Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
File:                     323830343a333237633a3a2f33322d3332203d3e20323635303831.roa (raw, json)
Hash identifier:          +ywXOGrXavmStWRwGu8rjCt+9m/hLwPwyeyFSJ0U5qM=
Subject key identifier:   93:3A:57:D7:64:8D:79:7A:E0:1A:CE:E2:84:DC:4F:A8:48:9A:77:EF
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       5183634D8D2D4AB891E72F9B3C74829AC5A8775E
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa
Signing time:             Wed 05 Mar 2025 22:42:54 +0000
ROA not before:           Wed 05 Mar 2025 22:37:54 +0000
ROA not after:            Wed 04 Mar 2026 22:42:54 +0000
asID:                     265081
IP address blocks:        2804:327c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:83:63:4d:8d:2d:4a:b8:91:e7:2f:9b:3c:74:82:9a:c5:a8:77:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Mar  5 22:37:54 2025 GMT
            Not After : Mar  4 22:42:54 2026 GMT
        Subject: CN=933A57D7648D797AE01ACEE284DC4FA8489A77EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:a0:d8:23:ce:6a:35:e5:e3:0a:87:28:f0:
                    3a:0f:4b:02:7b:6f:3f:d8:22:47:8d:de:ea:cc:12:
                    f1:a9:a1:df:aa:12:d3:8e:39:9b:89:cb:f6:2f:a9:
                    3c:1d:49:2b:80:82:3a:3a:39:c8:d3:20:f8:29:71:
                    75:d5:93:ed:12:f1:5f:03:1b:ea:87:ae:a2:a5:17:
                    26:81:a9:3d:af:fc:94:39:d5:9c:d5:4a:9c:82:e5:
                    f5:90:11:10:09:81:b3:f4:e0:6b:05:57:3b:4a:86:
                    f5:36:68:c6:fc:1b:d4:fb:60:c8:76:68:75:2e:45:
                    e2:ae:45:35:22:c1:88:3f:ef:1a:76:84:f2:2a:56:
                    a1:64:0b:6d:0d:52:56:02:fd:77:b0:5b:5c:12:a5:
                    2e:f6:19:bc:66:4c:7d:7e:c7:61:81:2a:3c:c7:c5:
                    f9:21:aa:fe:b5:19:fb:95:78:86:09:aa:48:95:79:
                    ed:39:a0:38:eb:f2:85:9f:03:c2:f0:bd:98:14:d7:
                    af:c0:41:41:c7:1f:a5:ea:ed:bc:8f:13:03:a3:35:
                    ba:92:5a:2c:00:f7:02:18:75:17:10:ad:b7:a5:2c:
                    a7:24:79:3e:f1:82:76:3e:fb:70:59:ce:37:d7:9a:
                    bc:2a:88:6b:5f:02:a8:1f:97:4d:be:b3:e8:94:2f:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3A:57:D7:64:8D:79:7A:E0:1A:CE:E2:84:DC:4F:A8:48:9A:77:EF
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/323830343a333237633a3a2f33322d3332203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:327c::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:21:a5:24:b8:fb:3e:2f:e5:78:f9:a4:ba:c5:75:07:4a:9e:
         09:5c:bd:f9:5d:ed:46:ff:de:b6:c0:3a:d3:e2:d9:ae:b3:a9:
         f4:78:11:2c:3c:fd:42:23:b1:7c:72:03:8f:21:35:9a:db:db:
         ea:dc:a3:ae:2a:e0:20:0a:8a:ee:79:c4:36:fb:13:70:f6:25:
         4c:e2:20:47:5a:c8:b2:49:ee:38:ea:df:22:8f:90:e2:15:10:
         13:8b:87:53:b0:84:de:d1:c8:e1:c3:f1:8a:c5:21:76:59:9c:
         f6:db:ad:72:b2:71:82:94:74:70:ee:92:ae:80:08:78:68:92:
         be:74:52:02:2a:d3:c1:7e:01:a4:80:b4:65:f9:56:5c:5a:7b:
         c1:3b:4a:90:a5:5e:f2:4c:d2:03:39:7c:ab:9b:11:68:f3:47:
         f5:ea:f0:70:cd:9a:04:7c:97:0c:5f:2f:fb:2d:31:0b:55:a8:
         54:69:91:02:3d:56:d6:b1:f1:32:7c:65:ba:5c:91:42:8b:88:
         96:ec:53:ac:77:a1:7f:1e:3e:f6:fb:7b:d5:c8:42:74:a1:97:
         33:7c:42:7e:d3:86:91:28:15:11:28:26:72:9b:fc:44:24:f9:
         e8:15:a4:23:c8:ee:64:84:f8:f0:1b:7a:6d:82:f3:97:d9:8b:
         97:58:81:4d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUYNjTY0tSriR5y+bPHSCmsWod14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI1QjYyNUE1MjhFQzQ2NDkyNUFDQjY5MjQ4RTkwNDk0
NDgzRTNGNzAeFw0yNTAzMDUyMjM3NTRaFw0yNjAzMDQyMjQyNTRaMDMxMTAvBgNV
BAMTKDkzM0E1N0Q3NjQ4RDc5N0FFMDFBQ0VFMjg0REM0RkE4NDg5QTc3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtaDYI85qNeXjCoco8DoPSwJ7
bz/YIkeN3urMEvGpod+qEtOOOZuJy/YvqTwdSSuAgjo6OcjTIPgpcXXVk+0S8V8D
G+qHrqKlFyaBqT2v/JQ51ZzVSpyC5fWQERAJgbP04GsFVztKhvU2aMb8G9T7YMh2
aHUuReKuRTUiwYg/7xp2hPIqVqFkC20NUlYC/XewW1wSpS72GbxmTH1+x2GBKjzH
xfkhqv61GfuVeIYJqkiVee05oDjr8oWfA8LwvZgU16/AQUHHH6Xq7byPEwOjNbqS
WiwA9wIYdRcQrbelLKckeT7xgnY++3BZzjfXmrwqiGtfAqgfl02+s+iUL/L1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUkzpX12SNeXrgGs7ihNxPqEiad+8wHwYDVR0j
BBgwFoAUi1tiWlKOxGSSWstpJI6QSUSD4/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRERuY2NwZWZVeGFQQ1FIcFBUNlVVVXd1bnZuZ2ZTR3MyMlcza01hZGVD
RlcvMS84QjVCNjI1QTUyOEVDNDY0OTI1QUNCNjkyNDhFOTA0OTQ0ODNFM0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNUI2MjVBNTI4RUM0NjQ5
MjVBQ0I2OTI0OEU5MDQ5NDQ4M0UzRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0REbmNjcGVmVXhhUENRSHBQVDZVVVV3dW52bmdmU0dzMjJXM2tNYWRlQ0ZXLzEv
MzIzODMwMzQzYTMzMzIzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyfDANBgkqhkiG9w0BAQsFAAOCAQEAkiGlJLj7
Pi/lePmkusV1B0qeCVy9+V3tRv/etsA60+LZrrOp9HgRLDz9QiOxfHIDjyE1mtvb
6tyjrirgIAqK7nnENvsTcPYlTOIgR1rIsknuOOrfIo+Q4hUQE4uHU7CE3tHI4cPx
isUhdlmc9tutcrJxgpR0cO6SroAIeGiSvnRSAirTwX4BpIC0ZflWXFp7wTtKkKVe
8kzSAzl8q5sRaPNH9erwcM2aBHyXDF8v+y0xC1WoVGmRAj1W1rHxMnxlulyRQouI
luxTrHehfx4+9vt71chCdKGXM3xCftOGkSgVESgmcpv8RCT56BWkI8juZIT48Bt6
bYLzl9mLl1iBTQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:00:12 2025 by rpki-client