Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
File:                     323830343a336337303a3a2f33322d3335203d3e20323636323131.roa (raw, json)
Hash identifier:          TGxkC4x1QDFzLxqOKO5TyGIsM5+ZdtWHFxQegUKFSTQ=
Subject key identifier:   DE:07:7A:6A:E8:61:92:9F:AC:F7:3E:63:B0:CF:FC:C7:5C:A3:92:13
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       16D082D9DF143E34814290DFA2832B279E9BE74B
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     266211
IP address blocks:        2804:3c70::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d0:82:d9:df:14:3e:34:81:42:90:df:a2:83:2b:27:9e:9b:e7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:20:ff:c5:eb:23:3e:45:b6:34:18:9f:d1:
                    0b:36:b3:de:6e:d7:b6:b6:ac:c1:42:89:e5:0e:6f:
                    ea:3c:3e:71:a9:6e:6c:78:30:68:f7:1a:eb:f3:04:
                    d1:83:c0:b5:23:5f:ed:f2:45:ad:bc:4e:a7:b2:14:
                    cc:0c:54:b4:e7:82:b9:d9:3e:a3:07:2e:9d:eb:21:
                    39:2a:d3:fd:dd:c7:5e:b0:79:03:a8:85:5e:80:16:
                    b2:59:9e:c9:86:f8:c1:9a:12:14:25:57:72:d9:0b:
                    f0:18:f9:58:25:5c:9e:ce:09:7e:23:8c:f9:49:f2:
                    5a:85:a3:50:c4:c8:4b:ba:37:8c:58:4f:88:78:45:
                    26:ce:c3:62:83:65:17:e0:d1:58:c3:3d:63:a4:0f:
                    61:7e:66:c7:e4:d3:98:a0:ad:84:61:d6:36:c6:00:
                    9e:61:86:2a:9c:28:f3:55:12:7e:9d:01:3a:f1:39:
                    31:e9:13:d2:71:aa:f3:2f:cd:d7:0b:4c:29:5a:28:
                    37:4b:63:48:f2:37:2d:44:e6:7b:2b:1e:c6:a0:69:
                    89:be:c7:fa:1d:b0:d9:cd:f8:cc:de:ed:1c:3b:66:
                    2d:04:ae:f6:89:c2:93:03:92:72:86:c2:8b:15:01:
                    bb:54:64:a9:9b:cf:04:f5:d2:84:39:6d:b3:ee:09:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:7A:6A:E8:61:92:9F:AC:F7:3E:63:B0:CF:FC:C7:5C:A3:92:13
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/323830343a336337303a3a2f33322d3335203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:14:b9:20:13:33:1e:d8:ef:1f:c1:23:4b:6d:ce:35:21:
         ec:ce:06:40:27:4c:61:7c:a2:e3:45:98:8b:f7:12:38:3a:04:
         7d:db:7f:ed:d6:7a:7f:57:4f:5e:0d:d4:cb:80:9d:65:3e:66:
         05:a3:a1:dd:a7:81:8c:13:6b:a4:35:be:a3:d7:7f:18:42:3d:
         3d:68:b7:25:78:56:4e:63:88:60:36:44:f1:f4:67:be:5a:26:
         fa:a2:82:c6:9e:61:b5:4e:2b:17:cb:f4:58:90:22:41:7f:5b:
         d8:bc:97:7c:50:64:70:4d:4b:eb:95:f9:32:47:6f:dd:e6:ac:
         e3:51:91:1a:cf:13:6e:e9:b4:30:3f:54:e3:14:bc:be:7d:a5:
         79:a9:01:a9:cb:98:d8:65:22:cb:7a:9d:ef:88:7b:e4:0a:84:
         92:3f:c9:4b:e9:f8:42:7d:48:21:37:13:23:23:72:69:51:d8:
         a7:a6:9f:01:e2:8f:fd:7b:60:45:86:fb:54:d8:6b:08:11:2a:
         bb:4b:32:13:d4:20:cd:15:21:18:59:5f:2f:cf:63:48:5e:cd:
         b2:9d:56:41:e7:71:72:6a:1b:48:3c:eb:71:1a:a6:16:22:53:
         c5:31:82:a0:af:58:da:e0:bb:af:a8:84:d4:dc:8d:14:58:ad:
         e5:51:b3:16
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUFtCC2d8UPjSBQpDfooMrJ56b50swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCM0NDNjk2M0YyOTFEMTFGMDE5M0JEMjdGQzRFODNE
MTQ1OTJCOTAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOURFMzIwRkZDNUVCMjMzRTQ1
QjYzNDE4OUZEMTBCMzZCM0RFNkVEN0I2QjZBQ0MxNDI4OUU1MEU2RkVBM0MzRTcx
QTk2RTZDNzgzMDY4RjcxQUVCRjMwNEQxODNDMEI1MjM1RkVERjI0NUFEQkM0RUE3
QjIxNENDMEM1NEI0RTc4MkI5RDkzRUEzMDcyRTlERUIyMTM5MkFEM0ZERERDNzVF
QjA3OTAzQTg4NTVFODAxNkIyNTk5RUM5ODZGOEMxOUExMjE0MjU1NzcyRDkwQkYw
MThGOTU4MjU1QzlFQ0UwOTdFMjM4Q0Y5NDlGMjVBODVBMzUwQzRDODRCQkEzNzhD
NTg0Rjg4Nzg0NTI2Q0VDMzYyODM2NTE3RTBEMTU4QzMzRDYzQTQwRjYxN0U2NkM3
RTREMzk4QTBBRDg0NjFENjM2QzYwMDlFNjE4NjJBOUMyOEYzNTUxMjdFOUQwMTNB
RjEzOTMxRTkxM0QyNzFBQUYzMkZDREQ3MEI0QzI5NUEyODM3NEI2MzQ4RjIzNzJE
NDRFNjdCMkIxRUM2QTA2OTg5QkVDN0ZBMURCMEQ5Q0RGOENDREVFRDFDM0I2NjJE
MDRBRUY2ODlDMjkzMDM5MjcyODZDMjhCMTUwMUJCNTQ2NEE5OUJDRjA0RjVEMjg0
Mzk2REIzRUUwOThCODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAneMg/8XrIz5FtjQYn9ELNrPebte2tqzBQonlDm/qPD5xqW5seDBo
9xrr8wTRg8C1I1/t8kWtvE6nshTMDFS054K52T6jBy6d6yE5KtP93cdesHkDqIVe
gBayWZ7JhvjBmhIUJVdy2QvwGPlYJVyezgl+I4z5SfJahaNQxMhLujeMWE+IeEUm
zsNig2UX4NFYwz1jpA9hfmbH5NOYoK2EYdY2xgCeYYYqnCjzVRJ+nQE68Tkx6RPS
carzL83XC0wpWig3S2NI8jctROZ7Kx7GoGmJvsf6HbDZzfjM3u0cO2YtBK72icKT
A5JyhsKLFQG7VGSpm88E9dKEOW2z7gmLhQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FN4HemroYZKfrPc+Y7DP/Mdco5ITMB8GA1UdIwQYMBaAFPWzzGlj8pHRHwGTvSf8
ToPRRZK5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzEvRjVCM0NDNjk2M0YyOTFE
MTFGMDE5M0JEMjdGQzRFODNEMTQ1OTJCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GNUIzQ0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5
MkI5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8xLzMyMzgzMDM0M2EzMzYzMzczMDNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzNjMyMzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
PHAwDQYJKoZIhvcNAQELBQADggEBAEqTFLkgEzMe2O8fwSNLbc41IezOBkAnTGF8
ouNFmIv3Ejg6BH3bf+3Wen9XT14N1MuAnWU+ZgWjod2ngYwTa6Q1vqPXfxhCPT1o
tyV4Vk5jiGA2RPH0Z75aJvqigsaeYbVOKxfL9FiQIkF/W9i8l3xQZHBNS+uV+TJH
b93mrONRkRrPE27ptDA/VOMUvL59pXmpAanLmNhlIst6ne+Ie+QKhJI/yUvp+EJ9
SCE3EyMjcmlR2KemnwHij/17YEWG+1TYawgRKrtLMhPUIM0VIRhZXy/PY0hezbKd
VkHncXJqG0g863EaphYiU8UxgqCvWNrgu6+ohNTcjRRYreVRsxY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:47 2025 by rpki-client