Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa
File:                     323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa (raw, json)
Hash identifier:          dC63BFgwbGL0IGvpV5eiKCAMMo7+GrQ0xPxAIG8+r7U=
Subject key identifier:   A2:B3:27:17:8C:5C:2D:B5:1A:42:40:79:82:E5:6D:D5:40:7D:58:11
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       2B626CCFE3CF56F920451289E088712B78DF5C9D
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa
Signing time:             Wed 05 Mar 2025 20:58:12 +0000
ROA not before:           Wed 05 Mar 2025 20:53:12 +0000
ROA not after:            Wed 04 Mar 2026 20:58:12 +0000
asID:                     270319
IP address blocks:        2804:6a34:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:62:6c:cf:e3:cf:56:f9:20:45:12:89:e0:88:71:2b:78:df:5c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Mar  5 20:53:12 2025 GMT
            Not After : Mar  4 20:58:12 2026 GMT
        Subject: CN=A2B327178C5C2DB51A42407982E56DD5407D5811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:00:c4:42:de:7d:19:3f:ac:54:5e:4f:a3:
                    82:ca:a9:b2:94:d0:f0:31:00:7b:a9:06:17:bd:e7:
                    9e:c5:a0:37:65:bb:5e:b2:e4:c8:b8:1c:fd:b9:15:
                    12:6b:77:c5:df:45:03:fb:76:c2:fa:b8:e8:9e:1c:
                    e2:38:14:d3:98:48:8c:dd:42:b8:ca:3f:51:88:7a:
                    68:c5:47:0d:9b:ca:93:f1:1a:87:05:be:2d:13:53:
                    40:16:61:2b:35:6e:e5:05:50:73:10:8f:26:f2:55:
                    c2:e8:7c:1e:de:b7:69:46:95:9c:28:7d:93:8d:32:
                    c4:09:0e:2e:11:f6:ee:d0:2d:61:eb:db:5b:8b:b7:
                    db:f0:ef:d5:52:42:22:95:49:2e:77:32:18:c9:85:
                    49:67:28:d1:8e:a3:ed:7e:c7:da:4c:8d:35:53:b1:
                    73:a5:ec:80:15:fe:ea:99:2d:09:52:1c:22:8f:49:
                    c5:46:1e:39:77:25:ad:49:d1:17:21:e7:a3:db:67:
                    2d:ab:a0:f3:74:e3:84:ac:2d:90:14:b3:b7:f6:af:
                    7b:f3:da:e5:e4:88:a5:58:50:1e:bf:72:1b:4a:c0:
                    57:50:ee:4b:b9:ca:5b:dd:6f:5f:c8:c9:a7:7d:92:
                    f3:2b:cb:38:75:4a:91:34:d8:fd:86:1a:7c:30:1d:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B3:27:17:8C:5C:2D:B5:1A:42:40:79:82:E5:6D:D5:40:7D:58:11
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b0:7e:89:c6:15:af:43:11:f2:11:2d:c4:c5:88:91:01:78:68:
         73:a3:52:80:eb:b4:d9:18:f2:ce:c6:37:97:f2:87:91:f9:a9:
         18:11:c2:98:8e:b3:ea:fd:6d:d1:03:3f:22:d0:f6:4c:6a:89:
         70:15:e1:1e:a0:e4:e1:e8:d2:06:33:6a:20:97:4f:88:55:21:
         03:be:99:77:1c:fe:cf:74:e2:6d:4f:20:d3:d7:04:91:92:70:
         40:2f:dd:f5:d9:9d:11:f7:e0:c1:e0:bc:af:34:f8:3e:52:54:
         ee:41:25:65:87:71:12:7a:7b:5b:7a:30:6b:7d:71:f2:8a:4a:
         7c:81:19:af:82:65:4d:68:7d:90:24:ed:cf:11:3e:8e:e1:61:
         0e:b1:0a:14:ee:5e:b9:59:f6:14:80:ac:3b:3c:9b:6a:44:2d:
         d5:c3:c3:42:2b:70:77:61:2c:45:bb:20:a8:53:81:eb:28:d9:
         94:d6:e7:90:90:13:d4:42:1b:3b:61:26:93:ba:aa:e7:bc:34:
         a2:10:e2:f6:53:b4:69:e4:1e:af:f9:c9:e2:40:df:38:a4:ae:
         23:5a:5d:64:bf:b0:c7:27:4c:0a:7d:04:3b:85:55:9a:99:1d:
         6a:4c:34:8a:8c:2d:1f:4c:f3:f5:ca:14:7c:96:89:57:41:79:
         d8:24:3e:be
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK2Jsz+PPVvkgRRKJ4IhxK3jfXJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc4QkM5MTM4OEMwMjRGMjk0RjdFNUUyRTU0Q0ZGMjFE
MThBNjI2RDAeFw0yNTAzMDUyMDUzMTJaFw0yNjAzMDQyMDU4MTJaMDMxMTAvBgNV
BAMTKEEyQjMyNzE3OEM1QzJEQjUxQTQyNDA3OTgyRTU2REQ1NDA3RDU4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWwDEQt59GT+sVF5Po4LKqbKU
0PAxAHupBhe9557FoDdlu16y5Mi4HP25FRJrd8XfRQP7dsL6uOieHOI4FNOYSIzd
QrjKP1GIemjFRw2bypPxGocFvi0TU0AWYSs1buUFUHMQjybyVcLofB7et2lGlZwo
fZONMsQJDi4R9u7QLWHr21uLt9vw79VSQiKVSS53MhjJhUlnKNGOo+1+x9pMjTVT
sXOl7IAV/uqZLQlSHCKPScVGHjl3Ja1J0Rch56PbZy2roPN044SsLZAUs7f2r3vz
2uXkiKVYUB6/chtKwFdQ7ku5ylvdb1/Iyad9kvMryzh1SpE02P2GGnwwHUIRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUorMnF4xcLbUaQkB5guVt1UB9WBEwHwYDVR0j
BBgwFoAUR4vJE4jAJPKU9+Xi5Uz/IdGKYm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVkdG1Hckd1SGVTZDNEb2oybmN0eEhQZk5hcndUcURSamdYOEU1Wm96
cmEvMS80NzhCQzkxMzg4QzAyNEYyOTRGN0U1RTJFNTRDRkYyMUQxOEE2MjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3OEJDOTEzODhDMDI0RjI5
NEY3RTVFMkU1NENGRjIxRDE4QTYyNkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1ZHRtR3JHdUhlU2QzRG9qMm5jdHhIUGZOYXJ3VHFEUmpnWDhFNVpvenJhLzEv
MzIzODMwMzQzYTM2NjEzMzM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDMzMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEajSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCwfonGFa9DEfIRLcTFiJEBeGhzo1KA67TZGPLOxjeX8oeR+akYEcKYjrPq
/W3RAz8i0PZMaolwFeEeoOTh6NIGM2ogl0+IVSEDvpl3HP7PdOJtTyDT1wSRknBA
L9312Z0R9+DB4LyvNPg+UlTuQSVlh3ESentbejBrfXHyikp8gRmvgmVNaH2QJO3P
ET6O4WEOsQoU7l65WfYUgKw7PJtqRC3Vw8NCK3B3YSxFuyCoU4HrKNmU1ueQkBPU
Qhs7YSaTuqrnvDSiEOL2U7Rp5B6v+cniQN84pK4jWl1kv7DHJ0wKfQQ7hVWamR1q
TDSKjC0fTPP1yhR8lolXQXnYJD6+
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:01 2025 by rpki-client