Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa
File:                     323830343a373763303a3a2f33322d3438203d3e20323731313937.roa (raw, json)
Hash identifier:          g6SD8Z7x2h5JkgoKN1GlA7hnv0fMPw2kvPAsyVy3wuc=
Subject key identifier:   85:FF:17:3E:FD:F5:AA:E5:6A:91:A4:0A:A5:2F:2D:C4:8C:A8:F6:77
Certificate issuer:       /CN=47D5426D04E43F41EEF7B6587AD43E46BD355912
Certificate serial:       7DAC05B169075E530BEB8638BE63C995C02E2121
Authority key identifier: 47:D5:42:6D:04:E4:3F:41:EE:F7:B6:58:7A:D4:3E:46:BD:35:59:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa
Signing time:             Thu 06 Mar 2025 07:13:57 +0000
ROA not before:           Thu 06 Mar 2025 07:08:57 +0000
ROA not after:            Thu 05 Mar 2026 07:13:57 +0000
asID:                     271197
IP address blocks:        2804:77c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.crl
                          rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 09:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ac:05:b1:69:07:5e:53:0b:eb:86:38:be:63:c9:95:c0:2e:21:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47D5426D04E43F41EEF7B6587AD43E46BD355912
        Validity
            Not Before: Mar  6 07:08:57 2025 GMT
            Not After : Mar  5 07:13:57 2026 GMT
        Subject: CN=85FF173EFDF5AAE56A91A40AA52F2DC48CA8F677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:37:27:5e:f3:fc:fc:d9:9f:e0:a1:cb:cf:
                    00:a4:3e:da:09:0f:32:ca:9c:0f:af:87:da:29:b1:
                    b1:b7:68:3c:28:12:42:70:ea:80:d9:80:b6:7b:67:
                    7d:62:04:cd:6e:19:fa:65:86:9d:1a:f7:8a:98:f5:
                    f6:f9:5c:f5:0a:03:a6:93:69:4f:f8:11:b0:99:65:
                    b3:9e:15:aa:09:56:88:1e:eb:1f:d2:80:92:61:ba:
                    4f:5b:7f:9c:c3:7e:ba:d9:02:e6:d3:69:3b:6e:0a:
                    d3:79:96:32:2c:97:8a:52:d8:b1:1e:9d:b2:e4:43:
                    08:67:76:ca:70:12:3e:b9:06:75:cd:27:51:e6:25:
                    a9:ec:ed:ac:de:19:82:b1:ec:5b:e7:be:56:30:6f:
                    66:32:77:69:24:e7:b0:3c:05:39:1f:8a:6e:d0:36:
                    62:e2:d1:30:75:83:50:3b:ec:ac:d7:22:e5:14:74:
                    92:6f:02:ab:c6:61:8e:ca:0b:3c:d3:42:9b:b5:ef:
                    37:01:d4:1e:ed:73:f2:0a:27:28:de:6b:de:2b:d6:
                    f8:56:64:1f:37:f4:f8:49:7d:a6:46:6c:8b:63:dd:
                    ce:a5:9e:25:ab:ad:12:29:d6:0b:5a:98:da:88:ff:
                    c0:4c:d4:e1:e3:e6:f5:a6:2d:41:b5:1a:81:28:ed:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FF:17:3E:FD:F5:AA:E5:6A:91:A4:0A:A5:2F:2D:C4:8C:A8:F6:77
            X509v3 Authority Key Identifier:
                keyid:47:D5:42:6D:04:E4:3F:41:EE:F7:B6:58:7A:D4:3E:46:BD:35:59:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47D5426D04E43F41EEF7B6587AD43E46BD355912.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asu9vpCqUfRjQ5Y3ELxVPRd59LE74Z8oENdWajp7bwj1/1/323830343a373763303a3a2f33322d3438203d3e20323731313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:66:b2:51:73:21:91:49:11:93:f5:a3:64:b9:2f:89:fc:
         b1:cb:ce:90:9c:f5:6c:24:9f:c1:0e:ea:5c:fb:8c:66:c7:36:
         00:41:7e:7c:18:c8:02:97:78:34:d4:46:8f:a5:88:1e:27:48:
         0b:c0:7a:83:37:21:ce:58:2b:00:62:19:fe:60:52:ea:fa:af:
         5b:91:9e:86:a2:dc:c5:7c:10:5a:c4:3c:f6:55:cf:98:3d:5b:
         de:50:a1:a4:42:43:ed:ca:d7:a0:7f:1b:df:58:ab:9a:a8:d9:
         95:27:b5:55:98:01:0f:70:a0:1a:19:33:96:4e:cf:c4:64:86:
         8e:c2:ec:55:a7:e7:58:8c:87:5f:36:b8:d1:c1:6a:0f:68:f6:
         31:b0:27:cb:15:b6:e3:76:c9:73:9e:3c:ff:38:3f:4c:09:5e:
         3d:e6:59:fa:96:a6:de:5b:2c:5a:7c:db:1d:5c:09:63:bc:66:
         94:ea:3c:08:3c:9b:6e:21:9c:a2:5e:a6:da:b7:75:9c:74:68:
         25:16:01:f7:29:6d:0a:2a:95:12:d2:79:21:b8:9c:0b:38:a1:
         e8:cd:db:6c:ff:fa:3b:00:dc:a1:9f:55:06:b0:17:ce:08:7a:
         a0:b7:b7:6e:ff:aa:d5:bd:df:43:16:dd:f2:23:87:34:fe:2b:
         9c:c0:57:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfawFsWkHXlML64Y4vmPJlcAuISEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdENTQyNkQwNEU0M0Y0MUVFRjdCNjU4N0FENDNFNDZC
RDM1NTkxMjAeFw0yNTAzMDYwNzA4NTdaFw0yNjAzMDUwNzEzNTdaMDMxMTAvBgNV
BAMTKDg1RkYxNzNFRkRGNUFBRTU2QTkxQTQwQUE1MkYyREM0OENBOEY2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfDcnXvP8/Nmf4KHLzwCkPtoJ
DzLKnA+vh9opsbG3aDwoEkJw6oDZgLZ7Z31iBM1uGfplhp0a94qY9fb5XPUKA6aT
aU/4EbCZZbOeFaoJVoge6x/SgJJhuk9bf5zDfrrZAubTaTtuCtN5ljIsl4pS2LEe
nbLkQwhndspwEj65BnXNJ1HmJans7azeGYKx7FvnvlYwb2Yyd2kk57A8BTkfim7Q
NmLi0TB1g1A77KzXIuUUdJJvAqvGYY7KCzzTQpu17zcB1B7tc/IKJyjea94r1vhW
ZB839PhJfaZGbItj3c6lniWrrRIp1gtamNqI/8BM1OHj5vWmLUG1GoEo7fRrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhf8XPv31quVqkaQKpS8txIyo9ncwHwYDVR0j
BBgwFoAUR9VCbQTkP0Hu97ZYetQ+Rr01WRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXN1OXZwQ3FVZlJqUTVZM0VMeFZQUmQ1OUxFNzRaOG9FTmRXYWpwN2J3
ajEvMS80N0Q1NDI2RDA0RTQzRjQxRUVGN0I2NTg3QUQ0M0U0NkJEMzU1OTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RDU0MjZEMDRFNDNGNDFF
RUY3QjY1ODdBRDQzRTQ2QkQzNTU5MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzdTl2cENxVWZSalE1WTNFTHhWUFJkNTlMRTc0WjhvRU5kV2FqcDdid2oxLzEv
MzIzODMwMzQzYTM3Mzc2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzEzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3wDANBgkqhkiG9w0BAQsFAAOCAQEAg81mslFz
IZFJEZP1o2S5L4n8scvOkJz1bCSfwQ7qXPuMZsc2AEF+fBjIApd4NNRGj6WIHidI
C8B6gzchzlgrAGIZ/mBS6vqvW5GehqLcxXwQWsQ89lXPmD1b3lChpEJD7crXoH8b
31irmqjZlSe1VZgBD3CgGhkzlk7PxGSGjsLsVafnWIyHXza40cFqD2j2MbAnyxW2
43bJc548/zg/TAlePeZZ+pam3lssWnzbHVwJY7xmlOo8CDybbiGcol6m2rd1nHRo
JRYB9yltCiqVEtJ5IbicCzih6M3bbP/6OwDcoZ9VBrAXzgh6oLe3bv+q1b3fQxbd
8iOHNP4rnMBX/Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:51:14 2025 by rpki-client