Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
File:                     323830343a326134633a3a2f33322d3332203d3e203533313637.roa (raw, json)
Hash identifier:          E20uibeq6QDGG7wvi3bcs4hiTXawhjVfspIU30XpuPs=
Subject key identifier:   6A:F6:D3:24:5E:E2:DE:96:12:2B:41:F1:43:E6:15:BB:55:7E:34:05
Certificate issuer:       /CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
Certificate serial:       383274451668250E1428C82F6C3CEDB3654FB72E
Authority key identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
Signing time:             Wed 05 Mar 2025 20:03:38 +0000
ROA not before:           Wed 05 Mar 2025 19:58:38 +0000
ROA not after:            Wed 04 Mar 2026 20:03:38 +0000
asID:                     53167
IP address blocks:        2804:2a4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl
                          rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 09:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:32:74:45:16:68:25:0e:14:28:c8:2f:6c:3c:ed:b3:65:4f:b7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
        Validity
            Not Before: Mar  5 19:58:38 2025 GMT
            Not After : Mar  4 20:03:38 2026 GMT
        Subject: CN=6AF6D3245EE2DE96122B41F143E615BB557E3405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:9f:8b:6d:72:a4:45:2e:24:91:19:f6:e0:
                    d7:c3:1c:d2:f7:52:7a:59:76:51:0a:58:df:35:96:
                    c3:d0:39:07:ff:7b:a8:dc:47:c9:e0:ca:37:e3:65:
                    c0:ba:bf:8c:c9:02:06:dd:9d:e1:9a:88:e6:4a:4f:
                    e5:77:65:f4:4d:2f:7c:f2:69:39:09:16:c6:00:d1:
                    da:12:d9:93:84:4d:8a:38:5d:6e:f5:11:51:a9:06:
                    3c:48:15:4d:d6:68:14:05:d4:70:6c:a3:44:1a:93:
                    cd:45:74:70:54:b1:0b:b6:4d:20:4c:a4:c6:e9:60:
                    56:85:b2:e4:e0:4c:50:c8:ec:0c:d9:5d:c5:bc:46:
                    ae:7e:4e:19:27:6f:88:5b:8a:10:46:45:53:07:a0:
                    7f:e2:58:33:ef:a3:76:85:6d:da:d9:26:73:16:cf:
                    ef:11:1e:0e:d2:be:c8:2e:d5:4e:83:2e:2f:b3:8d:
                    67:2d:3e:bc:a3:b8:61:83:16:11:74:61:1d:12:02:
                    01:4c:cd:0b:78:6c:a9:3f:e9:34:c2:12:7f:a9:1b:
                    64:29:d6:98:0e:63:2b:db:42:54:ab:0e:75:e8:4a:
                    1b:ce:9b:bd:58:3c:94:f7:39:08:31:ff:cb:77:b7:
                    60:b4:ea:84:94:fb:67:1d:1a:24:53:ac:7d:11:a4:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F6:D3:24:5E:E2:DE:96:12:2B:41:F1:43:E6:15:BB:55:7E:34:05
            X509v3 Authority Key Identifier:
                keyid:B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/323830343a326134633a3a2f33322d3332203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:6b:e7:f2:22:3b:90:ea:4e:cc:b7:ba:f6:4c:89:1f:d3:fc:
         b9:d9:76:75:c7:27:32:2b:de:06:8e:03:db:6f:71:8f:8a:da:
         3d:0d:af:52:76:fc:aa:59:07:10:f0:e7:8a:ba:10:f2:aa:96:
         65:0a:73:41:25:55:d7:3c:99:83:89:74:0a:4b:52:da:e8:1f:
         90:ae:a2:c8:8c:99:69:31:84:b7:ff:60:cb:19:ac:94:55:8d:
         6a:66:f6:3f:8d:1b:38:61:49:db:0f:ae:84:ed:f0:22:5a:ba:
         df:d4:7e:d2:6a:3e:ef:1a:09:9c:0d:f5:21:33:11:bb:bb:c9:
         9e:cc:ea:54:8a:d0:43:bd:49:cd:60:ed:9b:8f:0a:a1:66:78:
         38:12:ad:7d:d6:f2:56:fb:32:49:78:bf:f6:3b:56:bf:8a:25:
         36:a6:46:54:ac:4c:20:9a:89:5c:6a:19:d2:7e:a1:54:5c:37:
         7f:67:c6:e7:61:fa:1c:fe:f3:11:ae:ae:c9:5f:90:18:e7:1f:
         7e:57:2b:10:d8:9b:9d:91:7e:f9:d9:73:d9:aa:6f:4f:9e:9c:
         3e:59:14:a6:40:5f:ca:aa:85:c0:af:de:a6:b9:98:35:13:d7:
         94:a1:b5:de:2e:f7:05:d8:72:db:a2:eb:da:3c:e2:e6:12:6d:
         0d:76:f9:1e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUODJ0RRZoJQ4UKMgvbDzts2VPty4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdBMDRCNkU3MUZDOURFQzkyNEUzRDM1MzZBMUVFMEIy
NzAxRTVGNDAeFw0yNTAzMDUxOTU4MzhaFw0yNjAzMDQyMDAzMzhaMDMxMTAvBgNV
BAMTKDZBRjZEMzI0NUVFMkRFOTYxMjJCNDFGMTQzRTYxNUJCNTU3RTM0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6J+LbXKkRS4kkRn24NfDHNL3
UnpZdlEKWN81lsPQOQf/e6jcR8ngyjfjZcC6v4zJAgbdneGaiOZKT+V3ZfRNL3zy
aTkJFsYA0doS2ZOETYo4XW71EVGpBjxIFU3WaBQF1HBso0Qak81FdHBUsQu2TSBM
pMbpYFaFsuTgTFDI7AzZXcW8Rq5+Thknb4hbihBGRVMHoH/iWDPvo3aFbdrZJnMW
z+8RHg7Svsgu1U6DLi+zjWctPryjuGGDFhF0YR0SAgFMzQt4bKk/6TTCEn+pG2Qp
1pgOYyvbQlSrDnXoShvOm71YPJT3OQgx/8t3t2C06oSU+2cdGiRTrH0RpId3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUavbTJF7i3pYSK0HxQ+YVu1V+NAUwHwYDVR0j
BBgwFoAUt6BLbnH8neySTj01NqHuCycB5fQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1pGUlVWaTJVNFpqUTc4QmdFRjc5TlFmelZ4RjVMeFRUOXZ2ZDlvZHUx
VlAvMS9CN0EwNEI2RTcxRkM5REVDOTI0RTNEMzUzNkExRUUwQjI3MDFFNUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QTA0QjZFNzFGQzlERUM5
MjRFM0QzNTM2QTFFRTBCMjcwMUU1RjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NaRlJVVmkyVTRaalE3OEJnRUY3OU5RZnpWeEY1THhUVDl2dmQ5b2R1MVZQLzEv
MzIzODMwMzQzYTMyNjEzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMzMx
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEKkwwDQYJKoZIhvcNAQELBQADggEBAFNr5/IiO5Dq
Tsy3uvZMiR/T/LnZdnXHJzIr3gaOA9tvcY+K2j0Nr1J2/KpZBxDw54q6EPKqlmUK
c0ElVdc8mYOJdApLUtroH5CuosiMmWkxhLf/YMsZrJRVjWpm9j+NGzhhSdsProTt
8CJaut/UftJqPu8aCZwN9SEzEbu7yZ7M6lSK0EO9Sc1g7ZuPCqFmeDgSrX3W8lb7
Mkl4v/Y7Vr+KJTamRlSsTCCaiVxqGdJ+oVRcN39nxudh+hz+8xGurslfkBjnH35X
KxDYm52RfvnZc9mqb0+enD5ZFKZAX8qqhcCv3qa5mDUT15Shtd4u9wXYctui69o8
4uYSbQ12+R4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:34:58 2025 by rpki-client