Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          6f7ErT9lsoP+JZl2HIiQlTmGF1fF6YaMKCZ9MpZS9O0=
Subject key identifier:   A7:2B:AE:BD:AE:08:9F:EB:FD:C5:CF:A8:C4:14:2A:D4:73:DB:26:99
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       3DA528AA053398BBAD020222739A61A3FF951239
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:22 +0000
ROA not before:           Mon 17 Mar 2025 17:52:22 +0000
ROA not after:            Mon 16 Mar 2026 17:57:22 +0000
asID:                     263629
IP address blocks:        2804:104c:e400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a5:28:aa:05:33:98:bb:ad:02:02:22:73:9a:61:a3:ff:95:12:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:22 2025 GMT
            Not After : Mar 16 17:57:22 2026 GMT
        Subject: CN=A72BAEBDAE089FEBFDC5CFA8C4142AD473DB2699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:87:53:5d:06:54:7c:36:5c:f2:05:91:bd:
                    08:05:9e:3c:31:a3:36:87:95:17:9e:a5:21:67:78:
                    da:e2:de:94:a4:81:50:a5:41:49:69:70:0d:cb:60:
                    d8:25:5e:c8:7d:b5:8f:17:ca:5c:79:13:fa:43:d8:
                    d9:fe:28:3a:f9:31:14:ff:8a:53:1f:c6:b8:74:91:
                    6c:0f:97:7c:4e:2d:25:f6:64:ca:cc:8b:a7:e4:3a:
                    d3:7c:7e:1f:65:62:96:a0:f6:69:49:14:ac:1e:a8:
                    21:d0:b6:c3:6a:85:77:9b:5d:57:0b:73:40:8b:fc:
                    1d:f6:7c:bf:08:af:2d:63:e6:0e:cb:08:cb:38:99:
                    5c:0a:49:11:47:90:43:11:f6:5c:2b:3c:13:53:a2:
                    7f:4c:31:6d:db:f7:7e:5a:7b:82:94:b2:f6:56:aa:
                    3c:cf:05:71:c6:d3:ce:d3:eb:3b:36:00:96:8d:1c:
                    14:ef:f9:9e:cb:e4:a3:01:77:80:3f:fb:8a:26:1e:
                    06:11:b1:fe:99:fb:e2:7e:34:ba:b0:e2:ed:73:57:
                    9b:5d:1f:d0:2d:7d:50:10:09:35:23:87:16:a6:ea:
                    b9:a0:90:91:82:39:a7:ae:7b:82:34:d2:36:04:35:
                    b7:ed:f0:0d:d9:3d:cb:54:76:c7:08:a2:3e:d2:99:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2B:AE:BD:AE:08:9F:EB:FD:C5:CF:A8:C4:14:2A:D4:73:DB:26:99
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:97:1b:b8:8d:f5:b0:63:73:12:38:32:10:c7:ed:4e:1d:63:
         ff:28:42:b9:74:50:5a:10:e5:81:ea:49:a1:0c:b5:cf:30:b8:
         45:0f:d5:f7:48:7a:4f:3d:c4:cc:7b:4a:02:e6:72:2c:50:6e:
         77:4f:7b:bc:f9:23:9d:da:f2:69:29:ee:b9:94:b3:da:3a:a8:
         9a:be:b4:6c:a2:e8:17:78:ff:b2:87:04:b5:08:16:76:49:f5:
         cb:f2:0b:ac:27:76:94:08:16:2f:c4:6b:87:f5:5e:56:d5:be:
         84:c5:e0:4d:7b:10:e5:e9:21:14:ce:05:a5:bf:1d:f8:0c:60:
         9c:25:0b:e2:13:f7:92:f6:d1:81:94:46:c2:76:3d:50:b4:6a:
         e7:f5:4f:b1:ec:83:c4:ad:27:43:f0:93:99:40:41:84:5f:d6:
         8a:c9:6f:7b:c2:74:ca:55:7b:40:f9:b8:31:69:19:6d:b1:47:
         6b:2c:d3:62:7c:51:cd:05:c4:d9:7b:17:92:5a:a7:15:ab:91:
         93:a0:a3:42:35:0d:04:91:e1:0e:59:a1:43:92:fa:ec:bb:d0:
         5b:0b:8c:68:35:0d:b3:0e:42:6b:93:2a:05:09:e9:10:5b:19:
         23:51:73:fe:e6:57:8a:a3:42:05:4b:b0:fe:d9:00:c0:b8:9e:
         fc:8c:03:58
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPaUoqgUzmLutAgIic5pho/+VEjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5MjVBNzhGOEJGQ0I2MjBDODBDQzhGQUQ0N0Y1RjMw
MkVGRkJDRDAeFw0yNTAzMTcxNzUyMjJaFw0yNjAzMTYxNzU3MjJaMDMxMTAvBgNV
BAMTKEE3MkJBRUJEQUUwODlGRUJGREM1Q0ZBOEM0MTQyQUQ0NzNEQjI2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DodTXQZUfDZc8gWRvQgFnjwx
ozaHlReepSFneNri3pSkgVClQUlpcA3LYNglXsh9tY8Xylx5E/pD2Nn+KDr5MRT/
ilMfxrh0kWwPl3xOLSX2ZMrMi6fkOtN8fh9lYpag9mlJFKweqCHQtsNqhXebXVcL
c0CL/B32fL8Iry1j5g7LCMs4mVwKSRFHkEMR9lwrPBNTon9MMW3b935ae4KUsvZW
qjzPBXHG087T6zs2AJaNHBTv+Z7L5KMBd4A/+4omHgYRsf6Z++J+NLqw4u1zV5td
H9AtfVAQCTUjhxam6rmgkJGCOaeue4I00jYENbft8A3ZPctUdscIoj7SmbBHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpyuuva4In+v9xc+oxBQq1HPbJpkwHwYDVR0j
BBgwFoAU7JJaePi/y2IMgMyPrUf18wLv+80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC9FQzkyNUE3OEY4QkZDQjYyMEM4MENDOEZBRDQ3RjVGMzAyRUZGQkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTI1QTc4RjhCRkNCNjIw
QzgwQ0M4RkFENDdGNUYzMDJFRkZCQ0QuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2E2NTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEzkMA0GCSqGSIb3DQEBCwUA
A4IBAQATlxu4jfWwY3MSODIQx+1OHWP/KEK5dFBaEOWB6kmhDLXPMLhFD9X3SHpP
PcTMe0oC5nIsUG53T3u8+SOd2vJpKe65lLPaOqiavrRsougXeP+yhwS1CBZ2SfXL
8gusJ3aUCBYvxGuH9V5W1b6ExeBNexDl6SEUzgWlvx34DGCcJQviE/eS9tGBlEbC
dj1QtGrn9U+x7IPErSdD8JOZQEGEX9aKyW97wnTKVXtA+bgxaRltsUdrLNNifFHN
BcTZexeSWqcVq5GToKNCNQ0EkeEOWaFDkvrsu9BbC4xoNQ2zDkJrkyoFCekQWxkj
UXP+5leKo0IFS7D+2QDAuJ78jANY
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:22 2025 by rpki-client