Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
File:                     323830343a386435343a3a2f33322d3335203d3e20323733333530.roa (raw, json)
Hash identifier:          fx555dB/znqVUVAfFmf2l3SH0rJeKZ8eSXIBsiLNbFM=
Subject key identifier:   B8:FB:38:AE:39:0C:53:F9:2E:2B:63:7F:10:A8:EA:8A:47:C7:3E:39
Certificate issuer:       /CN=613FAA413557F145002B707154580B79D61AF413
Certificate serial:       3BA71A83DE4B0BA811D5EC6654E30940D7CD78F5
Authority key identifier: 61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa
Signing time:             Thu 06 Mar 2025 11:33:15 +0000
ROA not before:           Thu 06 Mar 2025 11:28:15 +0000
ROA not after:            Thu 05 Mar 2026 11:33:15 +0000
asID:                     273350
IP address blocks:        2804:8d54::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:1a:83:de:4b:0b:a8:11:d5:ec:66:54:e3:09:40:d7:cd:78:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613FAA413557F145002B707154580B79D61AF413
        Validity
            Not Before: Mar  6 11:28:15 2025 GMT
            Not After : Mar  5 11:33:15 2026 GMT
        Subject: CN=B8FB38AE390C53F92E2B637F10A8EA8A47C73E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5b:2e:1f:0f:7b:6e:f2:3f:e9:fe:bb:51:fb:
                    34:2f:65:7c:57:b1:41:82:88:79:25:c3:59:46:dd:
                    b6:09:4e:ae:8e:67:c7:0f:2e:27:e7:0c:ea:16:02:
                    ce:a8:ad:3d:f4:50:99:80:06:bc:ec:24:70:79:ba:
                    2c:fc:af:f6:10:ee:6f:4f:74:98:07:f1:a3:56:30:
                    28:08:b5:ea:79:83:9f:1d:32:22:a7:90:ef:f6:ff:
                    87:48:b2:f3:a7:e1:9d:4d:e9:2a:e1:5d:29:0f:87:
                    32:d3:86:9f:be:7d:10:6e:27:b9:09:da:22:3f:bd:
                    3a:8d:3d:6e:18:e3:b5:77:a2:e6:4b:15:a7:eb:15:
                    82:1e:7b:1a:9f:32:97:f4:77:cd:65:71:9c:a6:83:
                    aa:32:a2:f5:bc:9c:69:0a:8a:56:80:79:de:f8:36:
                    63:d1:6c:ea:7a:3a:e6:91:d6:ba:b1:18:a7:64:4d:
                    f3:b9:41:24:97:20:89:27:d2:89:53:38:94:49:6f:
                    5e:a3:a0:05:41:d9:a2:ba:84:4b:a2:71:29:75:71:
                    cc:0a:00:61:e4:9f:bb:84:2a:60:69:92:ba:43:8e:
                    79:44:63:0a:24:cd:f3:4f:d3:55:b0:b5:91:ae:10:
                    42:25:d8:fa:16:1e:18:2c:e6:95:48:57:76:ac:5f:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:38:AE:39:0C:53:F9:2E:2B:63:7F:10:A8:EA:8A:47:C7:3E:39
            X509v3 Authority Key Identifier:
                keyid:61:3F:AA:41:35:57:F1:45:00:2B:70:71:54:58:0B:79:D6:1A:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/613FAA413557F145002B707154580B79D61AF413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613FAA413557F145002B707154580B79D61AF413.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/1/323830343a386435343a3a2f33322d3335203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d54::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:1f:eb:b4:be:38:1b:19:e4:ba:ed:8e:a3:f8:15:51:3f:
         26:c8:76:d3:6c:95:08:ce:26:2c:91:11:dd:7d:ac:32:17:ea:
         4a:c4:e7:ea:f7:55:c4:4a:9a:d7:f7:20:40:50:b3:84:08:5d:
         64:6f:5d:4b:96:da:ed:f4:cf:4d:1a:e1:5f:fe:12:2b:5f:12:
         d6:cf:11:4d:9a:81:e4:3d:7f:df:ec:db:d1:0a:af:dd:e7:9c:
         b5:bc:b9:97:c5:93:ab:ad:b7:fa:4b:7a:3b:13:02:fa:ce:58:
         d9:a7:5a:6f:72:24:38:af:cf:87:fa:53:c4:8d:60:5b:56:a5:
         61:8d:7c:9c:54:68:ae:95:f7:50:b4:61:b9:c2:08:b9:c2:58:
         ea:7b:1f:f0:53:cd:9d:7b:a0:cd:5e:07:7f:6d:ca:c3:a3:ca:
         7a:da:92:6e:80:77:d7:79:c1:a8:95:f8:b7:36:98:66:8f:1f:
         e2:fe:15:4a:7d:23:be:d7:3c:6e:3b:8e:9e:87:12:9f:75:90:
         9d:8f:32:25:a5:2e:07:25:f7:42:f4:ba:00:fb:50:aa:54:f8:
         7c:6c:a8:2d:99:cb:b2:7f:90:a1:7e:b5:32:7d:26:80:0c:e1:
         b9:5a:cf:bf:64:4c:db:81:b6:24:e4:bd:54:fb:5a:b6:29:eb:
         c2:98:43:7b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO6cag95LC6gR1exmVOMJQNfNePUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzRkFBNDEzNTU3RjE0NTAwMkI3MDcxNTQ1ODBCNzlE
NjFBRjQxMzAeFw0yNTAzMDYxMTI4MTVaFw0yNjAzMDUxMTMzMTVaMDMxMTAvBgNV
BAMTKEI4RkIzOEFFMzkwQzUzRjkyRTJCNjM3RjEwQThFQThBNDdDNzNFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWy4fD3tu8j/p/rtR+zQvZXxX
sUGCiHklw1lG3bYJTq6OZ8cPLifnDOoWAs6orT30UJmABrzsJHB5uiz8r/YQ7m9P
dJgH8aNWMCgItep5g58dMiKnkO/2/4dIsvOn4Z1N6SrhXSkPhzLThp++fRBuJ7kJ
2iI/vTqNPW4Y47V3ouZLFafrFYIeexqfMpf0d81lcZymg6oyovW8nGkKilaAed74
NmPRbOp6OuaR1rqxGKdkTfO5QSSXIIkn0olTOJRJb16joAVB2aK6hEuicSl1ccwK
AGHkn7uEKmBpkrpDjnlEYwokzfNP01WwtZGuEEIl2PoWHhgs5pVIV3asX2+TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuPs4rjkMU/kuK2N/EKjqikfHPjkwHwYDVR0j
BBgwFoAUYT+qQTVX8UUAK3BxVFgLedYa9BMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhpZGhNTGhibTJZS0t1UEw1UVdqWXhMNzlDRW0yVkcxVExSOUhLUGR1
VDEvMS82MTNGQUE0MTM1NTdGMTQ1MDAyQjcwNzE1NDU4MEI3OUQ2MUFGNDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxM0ZBQTQxMzU1N0YxNDUw
MDJCNzA3MTU0NTgwQjc5RDYxQUY0MTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIaWRoTUxoYm0yWUtLdVBMNVFXall4TDc5Q0VtMlZHMVRMUjlIS1BkdVQxLzEv
MzIzODMwMzQzYTM4NjQzNTM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNzMz
MzMzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNVDANBgkqhkiG9w0BAQsFAAOCAQEAsD4f67S+
OBsZ5LrtjqP4FVE/Jsh202yVCM4mLJER3X2sMhfqSsTn6vdVxEqa1/cgQFCzhAhd
ZG9dS5ba7fTPTRrhX/4SK18S1s8RTZqB5D1/3+zb0Qqv3eectby5l8WTq623+kt6
OxMC+s5Y2adab3IkOK/Ph/pTxI1gW1alYY18nFRorpX3ULRhucIIucJY6nsf8FPN
nXugzV4Hf23Kw6PKetqSboB313nBqJX4tzaYZo8f4v4VSn0jvtc8bjuOnocSn3WQ
nY8yJaUuByX3QvS6APtQqlT4fGyoLZnLsn+QoX61Mn0mgAzhuVrPv2RM24G2JOS9
VPtatinrwphDew==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:34 2025 by rpki-client