Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3a2f33322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          RrHcCYXQ8Xp8vNv84YyfCnia5ExBbApKrg/hYtwt0GY=
Subject key identifier:   A4:EE:47:6B:32:9A:D8:89:36:F4:8D:CD:49:C0:54:5B:07:84:40:8C
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       3971393A665AF251103F336D528509B53906E42F
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa
Signing time:             Thu 23 Jan 2025 09:50:09 +0000
ROA not before:           Thu 23 Jan 2025 09:45:09 +0000
ROA not after:            Thu 22 Jan 2026 09:50:09 +0000
asID:                     265187
IP address blocks:        2804:2c00::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:71:39:3a:66:5a:f2:51:10:3f:33:6d:52:85:09:b5:39:06:e4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jan 23 09:45:09 2025 GMT
            Not After : Jan 22 09:50:09 2026 GMT
        Subject: CN=A4EE476B329AD88936F48DCD49C0545B0784408C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:79:76:f1:ea:60:c1:7a:ed:1c:e6:10:f9:
                    ee:fe:05:3a:7f:7c:fd:c6:01:6d:bc:ec:94:a0:3b:
                    09:3e:dc:66:6c:80:f4:14:3a:ff:45:48:99:9e:0b:
                    bd:25:5b:24:f2:c3:4b:9d:a8:34:5a:59:61:22:0d:
                    42:8c:04:cd:7f:f9:f3:8e:8a:53:cf:b5:d3:2f:9c:
                    21:3a:13:d8:2a:70:2f:fd:93:f9:63:d5:66:98:77:
                    d6:97:2f:fc:27:02:65:4b:09:21:b5:73:1d:8e:1f:
                    73:c2:b1:9c:c7:a5:2f:04:fd:4e:87:37:84:87:9b:
                    44:55:9b:55:fd:02:98:9a:0f:83:30:74:0f:54:e1:
                    f8:20:2f:90:6e:3f:83:b5:3a:f6:c1:89:b3:12:2f:
                    98:64:26:40:e3:fb:b7:32:af:fe:53:ff:ac:1b:c3:
                    79:a3:85:15:30:04:66:7e:47:a0:d1:d8:79:8c:20:
                    b2:52:4a:25:4b:e8:24:0c:7a:74:e2:68:b2:8d:db:
                    4f:cc:59:cb:ce:19:33:60:b8:45:f5:88:e3:ba:47:
                    6e:87:17:a5:70:b8:ea:d2:67:2d:1b:54:f5:72:f1:
                    0e:a9:a4:0a:f1:e4:b0:fe:98:e8:10:3e:b8:ef:81:
                    26:6f:72:c5:f8:28:bb:79:45:93:a1:13:77:8a:50:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EE:47:6B:32:9A:D8:89:36:F4:8D:CD:49:C0:54:5B:07:84:40:8C
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:3b:61:49:85:27:b3:c8:a0:0a:af:87:37:5f:16:4d:91:
         74:3c:11:1e:14:cc:fa:89:46:e0:9d:82:53:a9:2a:2f:fe:c6:
         63:8b:ff:08:1e:3a:3a:0f:aa:ce:b8:2c:4a:62:a5:86:59:d5:
         54:69:f4:e9:90:30:d3:49:a0:08:62:7e:39:32:b1:ed:4c:d3:
         c5:a2:50:73:b0:96:b6:9f:c1:32:89:c4:39:92:76:50:a9:cd:
         0c:86:92:2a:e1:25:76:c4:0d:b2:b4:3f:9e:a2:b8:95:ae:c5:
         36:15:1c:5b:9d:73:8e:dd:6e:24:c9:49:5c:a9:35:f1:fb:5a:
         5f:11:4a:37:3b:3a:97:47:bd:c6:40:8d:8b:2b:c5:21:bd:c5:
         1c:8c:a1:89:22:a7:2d:fc:2a:5d:69:ef:0e:f6:b0:09:58:b7:
         9c:bb:81:fa:fa:c2:ff:5d:25:86:b6:1f:3c:69:ca:19:ad:7a:
         b4:f9:b1:c1:06:90:e6:fa:27:21:38:be:c3:07:62:bf:38:2e:
         f7:ec:5d:2a:c2:28:70:9d:34:28:a3:1a:ba:3c:db:98:a6:53:
         c5:57:a1:50:e8:57:e5:33:d2:60:c5:5c:03:3a:55:11:86:7b:
         ed:59:1b:08:58:6d:38:4e:c3:97:fc:0b:5f:f9:fd:d2:de:91:
         31:75:2d:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOXE5OmZa8lEQPzNtUoUJtTkG5C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ1NUQwQkU1MTM4QUU1NTJCNDg1NzI3MEVFRDJBN0NF
NUI1QzZGMjAeFw0yNTAxMjMwOTQ1MDlaFw0yNjAxMjIwOTUwMDlaMDMxMTAvBgNV
BAMTKEE0RUU0NzZCMzI5QUQ4ODkzNkY0OERDRDQ5QzA1NDVCMDc4NDQwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfXl28epgwXrtHOYQ+e7+BTp/
fP3GAW287JSgOwk+3GZsgPQUOv9FSJmeC70lWyTyw0udqDRaWWEiDUKMBM1/+fOO
ilPPtdMvnCE6E9gqcC/9k/lj1WaYd9aXL/wnAmVLCSG1cx2OH3PCsZzHpS8E/U6H
N4SHm0RVm1X9ApiaD4MwdA9U4fggL5BuP4O1OvbBibMSL5hkJkDj+7cyr/5T/6wb
w3mjhRUwBGZ+R6DR2HmMILJSSiVL6CQMenTiaLKN20/MWcvOGTNguEX1iOO6R26H
F6VwuOrSZy0bVPVy8Q6ppArx5LD+mOgQPrjvgSZvcsX4KLt5RZOhE3eKUDQ3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpO5HazKa2Ik29I3NScBUWweEQIwwHwYDVR0j
BBgwFoAU9FXQvlE4rlUrSFcnDu0qfOW1xvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDdGSFE3YlkzN1Z4VkpvM2RFVmpwUGFweHBiekhrTUxnUUtUem5HYlFh
eGIvMC9GNDU1RDBCRTUxMzhBRTU1MkI0ODU3MjcwRUVEMkE3Q0U1QjVDNkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NTVEMEJFNTEzOEFFNTUy
QjQ4NTcyNzBFRUQyQTdDRTVCNUM2RjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3RkhRN2JZMzdWeFZKbzNkRVZqcFBhcHhwYnpIa01MZ1FLVHpuR2JRYXhiLzAv
MzIzODMwMzQzYTMyNjMzMDMwM2EzYTJmMzMzMjJkMzQzMjIwM2QzZTIwMzIzNjM1
MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQsADANBgkqhkiG9w0BAQsFAAOCAQEAA/g7YUmF
J7PIoAqvhzdfFk2RdDwRHhTM+olG4J2CU6kqL/7GY4v/CB46Og+qzrgsSmKlhlnV
VGn06ZAw00mgCGJ+OTKx7UzTxaJQc7CWtp/BMonEOZJ2UKnNDIaSKuEldsQNsrQ/
nqK4la7FNhUcW51zjt1uJMlJXKk18ftaXxFKNzs6l0e9xkCNiyvFIb3FHIyhiSKn
LfwqXWnvDvawCVi3nLuB+vrC/10lhrYfPGnKGa16tPmxwQaQ5vonITi+wwdivzgu
9+xdKsIocJ00KKMaujzbmKZTxVehUOhX5TPSYMVcAzpVEYZ77VkbCFhtOE7Dl/wL
X/n90t6RMXUt3Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:06:54 2025 by rpki-client