Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa
File:                     323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa (raw, json)
Hash identifier:          8M55ueYEU9gD0wgP6cFlMxQg3ob6dzf7yhsdWbb13X8=
Subject key identifier:   71:BA:9F:10:23:0D:AE:8F:9A:96:78:AC:61:1B:96:85:0C:31:6C:7C
Certificate issuer:       /CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
Certificate serial:       652B9A80AC9AFDBB93C83198E7F9A0ED48C3011D
Authority key identifier: AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa
Signing time:             Thu 30 Jan 2025 18:28:28 +0000
ROA not before:           Thu 30 Jan 2025 18:23:28 +0000
ROA not after:            Thu 29 Jan 2026 18:28:28 +0000
asID:                     61608
IP address blocks:        2804:8270:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2b:9a:80:ac:9a:fd:bb:93:c8:31:98:e7:f9:a0:ed:48:c3:01:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01
        Validity
            Not Before: Jan 30 18:23:28 2025 GMT
            Not After : Jan 29 18:28:28 2026 GMT
        Subject: CN=71BA9F10230DAE8F9A9678AC611B96850C316C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:4c:09:7b:b0:53:79:c7:d9:52:a3:69:a8:
                    ff:90:7e:57:67:ee:32:6c:7c:eb:04:d9:c0:5c:e4:
                    5a:50:42:d9:8b:50:81:e4:b4:2c:3d:cc:a4:5d:ec:
                    4f:e5:f6:dd:9a:d7:16:84:d5:be:5a:cb:50:27:91:
                    c8:fc:c1:de:cc:4c:67:3a:e3:83:9b:b3:99:99:af:
                    bf:67:d0:1d:45:ca:41:c0:be:45:d3:ac:2a:e2:88:
                    8a:e7:2f:c1:75:a6:40:c1:0d:66:f6:29:f5:ae:3a:
                    0a:86:85:76:ad:00:6e:a3:8e:ff:7b:e6:53:d1:42:
                    34:a5:a7:0b:c4:bb:25:22:a3:a5:8d:e9:c5:6e:0d:
                    83:61:4e:6e:bf:3e:d4:7a:80:de:bf:88:9f:1c:c3:
                    02:cc:29:9e:75:c7:ad:ff:24:ee:32:06:d5:41:f1:
                    61:35:70:5b:0e:90:96:5a:1b:71:5a:12:9a:f0:38:
                    72:1d:85:e7:66:06:5b:0a:7f:51:d3:80:f7:8f:43:
                    ea:e6:c7:97:e5:52:33:1d:ad:81:4c:35:96:df:e8:
                    93:6d:be:4b:3f:43:89:7b:97:af:55:78:57:ee:86:
                    63:46:44:68:9b:c6:c4:4f:e3:a5:57:3c:4d:c5:ec:
                    bb:38:0f:60:b9:75:ca:bc:15:6c:29:9c:f8:7c:0c:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:9F:10:23:0D:AE:8F:9A:96:78:AC:61:1B:96:85:0C:31:6C:7C
            X509v3 Authority Key Identifier:
                keyid:AD:72:AB:44:A3:53:1C:FD:69:32:D3:C0:A8:DA:40:F1:37:CA:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD72AB44A3531CFD6932D3C0A8DA40F137CAAC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33342d3334203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:c2:62:da:a5:b6:f1:22:1c:3e:f6:00:77:1e:2e:3e:4f:
         ba:e1:96:df:a4:35:44:85:d6:14:bb:56:69:10:68:56:d7:20:
         6a:d8:44:e9:76:8b:4c:65:fd:58:bd:74:f9:6a:43:f5:c9:ec:
         c9:87:76:8a:69:88:56:09:bb:1a:40:8a:1f:07:eb:af:4d:9e:
         6e:40:a2:07:e7:cb:4a:e6:9c:26:93:3d:8d:68:0b:fd:7e:12:
         48:bf:49:a2:82:78:6a:e0:b7:fe:51:5a:04:bd:49:c0:f5:58:
         3f:90:ad:74:52:f7:38:b9:d1:d8:e8:22:e7:62:18:4c:6a:b8:
         51:48:0f:31:33:71:d7:7c:9d:d4:1b:e0:34:1b:6a:4e:a7:f4:
         83:ec:b6:e2:b4:d7:0c:a6:33:68:bf:00:3e:96:6f:77:e7:c4:
         5f:86:03:1d:e8:ea:3a:e3:0a:c6:ac:63:99:c0:99:4e:42:cd:
         67:a1:9f:1c:5e:a1:9c:ca:0a:cd:14:af:5e:2f:76:62:a1:56:
         08:7c:f2:05:02:26:71:8f:97:c2:c3:f4:a4:42:2b:2e:b6:20:
         3f:c2:8a:49:8f:0c:fe:be:86:ea:10:d5:48:7b:14:dc:e7:d9:
         78:1d:69:46:43:66:a3:20:6e:53:48:78:f2:2d:29:43:9b:c4:
         7e:68:9f:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZSuagKya/buTyDGY5/mg7UjDAR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ3MkFCNDRBMzUzMUNGRDY5MzJEM0MwQThEQTQwRjEz
N0NBQUMwMTAeFw0yNTAxMzAxODIzMjhaFw0yNjAxMjkxODI4MjhaMDMxMTAvBgNV
BAMTKDcxQkE5RjEwMjMwREFFOEY5QTk2NzhBQzYxMUI5Njg1MEMzMTZDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUkwJe7BTecfZUqNpqP+Qfldn
7jJsfOsE2cBc5FpQQtmLUIHktCw9zKRd7E/l9t2a1xaE1b5ay1Ankcj8wd7MTGc6
44Obs5mZr79n0B1FykHAvkXTrCriiIrnL8F1pkDBDWb2KfWuOgqGhXatAG6jjv97
5lPRQjSlpwvEuyUio6WN6cVuDYNhTm6/PtR6gN6/iJ8cwwLMKZ51x63/JO4yBtVB
8WE1cFsOkJZaG3FaEprwOHIdhedmBlsKf1HTgPePQ+rmx5flUjMdrYFMNZbf6JNt
vks/Q4l7l69VeFfuhmNGRGibxsRP46VXPE3F7Ls4D2C5dcq8FWwpnPh8DNW9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcbqfECMNro+alnisYRuWhQwxbHwwHwYDVR0j
BBgwFoAUrXKrRKNTHP1pMtPAqNpA8TfKrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9BRDcyQUI0NEEzNTMxQ0ZENjkzMkQzQzBBOERBNDBGMTM3Q0FBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENzJBQjQ0QTM1MzFDRkQ2
OTMyRDNDMEE4REE0MEYxMzdDQUFDMDEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv
MzIzODMwMzQzYTM4MzIzNzMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBIJwgDANBgkqhkiG9w0BAQsFAAOC
AQEALLvCYtqltvEiHD72AHceLj5PuuGW36Q1RIXWFLtWaRBoVtcgathE6XaLTGX9
WL10+WpD9cnsyYd2immIVgm7GkCKHwfrr02ebkCiB+fLSuacJpM9jWgL/X4SSL9J
ooJ4auC3/lFaBL1JwPVYP5CtdFL3OLnR2Ogi52IYTGq4UUgPMTNx13yd1BvgNBtq
Tqf0g+y24rTXDKYzaL8APpZvd+fEX4YDHejqOuMKxqxjmcCZTkLNZ6GfHF6hnMoK
zRSvXi92YqFWCHzyBQImcY+XwsP0pEIrLrYgP8KKSY8M/r6G6hDVSHsU3OfZeB1p
RkNmoyBuU0h48i0pQ5vEfmifHA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:45 2025 by rpki-client