db:4e:bc:92:1d:53:ed:20:82:e2:44:d5:
         31:3e:93:8e:89:3f:21:ed:bd:b4:e2:ba:4a:45:8d:09:e9:10:
         e0:ad:ea:69:d1:f8:ac:44:ba:5b:26:8b:61:1a:b5:5f:06:3a:
         7c:6e:78:7a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPr5Nolk46rywVCNv3bqBVfpmWGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUwRDhDQTlGQjlCOTM1QUJERTY3MjZCRTFFQTJBODU3
MEY0RUZFRTAeFw0yNTAzMDYxNjA5MzBaFw0yNjAzMDUxNjE0MzBaMDMxMTAvBgNV
BAMTKEZEM0MwMjNCMjczQkY2ODRCODc1MTVBMkM5RjVEMTY0OTVGREU5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsSBJs/OwkApbQLp3ISKHbB1A
l1GWL6LmzVMoB3jYUfpiye+m8DWfbTDQSrclWiO+GC44Z6pu80ONxMy8/I9sXLS2
Tz5C0qNpgIwKZOjzx7dQ3U4Srb8RJ5rov8c+FiKbZBBKEPNc9b+dsQy5/8lW++eT
Eol2mzU4zslKpzr0TlsaJN9NCcMQXBadNjnWIqlhrCD/6QL95Qj5TDLerBFmmlUd
B6x1R07/OL/im3kM8aZ6BZRlrKXDD6IcXVO70wWxncYZJ+vJJNvf1jdRsfYYgKFS
oqhUh8fqfJZ+kjJ4E2PVCj/spFKZWVW3pmA+BE7EkTTkP/vxymh2JJ6iGVGtAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/TwCOyc79oS4dRWiyfXRZJX96UAwHwYDVR0j
BBgwFoAULg2Mqfubk1q95nJr4eoqhXD07+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVBDQms1cUxHNWdVZlhaWHc3WFI2UjRQVXN3dXpQQkZwNkdHMjhWRWJq
N1MvMS8yRTBEOENBOUZCOUI5MzVBQkRFNjcyNkJFMUVBMkE4NTcwRjRFRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMEQ4Q0E5RkI5QjkzNUFC
REU2NzI2QkUxRUEyQTg1NzBGNEVGRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FQQ0JrNXFMRzVnVWZYWlh3N1hSNlI0UFVzd3V6UEJGcDZHRzI4VkViajdTLzEv
MzIzODMwMzQzYTM0NjUzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMjM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBE4oMA0GCSqGSIb3DQEBCwUAA4IBAQCZbkth
wOSK+5cR7RLWfgWxng/Ku9NDr4fkfzuC4bieumSddlVfiTNRJeczAyCnTwQJxUFj
F8ah7Lhn6qYvVsH2T4BOZTyrYXVQBc37jWXELxH647U9pG1jWAg4nUIxUtF4i10Q
1HWNNAqL/3jzAqrDOhHWXBlNWDxGbe2fri+xbYf6hyHKMb0/39YSARdksBMRxlqQ
7SLaE79tJ5KBJZC7bOeRMLoEPxk5ALfZoL42zwco4P+ObVDet8lxyYWBimMkivpW
9oDLlmYYxw/bTrySHVPtIILiRNUxPpOOiT8h7b204rpKRY0J6RDgrepp0fisRLpb
JothGrVfBjp8bnh6
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:34 2025 by rpki-client