Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/323830343a363766383a3a2f33322d313238203d3e20323639363632.roa
File:                     323830343a363766383a3a2f33322d313238203d3e20323639363632.roa (raw, json)
Hash identifier:          bdisaud0l8o7pFdoGAyc9sKqIqRzLJZVihIzevFYZA4=
Subject key identifier:   81:CE:D9:F4:18:74:FD:3C:2B:9F:14:75:78:81:30:93:66:3F:9F:F0
Certificate issuer:       /CN=E00F811278C319FAB146F4D178C31CD4E16A6B8F
Certificate serial:       64441416E2CCDC00AFD6D1C7FA90727A2085B0C2
Authority key identifier: E0:0F:81:12:78:C3:19:FA:B1:46:F4:D1:78:C3:1C:D4:E1:6A:6B:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00F811278C319FAB146F4D178C31CD4E16A6B8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/323830343a363766383a3a2f33322d313238203d3e20323639363632.roa
Signing time:             Sun 16 Feb 2025 16:20:32 +0000
ROA not before:           Sun 16 Feb 2025 16:15:32 +0000
ROA not after:            Sun 15 Feb 2026 16:20:32 +0000
asID:                     269662
IP address blocks:        2804:67f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/E00F811278C319FAB146F4D178C31CD4E16A6B8F.crl
                          rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/E00F811278C319FAB146F4D178C31CD4E16A6B8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00F811278C319FAB146F4D178C31CD4E16A6B8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:14:16:e2:cc:dc:00:af:d6:d1:c7:fa:90:72:7a:20:85:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00F811278C319FAB146F4D178C31CD4E16A6B8F
        Validity
            Not Before: Feb 16 16:15:32 2025 GMT
            Not After : Feb 15 16:20:32 2026 GMT
        Subject: CN=81CED9F41874FD3C2B9F147578813093663F9FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:64:a3:34:1c:8a:43:7a:22:ec:03:f3:ca:
                    33:1a:57:17:3c:f5:bb:95:7e:d7:d3:0b:0a:3b:6a:
                    50:a6:a7:ae:b6:d6:a1:f0:5b:94:f3:a0:11:0f:d6:
                    76:ba:8b:68:ee:f2:fd:86:37:c1:4d:59:50:91:6e:
                    91:68:d2:69:5d:19:a3:2d:d0:5d:a4:9e:28:69:28:
                    55:02:62:00:65:64:02:72:bc:e4:53:88:d4:b7:81:
                    d0:f9:8c:94:e8:fa:a3:0f:bf:89:54:76:6d:24:9c:
                    64:f5:6d:af:72:36:16:d0:a0:ef:56:a1:3b:31:d1:
                    0b:7c:3f:85:01:2f:b9:a7:73:86:7b:52:6b:93:c5:
                    94:fb:0e:14:b1:29:af:a2:fb:b0:3e:24:1d:b7:46:
                    a5:d4:0a:f2:a8:0f:d5:35:61:cd:c0:99:48:1b:d2:
                    0f:4e:66:2c:c5:06:2a:28:b7:c5:f9:e7:9b:4a:01:
                    57:bd:65:8f:ad:89:b5:f9:35:ee:20:61:b2:8e:b4:
                    8f:37:66:d2:df:19:13:52:c7:82:4b:6a:8f:c9:30:
                    00:a8:c3:29:60:06:cf:b9:89:5c:a2:f5:21:87:57:
                    9b:9e:f3:35:af:e5:12:3d:76:3e:4a:62:04:ca:14:
                    e0:92:5a:bf:4c:ad:cc:64:2a:06:0e:20:85:e2:b9:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:D9:F4:18:74:FD:3C:2B:9F:14:75:78:81:30:93:66:3F:9F:F0
            X509v3 Authority Key Identifier:
                keyid:E0:0F:81:12:78:C3:19:FA:B1:46:F4:D1:78:C3:1C:D4:E1:6A:6B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/E00F811278C319FAB146F4D178C31CD4E16A6B8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00F811278C319FAB146F4D178C31CD4E16A6B8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AteVhdEa624K3bQz13Tg5EWLavw1cEdZ58rhUHWQZ3C2/0/323830343a363766383a3a2f33322d313238203d3e20323639363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:d3:2a:f4:96:e7:dd:7e:ed:ac:61:1a:4c:57:aa:49:b0:
         1e:e8:ac:a1:27:f9:65:68:27:6f:8b:d5:d9:5c:08:56:42:da:
         47:79:12:af:1c:3d:6b:ca:90:d9:85:1f:bb:c6:94:8f:c0:41:
         0a:19:aa:07:fb:01:b0:6e:45:b2:6d:be:f3:e2:9a:de:a7:bb:
         8c:91:36:51:b9:39:22:6d:a6:a0:a3:7c:ec:64:e6:a6:82:05:
         5d:b7:d9:f5:c6:86:43:b4:b2:7d:ba:51:9f:08:96:46:fa:31:
         7e:ec:d3:fe:00:07:06:25:47:7c:28:18:0e:96:0c:37:31:37:
         0a:9e:3c:12:78:24:b1:00:cf:ce:c5:df:6d:26:2a:ef:9a:50:
         c2:a8:a1:95:40:44:6e:28:f5:b1:81:e2:e6:82:a3:a0:6b:3e:
         ef:69:df:1b:77:53:2e:00:2f:c7:80:93:04:0f:70:7b:dc:f3:
         94:18:17:f4:00:e5:8c:e0:c9:00:89:71:49:73:99:41:59:7f:
         2c:b4:98:b7:41:8d:e6:1d:6c:e4:a7:cf:18:dc:9c:99:33:79:
         e6:5e:c1:4e:9f:82:6d:88:69:d0:55:23:4f:0b:17:48:15:15:
         88:08:23:8c:7d:5a:4e:ed:ed:0f:67:6f:c0:9c:05:cb:53:d2:
         31:78:21:19
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZEQUFuLM3ACv1tHH+pByeiCFsMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwRjgxMTI3OEMzMTlGQUIxNDZGNEQxNzhDMzFDRDRF
MTZBNkI4RjAeFw0yNTAyMTYxNjE1MzJaFw0yNjAyMTUxNjIwMzJaMDMxMTAvBgNV
BAMTKDgxQ0VEOUY0MTg3NEZEM0MyQjlGMTQ3NTc4ODEzMDkzNjYzRjlGRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7GSjNByKQ3oi7APzyjMaVxc8
9buVftfTCwo7alCmp6621qHwW5TzoBEP1na6i2ju8v2GN8FNWVCRbpFo0mldGaMt
0F2knihpKFUCYgBlZAJyvORTiNS3gdD5jJTo+qMPv4lUdm0knGT1ba9yNhbQoO9W
oTsx0Qt8P4UBL7mnc4Z7UmuTxZT7DhSxKa+i+7A+JB23RqXUCvKoD9U1Yc3AmUgb
0g9OZizFBioot8X555tKAVe9ZY+tibX5Ne4gYbKOtI83ZtLfGRNSx4JLao/JMACo
wylgBs+5iVyi9SGHV5ue8zWv5RI9dj5KYgTKFOCSWr9MrcxkKgYOIIXiufltAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUgc7Z9Bh0/TwrnxR1eIEwk2Y/n/AwHwYDVR0j
BBgwFoAU4A+BEnjDGfqxRvTReMMc1OFqa48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRlVmhkRWE2MjRLM2JRejEzVGc1RVdMYXZ3MWNFZFo1OHJoVUhXUVoz
QzIvMC9FMDBGODExMjc4QzMxOUZBQjE0NkY0RDE3OEMzMUNENEUxNkE2QjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMEY4MTEyNzhDMzE5RkFC
MTQ2RjREMTc4QzMxQ0Q0RTE2QTZCOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0ZVZoZEVhNjI0SzNiUXoxM1RnNUVXTGF2dzFjRWRaNThyaFVIV1FaM0MyLzAv
MzIzODMwMzQzYTM2Mzc2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGf4MA0GCSqGSIb3DQEBCwUAA4IBAQC6ZdMq
9Jbn3X7trGEaTFeqSbAe6KyhJ/llaCdvi9XZXAhWQtpHeRKvHD1rypDZhR+7xpSP
wEEKGaoH+wGwbkWybb7z4prep7uMkTZRuTkibaago3zsZOamggVdt9n1xoZDtLJ9
ulGfCJZG+jF+7NP+AAcGJUd8KBgOlgw3MTcKnjwSeCSxAM/Oxd9tJirvmlDCqKGV
QERuKPWxgeLmgqOgaz7vad8bd1MuAC/HgJMED3B73POUGBf0AOWM4MkAiXFJc5lB
WX8stJi3QY3mHWzkp88Y3JyZM3nmXsFOn4JtiGnQVSNPCxdIFRWICCOMfVpO7e0P
Z2/AnAXLU9IxeCEZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:22:35 2025 by rpki-client