Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a363666633a3a2f33322d3438203d3e203238313538.roa
File:                     323830343a363666633a3a2f33322d3438203d3e203238313538.roa (raw, json)
Hash identifier:          /VEh3KrjoTUp6Kfjc30HuDWO4QlrzQ5XQX0SRkEK6XE=
Subject key identifier:   55:10:96:62:21:43:CA:E1:4A:35:E5:38:EE:A1:5F:6C:29:8D:3C:1C
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       271D0063DD77C0FF3CD3C932D27CE0DEE057A21E
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a363666633a3a2f33322d3438203d3e203238313538.roa
Signing time:             Mon 17 Mar 2025 14:59:53 +0000
ROA not before:           Mon 17 Mar 2025 14:54:53 +0000
ROA not after:            Mon 16 Mar 2026 14:59:53 +0000
asID:                     28158
IP address blocks:        2804:66fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1d:00:63:dd:77:c0:ff:3c:d3:c9:32:d2:7c:e0:de:e0:57:a2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Mar 17 14:54:53 2025 GMT
            Not After : Mar 16 14:59:53 2026 GMT
        Subject: CN=551096622143CAE14A35E538EEA15F6C298D3C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:3e:79:c6:9a:95:54:0f:fb:94:d1:cc:df:
                    84:9d:93:c6:74:73:8a:ea:83:74:8d:b4:e6:76:57:
                    6e:9b:2e:70:e6:de:4e:ff:75:cd:bc:b3:94:c7:23:
                    60:3e:9a:15:94:eb:18:9f:d7:a1:31:07:19:63:cd:
                    3a:b7:b2:c6:62:cb:16:b8:6f:3d:48:fd:7c:02:3e:
                    c3:05:04:cb:3f:32:21:2e:47:4a:47:f9:f3:2b:26:
                    78:19:d0:a3:1b:b6:1a:d8:9f:ba:9c:6f:99:5b:0c:
                    ea:47:a6:af:e6:62:f7:27:48:33:52:34:7f:7b:75:
                    29:76:cc:92:f9:96:af:fa:cc:8e:c8:9c:bd:0a:f7:
                    ac:a8:35:08:6d:96:6d:3a:fd:0e:3b:f2:3e:90:0c:
                    34:41:3c:7c:2d:d4:c4:19:0f:98:c0:8c:dd:92:11:
                    2b:a4:f0:55:36:e1:8f:ec:0b:b9:a7:78:fe:5a:fa:
                    ef:e1:cf:6c:79:53:12:2d:99:fb:f4:8d:bd:a7:c1:
                    09:00:21:c6:39:da:39:71:1d:8c:7a:88:70:5f:87:
                    86:e7:c5:47:50:0f:67:2d:23:5c:b8:5b:30:b1:11:
                    95:c0:7a:10:93:bd:c7:7e:46:82:45:c5:0a:ef:bc:
                    82:f1:33:61:9b:d0:f7:c1:4e:ab:38:fb:8c:fe:10:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:10:96:62:21:43:CA:E1:4A:35:E5:38:EE:A1:5F:6C:29:8D:3C:1C
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a363666633a3a2f33322d3438203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:7b:bb:ec:2f:5e:9a:30:60:38:31:52:9a:ce:fb:33:13:
         68:18:1f:84:4d:53:de:e0:9f:7d:e3:ff:c4:12:02:db:8f:87:
         1b:71:80:b9:6f:37:05:8b:7e:4c:ac:32:b1:6f:dc:1e:14:3c:
         bc:e3:86:a1:3a:f8:02:16:6e:25:82:0c:a5:55:e5:af:20:58:
         4e:39:c1:2a:b3:f7:f8:db:c2:0a:2b:c9:72:ae:ce:d0:4c:84:
         8a:dc:8c:86:e6:d3:b1:eb:3e:2c:78:6c:f8:0d:87:01:69:6b:
         b8:9f:c1:61:e2:76:75:e5:0d:16:28:20:67:58:e2:6f:c8:6a:
         65:41:5b:2f:ef:ca:74:1b:a6:b6:36:79:25:95:2f:39:56:d8:
         3e:37:4d:fc:52:89:5a:31:a9:f0:b1:59:95:7f:35:30:90:a3:
         36:64:6b:32:65:56:f5:5a:99:f4:d1:79:78:11:f6:c4:00:20:
         ba:39:e3:d0:d4:16:ea:11:51:91:26:1b:eb:2f:a3:7b:b8:32:
         c0:93:2a:19:70:b7:36:ba:7f:93:32:ca:41:a2:08:c5:7e:57:
         a0:2f:5a:8b:14:50:59:74:97:24:86:6e:bd:41:b2:de:7c:b4:
         70:a4:33:9c:be:d1:1a:c5:fa:13:af:72:0d:a0:e9:ca:87:f7:
         b1:84:c3:b3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJx0AY913wP8808ky0nzg3uBXoh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNTAzMTcxNDU0NTNaFw0yNjAzMTYxNDU5NTNaMDMxMTAvBgNV
BAMTKDU1MTA5NjYyMjE0M0NBRTE0QTM1RTUzOEVFQTE1RjZDMjk4RDNDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGD55xpqVVA/7lNHM34Sdk8Z0
c4rqg3SNtOZ2V26bLnDm3k7/dc28s5THI2A+mhWU6xif16ExBxljzTq3ssZiyxa4
bz1I/XwCPsMFBMs/MiEuR0pH+fMrJngZ0KMbthrYn7qcb5lbDOpHpq/mYvcnSDNS
NH97dSl2zJL5lq/6zI7InL0K96yoNQhtlm06/Q478j6QDDRBPHwt1MQZD5jAjN2S
ESuk8FU24Y/sC7mneP5a+u/hz2x5UxItmfv0jb2nwQkAIcY52jlxHYx6iHBfh4bn
xUdQD2ctI1y4WzCxEZXAehCTvcd+RoJFxQrvvILxM2Gb0PfBTqs4+4z+EAxzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVRCWYiFDyuFKNeU47qFfbCmNPBwwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzIzODMwMzQzYTM2MzY2NjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMx
MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEZvwwDQYJKoZIhvcNAQELBQADggEBADvNe7vsL16a
MGA4MVKazvszE2gYH4RNU97gn33j/8QSAtuPhxtxgLlvNwWLfkysMrFv3B4UPLzj
hqE6+AIWbiWCDKVV5a8gWE45wSqz9/jbwgoryXKuztBMhIrcjIbm07HrPix4bPgN
hwFpa7ifwWHidnXlDRYoIGdY4m/IamVBWy/vynQbprY2eSWVLzlW2D43TfxSiVox
qfCxWZV/NTCQozZkazJlVvVamfTReXgR9sQAILo549DUFuoRUZEmG+svo3u4MsCT
Khlwtza6f5MyykGiCMV+V6AvWosUUFl0lySGbr1Bst58tHCkM5y+0RrF+hOvcg2g
6cqH97GEw7M=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:26 2025 by rpki-client