Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa
File:                     323830343a6639303a3a2f33322d3336203d3e20323633353932.roa (raw, json)
Hash identifier:          Zd69VLZU4OfFiY2CYv5bCsda64OgcZ2sRB94rBB8pdA=
Subject key identifier:   3B:FE:45:B2:62:28:E5:44:13:05:D6:6F:6D:6E:A4:86:17:43:2F:EC
Certificate issuer:       /CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
Certificate serial:       7302CFB924CFDE8435A4885A7AE189AD68A655CB
Authority key identifier: 92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa
Signing time:             Thu 06 Mar 2025 11:07:25 +0000
ROA not before:           Thu 06 Mar 2025 11:02:25 +0000
ROA not after:            Thu 05 Mar 2026 11:07:25 +0000
asID:                     263592
IP address blocks:        2804:f90::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl
                          rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:02:cf:b9:24:cf:de:84:35:a4:88:5a:7a:e1:89:ad:68:a6:55:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922FBF2159E6A28EFC093AE51E0BFF8F351A6C53
        Validity
            Not Before: Mar  6 11:02:25 2025 GMT
            Not After : Mar  5 11:07:25 2026 GMT
        Subject: CN=3BFE45B26228E5441305D66F6D6EA48617432FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:e6:1f:8c:7f:e7:ff:c7:f1:8d:f9:a0:9b:
                    d9:69:64:ef:c1:f6:3b:4d:14:0d:01:87:c2:b0:72:
                    b6:89:44:79:e2:91:1d:a1:8f:73:77:98:ad:43:65:
                    bd:d7:45:d0:99:7e:51:d2:f6:49:08:e2:27:6e:56:
                    0f:48:1d:15:93:38:8b:d3:0d:0c:6c:e5:fc:1c:97:
                    cd:32:5a:8f:fc:84:73:5d:2f:ec:c0:bd:ec:20:45:
                    60:3f:31:b8:5d:5b:f1:1b:e9:f6:2d:1b:6c:95:f0:
                    b9:79:8e:6a:6f:0b:01:54:14:99:c2:2b:e0:ad:d5:
                    62:4d:2a:f5:6c:76:32:43:35:56:b9:8b:23:60:b7:
                    84:b3:f6:f3:fb:b4:80:28:1f:c6:f0:f1:20:10:86:
                    68:8a:16:d8:7a:2c:49:0e:58:f5:14:9b:c1:d1:a5:
                    62:ec:6f:4e:e6:52:f1:c1:d2:23:97:16:d9:a1:80:
                    0e:80:56:b1:bc:43:ab:01:c9:91:02:e0:e2:c1:2c:
                    a4:fa:07:cf:fe:b9:9b:96:38:4c:a9:a9:cc:18:0d:
                    76:c0:3a:e7:3c:45:2b:d7:6b:d5:05:16:0a:25:34:
                    8b:af:c3:df:38:ff:82:b8:3a:06:67:2f:91:1d:c2:
                    22:64:10:da:71:c0:6e:ea:1e:2f:f3:1e:e3:03:80:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:45:B2:62:28:E5:44:13:05:D6:6F:6D:6E:A4:86:17:43:2F:EC
            X509v3 Authority Key Identifier:
                keyid:92:2F:BF:21:59:E6:A2:8E:FC:09:3A:E5:1E:0B:FF:8F:35:1A:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922FBF2159E6A28EFC093AE51E0BFF8F351A6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DutVSU7o9b7W5WpVai2jabeFLi1sDK35sN3KNWaUw7ef/1/323830343a6639303a3a2f33322d3336203d3e20323633353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:53:d9:84:15:83:bd:89:4d:72:fd:71:46:27:f8:26:45:c0:
         ec:43:f0:8d:83:67:2a:b2:76:bd:0c:de:28:04:9a:b8:04:de:
         25:92:bc:7d:db:a8:29:4a:c6:74:f2:30:e2:6d:a7:c0:71:90:
         92:a5:da:f0:e0:c2:32:9c:7a:53:fa:87:8d:a4:de:8b:19:88:
         a6:81:d4:f2:bf:21:e6:1e:32:b5:5f:1b:2b:3f:79:0e:f4:4b:
         2a:08:11:c1:e2:b7:28:81:d0:80:04:4a:5a:7f:04:d6:1c:63:
         71:e5:f4:d7:fd:0b:dc:8f:79:c4:90:cb:93:e9:d4:9a:55:01:
         66:44:6d:f5:38:fb:d3:45:b0:34:fd:9a:14:82:0a:70:f0:db:
         de:0c:43:75:80:62:e5:21:d1:3a:03:18:bd:e4:5f:18:eb:28:
         6b:0d:dd:05:bc:ee:ae:5d:2c:5d:48:4c:c7:1f:90:e7:b2:d1:
         4b:70:35:21:cc:31:0d:e9:5f:e5:88:d1:55:d9:1c:8b:bb:2c:
         ee:d5:fa:b3:6e:f7:47:df:c1:a1:e1:a3:cd:11:27:b1:d6:0e:
         1d:d4:49:e5:52:c4:f3:07:02:14:05:62:fb:30:96:79:01:0c:
         ef:a8:1a:d3:d3:8b:ea:8d:cc:93:23:ff:1c:ad:1c:96:91:00:
         a9:d6:0e:b4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcwLPuSTP3oQ1pIhaeuGJrWimVcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIyRkJGMjE1OUU2QTI4RUZDMDkzQUU1MUUwQkZGOEYz
NTFBNkM1MzAeFw0yNTAzMDYxMTAyMjVaFw0yNjAzMDUxMTA3MjVaMDMxMTAvBgNV
BAMTKDNCRkU0NUIyNjIyOEU1NDQxMzA1RDY2RjZENkVBNDg2MTc0MzJGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO+YfjH/n/8fxjfmgm9lpZO/B
9jtNFA0Bh8KwcraJRHnikR2hj3N3mK1DZb3XRdCZflHS9kkI4iduVg9IHRWTOIvT
DQxs5fwcl80yWo/8hHNdL+zAvewgRWA/MbhdW/Eb6fYtG2yV8Ll5jmpvCwFUFJnC
K+Ct1WJNKvVsdjJDNVa5iyNgt4Sz9vP7tIAoH8bw8SAQhmiKFth6LEkOWPUUm8HR
pWLsb07mUvHB0iOXFtmhgA6AVrG8Q6sByZEC4OLBLKT6B8/+uZuWOEypqcwYDXbA
Ouc8RSvXa9UFFgolNIuvw984/4K4OgZnL5EdwiJkENpxwG7qHi/zHuMDgNPdAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUO/5FsmIo5UQTBdZvbW6khhdDL+wwHwYDVR0j
BBgwFoAUki+/IVnmoo78CTrlHgv/jzUabFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHV0VlNVN285YjdXNVdwVmFpMmphYmVGTGkxc0RLMzVzTjNLTldhVXc3
ZWYvMS85MjJGQkYyMTU5RTZBMjhFRkMwOTNBRTUxRTBCRkY4RjM1MUE2QzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMkZCRjIxNTlFNkEyOEVG
QzA5M0FFNTFFMEJGRjhGMzUxQTZDNTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1dFZTVTdvOWI3VzVXcFZhaTJqYWJlRkxpMXNESzM1c04zS05XYVV3N2VmLzEv
MzIzODMwMzQzYTY2MzkzMDNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzM1
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED5AwDQYJKoZIhvcNAQELBQADggEBABtT2YQVg72J
TXL9cUYn+CZFwOxD8I2DZyqydr0M3igEmrgE3iWSvH3bqClKxnTyMOJtp8BxkJKl
2vDgwjKcelP6h42k3osZiKaB1PK/IeYeMrVfGys/eQ70SyoIEcHityiB0IAESlp/
BNYcY3Hl9Nf9C9yPecSQy5Pp1JpVAWZEbfU4+9NFsDT9mhSCCnDw294MQ3WAYuUh
0ToDGL3kXxjrKGsN3QW87q5dLF1ITMcfkOey0UtwNSHMMQ3pX+WI0VXZHIu7LO7V
+rNu90ffwaHho80RJ7HWDh3USeVSxPMHAhQFYvswlnkBDO+oGtPTi+qNzJMj/xyt
HJaRAKnWDrQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:47 2025 by rpki-client