Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d3438203d3e20323639363537.roa
File:                     323830343a363765343a3a2f33322d3438203d3e20323639363537.roa (raw, json)
Hash identifier:          BbfJn75y4byW6JsKDVR7urUm0MemuG3nlzLjsJcSITI=
Subject key identifier:   D5:CB:C8:92:98:2C:05:32:5A:94:81:8F:D0:94:13:13:86:38:5A:6C
Certificate issuer:       /CN=0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A
Certificate serial:       6E4F12EE92DCC1DCE8CE72DA6CC42298BC4EF8BE
Authority key identifier: 0F:78:45:17:83:4F:E0:CA:66:C2:CA:C3:2D:CB:E0:D3:CC:6C:B5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d3438203d3e20323639363537.roa
Signing time:             Wed 06 Nov 2024 20:41:11 +0000
ROA not before:           Wed 06 Nov 2024 20:36:11 +0000
ROA not after:            Wed 05 Nov 2025 20:41:11 +0000
asID:                     269657
IP address blocks:        2804:67e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.crl
                          rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 19:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:12:ee:92:dc:c1:dc:e8:ce:72:da:6c:c4:22:98:bc:4e:f8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A
        Validity
            Not Before: Nov  6 20:36:11 2024 GMT
            Not After : Nov  5 20:41:11 2025 GMT
        Subject: CN=D5CBC892982C05325A94818FD094131386385A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:18:78:e7:3b:39:22:3d:68:53:e1:f6:a6:
                    e9:03:c6:70:49:a9:cd:70:ff:20:0b:7a:71:11:b8:
                    66:a1:f2:9c:9d:8e:ff:7d:2c:e5:82:67:fb:eb:0d:
                    32:9b:73:a3:ea:9c:6e:72:21:75:17:26:8b:61:e4:
                    8b:12:5c:95:2a:6c:5a:b8:e1:f8:c9:df:8d:9e:71:
                    16:ab:93:38:9e:71:2f:98:b4:36:22:ac:7a:aa:d5:
                    ae:a1:a1:24:8c:fd:fa:7c:0d:08:2f:73:cb:8a:32:
                    e2:b8:11:87:05:7d:6b:00:d4:ad:8e:27:87:09:d5:
                    8f:e6:11:5f:26:5a:b0:cc:92:b0:72:33:3f:2e:5a:
                    2f:12:9c:db:07:49:82:07:06:f3:ba:e7:a6:d7:5c:
                    7c:cd:f5:5e:37:c7:df:0e:08:55:cf:76:cc:f2:a5:
                    28:e5:b8:3f:89:50:9b:1a:81:8c:63:e3:fb:97:4e:
                    56:13:d7:22:9d:19:d1:df:03:c8:f2:f4:20:70:53:
                    e4:6b:0c:16:d6:0f:8b:de:ed:41:ee:e3:1e:60:fc:
                    7f:05:de:d2:8e:21:08:4e:28:9c:9e:f3:6c:5b:37:
                    ef:45:b9:1a:73:b4:95:24:d6:e1:6e:16:05:85:61:
                    bc:7c:17:a6:df:5a:7f:8a:4d:9a:c1:6e:e0:0a:8c:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:C8:92:98:2C:05:32:5A:94:81:8F:D0:94:13:13:86:38:5A:6C
            X509v3 Authority Key Identifier:
                keyid:0F:78:45:17:83:4F:E0:CA:66:C2:CA:C3:2D:CB:E0:D3:CC:6C:B5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F784517834FE0CA66C2CAC32DCBE0D3CC6CB53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/0/323830343a363765343a3a2f33322d3438203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:8d:b6:fd:f1:19:94:b2:57:d3:22:7f:99:6c:ea:1c:17:
         80:33:54:6c:16:15:ab:5c:84:61:a9:89:f3:1f:95:b1:b4:95:
         c6:c3:6f:22:15:6b:87:be:1f:44:47:c5:13:37:1f:90:e2:e3:
         b4:5b:bc:a4:a3:31:e8:26:f6:13:8b:7f:b6:05:6f:de:a8:3b:
         a5:97:8b:e4:89:76:5b:5b:33:59:33:62:39:4a:0b:63:ed:9b:
         74:57:4a:8d:5d:57:76:ba:be:7b:08:fc:d1:b6:92:db:db:0a:
         10:2e:9d:d4:98:00:7e:5f:33:e9:3a:cb:87:f7:11:6f:ff:2d:
         86:61:e4:2d:8a:1f:2c:e6:e4:b8:33:de:56:21:bc:ed:00:66:
         d8:81:9e:7a:6d:8e:fc:d6:5b:a0:3e:b9:14:fb:e8:c0:94:9f:
         ca:a9:a1:06:73:84:23:44:4f:04:25:a7:49:7a:ab:11:b9:6c:
         d8:33:28:1c:4d:26:bc:73:d6:87:c3:e9:03:d6:ff:6d:4f:0f:
         ff:b9:38:e5:dc:37:26:03:ff:f6:65:62:8e:84:7f:c7:59:e9:
         04:39:23:7b:fb:c9:3f:69:56:83:97:3c:90:69:09:a0:c7:7d:
         c7:70:e5:c0:84:6d:ca:44:04:11:50:e8:3a:46:51:2f:49:00:
         2d:a8:6e:24
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbk8S7pLcwdzoznLabMQimLxO+L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY3ODQ1MTc4MzRGRTBDQTY2QzJDQUMzMkRDQkUwRDND
QzZDQjUzQTAeFw0yNDExMDYyMDM2MTFaFw0yNTExMDUyMDQxMTFaMDMxMTAvBgNV
BAMTKEQ1Q0JDODkyOTgyQzA1MzI1QTk0ODE4RkQwOTQxMzEzODYzODVBNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRhh45zs5Ij1oU+H2pukDxnBJ
qc1w/yALenERuGah8pydjv99LOWCZ/vrDTKbc6PqnG5yIXUXJoth5IsSXJUqbFq4
4fjJ342ecRarkziecS+YtDYirHqq1a6hoSSM/fp8DQgvc8uKMuK4EYcFfWsA1K2O
J4cJ1Y/mEV8mWrDMkrByMz8uWi8SnNsHSYIHBvO656bXXHzN9V43x98OCFXPdszy
pSjluD+JUJsagYxj4/uXTlYT1yKdGdHfA8jy9CBwU+RrDBbWD4ve7UHu4x5g/H8F
3tKOIQhOKJye82xbN+9FuRpztJUk1uFuFgWFYbx8F6bfWn+KTZrBbuAKjDvtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1cvIkpgsBTJalIGP0JQTE4Y4WmwwHwYDVR0j
BBgwFoAUD3hFF4NP4MpmwsrDLcvg08xstTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTI5dlRoQnRCVnlmRFpDRHhlRXdtRDZtU3RNNW1iS0RGUHJxTnFEOXd5
VEEvMC8wRjc4NDUxNzgzNEZFMENBNjZDMkNBQzMyRENCRTBEM0NDNkNCNTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzg0NTE3ODM0RkUwQ0E2
NkMyQ0FDMzJEQ0JFMEQzQ0M2Q0I1M0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyOXZUaEJ0QlZ5ZkRaQ0R4ZUV3bUQ2bVN0TTVtYktERlBycU5xRDl3eVRBLzAv
MzIzODMwMzQzYTM2Mzc2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARn5DANBgkqhkiG9w0BAQsFAAOCAQEAa1WNtv3x
GZSyV9Mif5ls6hwXgDNUbBYVq1yEYamJ8x+VsbSVxsNvIhVrh74fREfFEzcfkOLj
tFu8pKMx6Cb2E4t/tgVv3qg7pZeL5Il2W1szWTNiOUoLY+2bdFdKjV1Xdrq+ewj8
0baS29sKEC6d1JgAfl8z6TrLh/cRb/8thmHkLYofLObkuDPeViG87QBm2IGeem2O
/NZboD65FPvowJSfyqmhBnOEI0RPBCWnSXqrEbls2DMoHE0mvHPWh8PpA9b/bU8P
/7k45dw3JgP/9mVijoR/x1npBDkje/vJP2lWg5c8kGkJoMd9x3DlwIRtykQEEVDo
OkZRL0kALahuJA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:10:52 2025 by rpki-client