Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/323830343a333233343a3a2f33322d313238203d3e20323635303632.roa
File:                     323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (raw, json)
Hash identifier:          tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=
Subject key identifier:   F9:29:4A:02:7F:BF:1D:44:70:F4:CD:95:77:E6:5B:A4:B1:2B:25:12
Certificate issuer:       /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
Certificate serial:       429C903490822BBD62A02BD6D4DE6BF75D741083
Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/323830343a333233343a3a2f33322d313238203d3e20323635303632.roa
Signing time:             Fri 31 Jan 2025 18:48:51 +0000
ROA not before:           Fri 31 Jan 2025 18:43:51 +0000
ROA not after:            Fri 30 Jan 2026 18:48:51 +0000
asID:                     265062
IP address blocks:        2804:3234::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl
                          rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:90:34:90:82:2b:bd:62:a0:2b:d6:d4:de:6b:f7:5d:74:10:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8
        Validity
            Not Before: Jan 31 18:43:51 2025 GMT
            Not After : Jan 30 18:48:51 2026 GMT
        Subject: CN=F9294A027FBF1D4470F4CD9577E65BA4B12B2512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:29:89:97:31:3e:ae:e5:8d:d9:4c:8f:6d:
                    ed:e7:dc:9c:66:0a:ad:92:18:39:41:83:a9:26:68:
                    73:a5:34:46:e8:e3:c2:a0:79:b6:c8:18:40:0f:2c:
                    ec:5f:9f:ca:a3:98:1b:eb:fc:72:16:c8:ab:93:37:
                    85:0c:f4:80:cf:e6:2f:3b:36:1a:96:a9:bf:c9:13:
                    54:40:e4:ff:68:f7:d4:8f:f6:14:60:f1:1a:47:d0:
                    e2:89:24:7c:51:dd:dc:2b:02:ec:10:94:49:48:5c:
                    88:e8:8c:8e:48:c6:30:2c:17:83:38:95:1a:19:57:
                    0f:5d:3a:ba:8e:4b:e6:ac:4d:25:ab:85:22:43:48:
                    fe:c3:25:99:1f:da:48:a9:4b:8d:cc:6e:6f:91:cf:
                    37:f0:98:56:10:b3:c7:87:ae:93:ac:e4:da:bf:03:
                    83:ae:87:25:29:c9:95:ec:80:8c:86:2e:2f:fe:60:
                    5b:03:a0:39:b1:28:6f:f3:79:86:bc:d6:c4:31:75:
                    d7:11:c7:2a:61:64:f2:e1:78:20:a5:c2:a5:38:02:
                    72:97:ee:ac:5a:88:7e:5c:b0:04:7b:d3:1c:d0:40:
                    39:df:9d:b4:8c:26:31:b3:c9:cf:ac:0c:34:fb:43:
                    27:5e:c6:89:33:a7:d3:93:d3:e3:b3:c7:a5:57:6b:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:4A:02:7F:BF:1D:44:70:F4:CD:95:77:E6:5B:A4:B1:2B:25:12
            X509v3 Authority Key Identifier:
                keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/323830343a333233343a3a2f33322d313238203d3e20323635303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3234::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:4b:c4:17:56:60:0d:0c:f6:1d:1d:94:0a:f2:f9:97:bc:df:
         e5:9b:15:92:9a:a2:72:f7:fe:24:03:a4:9a:ab:e0:54:91:00:
         4a:49:d1:2d:fe:98:df:d8:45:3e:c1:b6:cf:55:37:f8:83:67:
         61:5b:5b:b8:03:e7:43:5b:ed:b6:dc:3e:90:b0:bf:b5:11:23:
         21:14:74:a0:1f:38:4b:68:d5:13:85:a6:f7:ac:93:8c:07:4f:
         52:25:b6:4c:5d:f3:aa:55:3e:68:93:5e:9e:72:f3:06:d2:c2:
         3a:a3:a2:ad:76:d5:69:50:6d:c7:66:93:81:44:54:3e:00:13:
         c9:e5:70:22:31:52:33:b0:87:d2:87:b4:ab:d8:ad:2b:34:a8:
         18:a8:43:02:92:c8:c4:13:fc:b0:c3:92:f0:c3:53:d7:6a:c1:
         ab:7c:42:8e:06:cf:20:9f:67:78:00:a4:39:0f:79:b2:bb:26:
         ef:f1:9c:24:c6:60:7e:fa:76:1b:f8:71:96:96:cc:7f:45:65:
         8b:64:a2:3d:f6:3c:fb:df:2f:47:40:21:ab:b9:6c:27:19:cf:
         9d:36:20:d4:17:ec:5a:4f:4f:93:4b:89:d0:9a:f9:b1:73:29:
         31:d1:0b:60:46:4a:08:c6:32:b1:e7:08:a8:a8:20:b4:74:bd:
         af:32:74:32
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQpyQNJCCK71ioCvW1N5r9110EIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy
QjBDOTFDODAeFw0yNTAxMzExODQzNTFaFw0yNjAxMzAxODQ4NTFaMDMxMTAvBgNV
BAMTKEY5Mjk0QTAyN0ZCRjFENDQ3MEY0Q0Q5NTc3RTY1QkE0QjEyQjI1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT/imJlzE+ruWN2UyPbe3n3Jxm
Cq2SGDlBg6kmaHOlNEbo48KgebbIGEAPLOxfn8qjmBvr/HIWyKuTN4UM9IDP5i87
NhqWqb/JE1RA5P9o99SP9hRg8RpH0OKJJHxR3dwrAuwQlElIXIjojI5IxjAsF4M4
lRoZVw9dOrqOS+asTSWrhSJDSP7DJZkf2kipS43Mbm+RzzfwmFYQs8eHrpOs5Nq/
A4OuhyUpyZXsgIyGLi/+YFsDoDmxKG/zeYa81sQxddcRxyphZPLheCClwqU4AnKX
7qxaiH5csAR70xzQQDnfnbSMJjGzyc+sDDT7Qydexokzp9OT0+Ozx6VXa/Z9AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+SlKAn+/HURw9M2Vd+ZbpLErJRIwHwYDVR0j
BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw
WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG
QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKQWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAv
MzIzODMwMzQzYTMzMzIzMzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMDM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDI0MA0GCSqGSIb3DQEBCwUAA4IBAQC4S8QX
VmANDPYdHZQK8vmXvN/lmxWSmqJy9/4kA6Saq+BUkQBKSdEt/pjf2EU+wbbPVTf4
g2dhW1u4A+dDW+223D6QsL+1ESMhFHSgHzhLaNUThab3rJOMB09SJbZMXfOqVT5o
k16ecvMG0sI6o6KtdtVpUG3HZpOBRFQ+ABPJ5XAiMVIzsIfSh7Sr2K0rNKgYqEMC
ksjEE/yww5Lww1PXasGrfEKOBs8gn2d4AKQ5D3myuybv8ZwkxmB++nYb+HGWlsx/
RWWLZKI99jz73y9HQCGruWwnGc+dNiDUF+xaT0+TS4nQmvmxcykx0QtgRkoIxjKx
5wioqCC0dL2vMnQy
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:12:47 2025 by rpki-client