Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa
File:                     323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (raw, json)
Hash identifier:          RTx6CCPuW1lY1SE9RqyeFLKfpghK/ucENv3ATWs3J+g=
Subject key identifier:   E4:15:62:A8:51:5D:A3:BB:F1:EC:E0:92:B3:7C:86:64:5D:5E:F6:B7
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       71EDD161E0180FFEFE1ECDF68852978EE6DAC5EB
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa
Signing time:             Thu 06 Mar 2025 00:33:05 +0000
ROA not before:           Thu 06 Mar 2025 00:28:05 +0000
ROA not after:            Thu 05 Mar 2026 00:33:05 +0000
asID:                     263924
IP address blocks:        2804:27d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:d1:61:e0:18:0f:fe:fe:1e:cd:f6:88:52:97:8e:e6:da:c5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Mar  6 00:28:05 2025 GMT
            Not After : Mar  5 00:33:05 2026 GMT
        Subject: CN=E41562A8515DA3BBF1ECE092B37C86645D5EF6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:27:70:6a:18:16:ff:0d:fd:d8:a3:f6:0e:
                    3c:f5:ed:6e:e3:36:31:d6:0d:a2:a8:05:31:92:e5:
                    25:27:ca:bd:2a:66:9f:46:ad:89:5b:46:7b:b2:12:
                    5d:de:20:bb:ed:57:cd:65:d0:1a:84:0a:9a:b1:09:
                    26:7f:b9:5d:a6:48:0b:e4:64:de:39:62:dd:96:a8:
                    7c:1a:75:e7:86:95:10:34:eb:91:fa:13:42:3c:8d:
                    26:88:dc:e0:a6:5a:e2:2b:da:f7:14:d4:57:ce:0f:
                    4d:61:9c:d1:d1:43:48:84:8f:9b:2a:0a:9a:6a:c9:
                    05:d7:31:4b:fe:e7:d2:86:81:09:22:0e:d6:7e:dc:
                    23:fb:59:f1:ce:cf:b5:6b:e2:47:04:5f:7e:85:d9:
                    de:3f:4e:7b:97:72:33:24:fc:a2:39:49:65:67:a0:
                    d9:3b:55:ea:41:56:b4:d3:49:04:de:d9:8c:ae:ac:
                    a7:80:d3:a8:25:d6:9d:2a:1d:24:70:89:c7:70:ce:
                    91:75:4f:28:47:41:95:ff:88:8c:da:6e:05:d1:93:
                    fa:30:7e:4a:84:e8:8f:c1:61:8e:99:f2:82:25:9b:
                    61:de:9d:31:13:ca:a0:bf:1d:89:92:65:53:51:92:
                    55:0a:09:fb:6e:33:26:86:25:a4:2a:a0:6a:7a:4b:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:15:62:A8:51:5D:A3:BB:F1:EC:E0:92:B3:7C:86:64:5D:5E:F6:B7
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/323830343a323764343a3a2f33322d3438203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:17:ad:ea:f1:fd:61:5b:e0:73:77:ce:d5:1b:74:f6:9f:
         71:e8:c6:11:5b:c8:fb:72:4c:11:94:ff:e4:a2:12:fb:cf:3b:
         d7:6e:48:5c:8f:ea:28:a5:68:1b:6c:ae:31:be:1a:a1:7b:51:
         b7:d4:37:c7:8f:e7:13:42:de:89:47:16:77:2b:1d:0a:3e:83:
         4e:e9:04:44:a0:e5:e5:b9:fc:bd:01:4e:7b:0c:a3:5e:48:fc:
         e1:da:8a:36:10:4b:c4:5e:50:e1:21:ed:09:4b:88:6b:b0:45:
         c0:e4:b0:e0:9e:87:9b:67:e3:ac:a1:b5:24:05:7d:14:f4:ed:
         b4:74:bc:74:cb:90:1a:98:c7:58:5d:a3:a8:3d:58:46:54:45:
         d4:f8:78:f2:c6:31:7c:20:03:60:90:ec:c1:1e:77:de:76:99:
         d4:b4:51:64:3a:fe:ae:32:b3:ce:8e:e3:8c:22:00:d9:d1:7b:
         62:a7:d1:c7:ec:4f:f9:fe:ad:d7:c1:66:fb:ed:8d:32:ee:3c:
         79:58:1b:22:d8:c8:cf:4c:f1:52:6d:4f:26:6c:c9:fe:41:b1:
         b8:cc:d0:82:5d:22:4e:f0:27:40:8d:9d:9b:35:70:cf:80:3e:
         15:b4:a7:65:51:91:cc:78:19:02:40:09:28:7c:07:a9:a2:0a:
         e8:c4:09:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUce3RYeAYD/7+Hs32iFKXjubaxeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ2RkQ3RUVERjQ1QTZCQjVGMUI2NkRERDQ0NDk0NjRG
RTE4QkNBRTAeFw0yNTAzMDYwMDI4MDVaFw0yNjAzMDUwMDMzMDVaMDMxMTAvBgNV
BAMTKEU0MTU2MkE4NTE1REEzQkJGMUVDRTA5MkIzN0M4NjY0NUQ1RUY2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRidwahgW/w392KP2Djz17W7j
NjHWDaKoBTGS5SUnyr0qZp9GrYlbRnuyEl3eILvtV81l0BqECpqxCSZ/uV2mSAvk
ZN45Yt2WqHwadeeGlRA065H6E0I8jSaI3OCmWuIr2vcU1FfOD01hnNHRQ0iEj5sq
CppqyQXXMUv+59KGgQkiDtZ+3CP7WfHOz7Vr4kcEX36F2d4/TnuXcjMk/KI5SWVn
oNk7VepBVrTTSQTe2YyurKeA06gl1p0qHSRwicdwzpF1TyhHQZX/iIzabgXRk/ow
fkqE6I/BYY6Z8oIlm2HenTETyqC/HYmSZVNRklUKCftuMyaGJaQqoGp6S61zAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5BViqFFdo7vx7OCSs3yGZF1e9rcwHwYDVR0j
BBgwFoAUXW/X7t9FprtfG2bd1ESUZP4YvK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMS81RDZGRDdFRURGNDVBNkJCNUYxQjY2RERENDQ0OTQ2NEZFMThCQ0FFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENkZEN0VFREY0NUE2QkI1
RjFCNjZEREQ0NDQ5NDY0RkUxOEJDQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzEv
MzIzODMwMzQzYTMyMzc2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQn1DANBgkqhkiG9w0BAQsFAAOCAQEApDMXrerx
/WFb4HN3ztUbdPafcejGEVvI+3JMEZT/5KIS+887125IXI/qKKVoG2yuMb4aoXtR
t9Q3x4/nE0LeiUcWdysdCj6DTukERKDl5bn8vQFOewyjXkj84dqKNhBLxF5Q4SHt
CUuIa7BFwOSw4J6Hm2fjrKG1JAV9FPTttHS8dMuQGpjHWF2jqD1YRlRF1Ph48sYx
fCADYJDswR533naZ1LRRZDr+rjKzzo7jjCIA2dF7YqfRx+xP+f6t18Fm++2NMu48
eVgbItjIz0zxUm1PJmzJ/kGxuMzQgl0iTvAnQI2dmzVwz4A+FbSnZVGRzHgZAkAJ
KHwHqaIK6MQJ1w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:50:37 2025 by rpki-client