Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
File:                     323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa (raw, json)
Hash identifier:          xMg6nKcImjeOBE7l4XoW9Kdr+7p42qJ0Dkki+xowU5c=
Subject key identifier:   64:E5:B7:40:EB:32:88:B8:1F:D5:80:86:06:D4:96:1A:E6:40:D6:70
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       0773531377F13DDC067A193403704DF9CDF4252C
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:53:13:77:f1:3d:dc:06:7a:19:34:03:70:4d:f9:cd:f4:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=64E5B740EB3288B81FD5808606D4961AE640D670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:23:cd:29:7c:13:2d:28:0f:af:c5:39:b6:
                    f1:e9:30:8d:e2:17:66:c3:e6:d2:2b:7f:18:93:8c:
                    e9:4a:21:fe:bd:1b:9e:74:0b:61:f3:8a:d1:2a:02:
                    58:21:49:0a:e1:de:e6:24:8b:72:b0:39:ed:1d:87:
                    6b:59:f7:7f:f5:13:b5:89:3e:bb:5c:42:06:63:0f:
                    3a:d5:97:d7:34:04:81:5d:1f:de:8a:02:d1:79:f6:
                    64:cf:eb:39:cf:75:51:83:f6:4f:78:d4:2e:77:7d:
                    e6:b5:60:78:64:48:a7:b4:0b:c0:36:89:d7:1b:6f:
                    7d:c2:57:64:04:7e:7d:5e:e6:3a:3e:d2:48:8f:77:
                    1e:c3:62:62:08:8a:ec:bc:0e:7f:7e:b3:64:2b:69:
                    10:71:54:69:6f:f8:bb:0e:63:e1:46:e3:d4:d2:6d:
                    15:3f:53:97:ba:75:6f:e9:7f:bb:c0:e6:40:e9:f8:
                    17:23:5b:20:00:8a:8f:c7:85:ce:c5:0a:84:94:de:
                    a6:a9:f6:d2:0e:17:f9:e1:1f:2c:ce:26:52:e1:ee:
                    84:ac:be:6e:0b:69:80:ff:bc:31:d4:c4:bc:17:e1:
                    b0:99:2a:7f:17:94:70:da:e9:b1:f8:d0:91:3b:54:
                    f4:1c:e2:d3:c2:f6:91:47:0f:1a:5f:e6:0f:d2:33:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:B7:40:EB:32:88:B8:1F:D5:80:86:06:D4:96:1A:E6:40:D6:70
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/323830343a346265303a383030303a3a2f33332d3333203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:d9:e7:a1:3e:9e:89:6c:a3:8d:ab:fb:61:48:29:8b:eb:
         00:26:65:7a:e4:4d:1b:67:d7:67:a0:f6:ad:7d:1a:6b:44:9c:
         e0:02:e6:fa:6d:e6:a3:da:a2:41:0f:3e:5a:1c:b0:50:7b:41:
         7d:5c:e1:db:3d:f5:a1:d1:03:97:23:0e:69:ea:58:25:ee:ec:
         3b:73:78:0c:5d:57:10:e6:82:ca:01:14:47:27:51:2e:c9:d6:
         c9:27:68:94:1a:c6:f8:25:84:b4:c8:30:dc:88:d8:a1:81:e4:
         07:fe:5d:16:65:bc:0e:26:35:3c:02:25:cb:9c:90:af:b8:8d:
         be:19:16:e3:56:8d:7f:21:b4:2d:8d:4c:81:25:b3:91:9a:75:
         d9:49:dc:00:b5:1e:74:a6:6b:65:e0:e1:c1:c6:7e:5f:f2:fa:
         93:81:5b:41:8a:d7:9b:65:cd:a1:d9:3f:a4:11:a4:03:b6:29:
         b9:65:b2:c7:b5:a6:86:5c:91:08:60:55:fb:9c:c4:2d:d1:4f:
         70:66:d4:63:2f:a4:7a:22:14:fa:32:93:3d:38:c6:4a:be:eb:
         93:de:29:d9:36:67:33:79:f8:e9:65:00:ac:9c:eb:9e:0a:66:
         91:c8:52:7b:78:e3:c5:24:a8:a6:92:38:73:f5:f4:cd:92:c4:
         2d:cd:96:0a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUB3NTE3fxPdwGehk0A3BN+c30JSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGQzg2Mzc2NzJGNjk5NUYxNzFBMjYxRDUxNjc0QTUw
RkU0NTRBNjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDY0RTVCNzQwRUIzMjg4QjgxRkQ1ODA4NjA2RDQ5NjFBRTY0MEQ2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwiPNKXwTLSgPr8U5tvHpMI3i
F2bD5tIrfxiTjOlKIf69G550C2HzitEqAlghSQrh3uYki3KwOe0dh2tZ93/1E7WJ
PrtcQgZjDzrVl9c0BIFdH96KAtF59mTP6znPdVGD9k941C53fea1YHhkSKe0C8A2
idcbb33CV2QEfn1e5jo+0kiPdx7DYmIIiuy8Dn9+s2QraRBxVGlv+LsOY+FG49TS
bRU/U5e6dW/pf7vA5kDp+BcjWyAAio/Hhc7FCoSU3qap9tIOF/nhHyzOJlLh7oSs
vm4LaYD/vDHUxLwX4bCZKn8XlHDa6bH40JE7VPQc4tPC9pFHDxpf5g/SM38dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZOW3QOsyiLgf1YCGBtSWGuZA1nAwHwYDVR0j
BBgwFoAU0vyGN2cvaZXxcaJh1RZ0pQ/kVKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMS9EMkZDODYzNzY3MkY2OTk1RjE3MUEyNjFENTE2NzRBNTBGRTQ1NEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRkM4NjM3NjcyRjY5OTVG
MTcxQTI2MUQ1MTY3NEE1MEZFNDU0QTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzEv
MzIzODMwMzQzYTM0NjI2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzMzMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygES+CAMA0GCSqGSIb3DQEBCwUA
A4IBAQArldnnoT6eiWyjjav7YUgpi+sAJmV65E0bZ9dnoPatfRprRJzgAub6beaj
2qJBDz5aHLBQe0F9XOHbPfWh0QOXIw5p6lgl7uw7c3gMXVcQ5oLKARRHJ1EuydbJ
J2iUGsb4JYS0yDDciNihgeQH/l0WZbwOJjU8AiXLnJCvuI2+GRbjVo1/IbQtjUyB
JbORmnXZSdwAtR50pmtl4OHBxn5f8vqTgVtBitebZc2h2T+kEaQDtim5ZbLHtaaG
XJEIYFX7nMQt0U9wZtRjL6R6IhT6MpM9OMZKvuuT3inZNmczefjpZQCsnOueCmaR
yFJ7eOPFJKimkjhz9fTNksQtzZYK
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:27:52 2025 by rpki-client