Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa
File:                     323830343a383237303a3a2f33322d3332203d3e203631363038.roa (raw, json)
Hash identifier:          H9qowQF/SpXmz3S5/d5U/rTdCgt8/nzkpD2mndzgZdo=
Subject key identifier:   AF:D9:57:38:80:CA:55:78:4C:5A:B6:CD:F9:F6:43:F8:58:A4:4B:AA
Certificate issuer:       /CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
Certificate serial:       5C0860A1C4DC9FF09C9238E65061E949F2EC2A46
Authority key identifier: B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa
Signing time:             Wed 19 Mar 2025 20:09:08 +0000
ROA not before:           Wed 19 Mar 2025 20:04:08 +0000
ROA not after:            Wed 18 Mar 2026 20:09:08 +0000
asID:                     61608
IP address blocks:        2804:8270::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl
                          rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 14:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:60:a1:c4:dc:9f:f0:9c:92:38:e6:50:61:e9:49:f2:ec:2a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3
        Validity
            Not Before: Mar 19 20:04:08 2025 GMT
            Not After : Mar 18 20:09:08 2026 GMT
        Subject: CN=AFD9573880CA55784C5AB6CDF9F643F858A44BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:9c:4b:5d:a6:94:c6:1a:eb:93:4b:cf:55:
                    42:2b:e3:1c:59:a1:ea:96:99:90:28:fc:1c:32:81:
                    b8:1c:5f:0a:71:65:bc:ec:3a:91:18:97:08:77:c5:
                    34:06:7f:59:54:e2:57:81:c1:d4:33:0f:06:03:e7:
                    20:81:8b:a0:e3:a7:ef:e4:5d:f6:f5:6b:5c:b7:35:
                    11:ee:3c:5a:18:0f:5b:3f:c8:23:78:2a:6d:84:dc:
                    62:a7:d9:48:cb:df:4e:f9:ac:4a:1b:99:50:04:40:
                    20:7e:84:56:91:55:35:a6:1c:ce:7e:ef:50:b5:5d:
                    d9:03:f5:8a:2a:11:55:c1:05:cd:e5:32:34:b4:f8:
                    72:c9:0d:9f:da:c2:d9:76:5a:23:74:eb:d2:ed:b3:
                    a8:94:cf:5c:d5:51:6a:98:2c:ed:e8:b5:02:65:57:
                    c3:18:e1:45:2c:cf:17:88:7d:5a:21:79:17:f3:27:
                    0b:74:d8:ce:aa:cf:6b:0e:bd:a0:1a:93:32:eb:ac:
                    f1:54:0b:65:e8:44:ad:b4:c7:63:b1:b8:b4:e2:2e:
                    74:51:70:a5:9c:18:83:de:28:c1:18:ad:39:b8:25:
                    11:fb:bf:bd:19:f2:29:0f:f7:a0:cd:39:dc:38:41:
                    2a:54:81:42:59:47:bf:88:51:77:4a:bc:2f:15:a2:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:57:38:80:CA:55:78:4C:5A:B6:CD:F9:F6:43:F8:58:A4:4B:AA
            X509v3 Authority Key Identifier:
                keyid:B0:4E:CA:62:1E:6F:CB:90:F1:46:9D:B6:E8:9A:D4:D2:DE:D7:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B04ECA621E6FCB90F1469DB6E89AD4D2DED79CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a3a2f33322d3332203d3e203631363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8270::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:c4:17:90:62:40:5d:8e:6b:ee:76:cf:9e:07:30:80:cc:
         21:02:49:70:17:50:ec:e7:7c:9c:4e:05:3a:c1:d6:04:d2:1f:
         97:dc:3c:5f:15:d0:c6:54:c5:e2:a4:48:3c:00:1a:24:10:d6:
         57:02:3a:76:61:0b:3c:93:df:7f:fc:7a:b8:32:35:26:7a:7d:
         ff:8d:af:59:85:2e:02:98:1d:d3:f5:02:a6:c8:ae:17:60:8c:
         c5:c4:47:83:c4:77:07:f2:c0:11:e9:2a:83:d0:0b:5a:8b:99:
         bc:a3:34:27:7c:2a:e9:fd:21:36:f8:79:5d:5e:b8:6d:57:fc:
         95:af:02:7c:1d:3f:03:79:f0:e5:09:bc:63:ee:09:a7:2c:66:
         59:8c:c4:69:dc:64:30:b2:70:9b:68:fb:3d:bc:d4:75:1d:37:
         4f:e4:25:ab:c3:14:13:54:97:98:c8:78:37:24:e6:5a:c5:a4:
         16:5c:72:a4:b2:57:de:41:c3:c3:21:ed:77:d1:12:a3:57:9e:
         b0:d4:65:a5:1d:b9:48:a2:51:f2:ba:0e:39:80:65:ed:77:04:
         b0:35:af:4d:c1:77:4b:56:b3:c8:97:37:f6:ae:28:7e:82:7c:
         9a:64:9c:38:42:87:4d:b1:d8:d8:7b:18:e1:d6:73:43:9b:db:
         97:c1:7c:9a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXAhgocTcn/CckjjmUGHpSfLsKkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0RUNBNjIxRTZGQ0I5MEYxNDY5REI2RTg5QUQ0RDJE
RUQ3OUNDMzAeFw0yNTAzMTkyMDA0MDhaFw0yNjAzMTgyMDA5MDhaMDMxMTAvBgNV
BAMTKEFGRDk1NzM4ODBDQTU1Nzg0QzVBQjZDREY5RjY0M0Y4NThBNDRCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlJxLXaaUxhrrk0vPVUIr4xxZ
oeqWmZAo/BwygbgcXwpxZbzsOpEYlwh3xTQGf1lU4leBwdQzDwYD5yCBi6Djp+/k
Xfb1a1y3NRHuPFoYD1s/yCN4Km2E3GKn2UjL3075rEobmVAEQCB+hFaRVTWmHM5+
71C1XdkD9YoqEVXBBc3lMjS0+HLJDZ/awtl2WiN069Lts6iUz1zVUWqYLO3otQJl
V8MY4UUszxeIfVoheRfzJwt02M6qz2sOvaAakzLrrPFUC2XoRK20x2OxuLTiLnRR
cKWcGIPeKMEYrTm4JRH7v70Z8ikP96DNOdw4QSpUgUJZR7+IUXdKvC8VogYZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUr9lXOIDKVXhMWrbN+fZD+FikS6owHwYDVR0j
BBgwFoAUsE7KYh5vy5DxRp226JrU0t7XnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H
Yk0vMC9CMDRFQ0E2MjFFNkZDQjkwRjE0NjlEQjZFODlBRDREMkRFRDc5Q0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwNEVDQTYyMUU2RkNCOTBG
MTQ2OURCNkU4OUFENEQyREVENzlDQzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOcEJraXVzN3I2TjVXUzFYWGJVVk1keUJ4a1ZjamExSHo2bkJqTUpuR2JNLzAv
MzIzODMwMzQzYTM4MzIzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEgnAwDQYJKoZIhvcNAQELBQADggEBABbYxBeQYkBd
jmvuds+eBzCAzCECSXAXUOznfJxOBTrB1gTSH5fcPF8V0MZUxeKkSDwAGiQQ1lcC
OnZhCzyT33/8ergyNSZ6ff+Nr1mFLgKYHdP1AqbIrhdgjMXER4PEdwfywBHpKoPQ
C1qLmbyjNCd8Kun9ITb4eV1euG1X/JWvAnwdPwN58OUJvGPuCacsZlmMxGncZDCy
cJto+z281HUdN0/kJavDFBNUl5jIeDck5lrFpBZccqSyV95Bw8Mh7XfREqNXnrDU
ZaUduUiiUfK6DjmAZe13BLA1r03Bd0tWs8iXN/auKH6CfJpknDhCh02x2Nh7GOHW
c0Ob25fBfJo=
-----END CERTIFICATE-----
Generated at Tue Apr 15 07:28:03 2025 by rpki-client