Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3438203d3e20323733373938.roa
File:                     323830343a386335633a3a2f33322d3438203d3e20323733373938.roa (raw, json)
Hash identifier:          8KCgVjIl/rAK04VH3WqR5VCDkyKjCzFag3Xd7SrJDzI=
Subject key identifier:   02:F9:48:39:98:EB:9E:E3:64:00:36:5C:6F:BE:90:00:BC:E2:9A:C7
Certificate issuer:       /CN=D8C50517FC609A5F814DC8A799CB96FFF01E6964
Certificate serial:       03F22207007693DD81119188353B81E957031D93
Authority key identifier: D8:C5:05:17:FC:60:9A:5F:81:4D:C8:A7:99:CB:96:FF:F0:1E:69:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C50517FC609A5F814DC8A799CB96FFF01E6964.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3438203d3e20323733373938.roa
Signing time:             Fri 21 Feb 2025 02:26:56 +0000
ROA not before:           Fri 21 Feb 2025 02:21:56 +0000
ROA not after:            Fri 20 Feb 2026 02:26:56 +0000
asID:                     273798
IP address blocks:        2804:8c5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/D8C50517FC609A5F814DC8A799CB96FFF01E6964.crl
                          rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/D8C50517FC609A5F814DC8A799CB96FFF01E6964.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C50517FC609A5F814DC8A799CB96FFF01E6964.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f2:22:07:00:76:93:dd:81:11:91:88:35:3b:81:e9:57:03:1d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8C50517FC609A5F814DC8A799CB96FFF01E6964
        Validity
            Not Before: Feb 21 02:21:56 2025 GMT
            Not After : Feb 20 02:26:56 2026 GMT
        Subject: CN=02F9483998EB9EE36400365C6FBE9000BCE29AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:73:03:7d:6a:f6:a2:9a:42:91:2e:0f:2d:
                    5e:50:eb:6c:2b:29:b1:2e:35:e0:08:65:a1:1a:22:
                    af:c0:bb:b9:14:db:8f:6c:55:2b:4f:f7:48:e3:60:
                    5b:ba:99:08:6d:ad:b7:b1:e4:c5:99:c8:d7:cb:4e:
                    1d:30:8c:77:7d:57:a3:43:cf:64:6c:f0:1d:56:ec:
                    a7:f8:8c:57:22:70:b6:fa:06:56:0b:90:59:74:ec:
                    91:05:89:68:9c:e1:83:3e:ec:37:3c:64:ef:40:61:
                    41:33:06:cf:ba:ce:5c:e5:59:87:a4:5f:7a:53:15:
                    60:85:3e:9d:05:ae:71:6d:42:40:08:9a:4a:a2:8a:
                    41:27:97:f3:44:dd:7d:17:ab:da:59:6f:ca:e1:7e:
                    0e:b6:c1:7c:2e:f2:1c:7c:10:2a:29:f2:40:d3:98:
                    c5:b4:67:4a:eb:83:f1:3b:05:dc:00:a3:61:69:d9:
                    00:4e:41:91:2f:49:76:1c:c0:31:01:ca:7e:ee:70:
                    84:e3:b5:f8:7f:4e:6c:b1:eb:04:df:a1:8d:f2:b6:
                    68:24:11:21:05:f4:80:7b:36:76:4e:48:48:c4:20:
                    d4:a0:cb:52:bd:42:6f:90:6e:02:0d:77:36:a2:ff:
                    a9:c1:96:67:9c:e2:8f:09:68:b2:75:bd:2c:fe:36:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:48:39:98:EB:9E:E3:64:00:36:5C:6F:BE:90:00:BC:E2:9A:C7
            X509v3 Authority Key Identifier:
                keyid:D8:C5:05:17:FC:60:9A:5F:81:4D:C8:A7:99:CB:96:FF:F0:1E:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/D8C50517FC609A5F814DC8A799CB96FFF01E6964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C50517FC609A5F814DC8A799CB96FFF01E6964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3438203d3e20323733373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:65:67:d3:a0:6c:fd:04:9d:b3:35:00:87:5b:28:93:28:
         81:e4:cc:24:b4:6b:c2:23:67:11:12:3f:37:1d:93:cf:57:7b:
         17:60:ac:9a:57:9c:74:92:0a:4b:1c:cf:ea:68:10:88:10:ac:
         3a:6c:00:ff:01:55:11:9a:ff:ab:50:82:d1:2e:e8:75:38:cb:
         8d:00:34:b7:f1:7f:3d:59:c4:9f:01:72:0a:fb:d9:c4:a2:f2:
         9a:ac:fd:ee:00:3d:6c:e1:cd:80:14:20:a5:55:3d:75:84:90:
         ea:29:62:7f:c8:e2:1f:09:28:6c:af:ef:f3:6e:ab:2e:e6:06:
         03:8e:c0:ea:b3:14:ec:c0:1c:6e:22:a5:84:c9:12:c6:a1:35:
         b2:8a:95:1b:38:ff:0e:6c:f7:28:12:48:7c:32:82:3a:0d:ce:
         0e:78:7b:41:4e:80:1c:c0:63:e8:03:c6:58:79:59:b6:e6:06:
         39:01:57:97:1e:a3:fe:3b:41:6e:9c:28:5b:c5:79:c8:54:ab:
         1b:88:3c:f5:e6:a8:4a:e2:48:f7:cd:8f:56:9c:bf:5c:ff:a1:
         b1:7d:d7:51:13:36:a9:4a:63:f0:6c:5b:c5:03:06:1a:ec:a6:
         d5:44:55:fa:a8:9e:51:77:0b:e0:e5:18:7f:d0:da:86:e6:f7:
         13:27:0d:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUA/IiBwB2k92BEZGINTuB6VcDHZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhDNTA1MTdGQzYwOUE1RjgxNERDOEE3OTlDQjk2RkZG
MDFFNjk2NDAeFw0yNTAyMjEwMjIxNTZaFw0yNjAyMjAwMjI2NTZaMDMxMTAvBgNV
BAMTKDAyRjk0ODM5OThFQjlFRTM2NDAwMzY1QzZGQkU5MDAwQkNFMjlBQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D3MDfWr2oppCkS4PLV5Q62wr
KbEuNeAIZaEaIq/Au7kU249sVStP90jjYFu6mQhtrbex5MWZyNfLTh0wjHd9V6ND
z2Rs8B1W7Kf4jFcicLb6BlYLkFl07JEFiWic4YM+7Dc8ZO9AYUEzBs+6zlzlWYek
X3pTFWCFPp0FrnFtQkAImkqiikEnl/NE3X0Xq9pZb8rhfg62wXwu8hx8ECop8kDT
mMW0Z0rrg/E7BdwAo2Fp2QBOQZEvSXYcwDEByn7ucITjtfh/Tmyx6wTfoY3ytmgk
ESEF9IB7NnZOSEjEINSgy1K9Qm+QbgINdzai/6nBlmec4o8JaLJ1vSz+Nm8dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAvlIOZjrnuNkADZcb76QALzimscwHwYDVR0j
BBgwFoAU2MUFF/xgml+BTcinmcuW//AeaWQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJINk1hMlNIRmdCdHJDRW41QWtHN05DWExDa2dBR3pIcmFSTEhpbWs1
Y3EvMC9EOEM1MDUxN0ZDNjA5QTVGODE0REM4QTc5OUNCOTZGRkYwMUU2OTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QzUwNTE3RkM2MDlBNUY4
MTREQzhBNzk5Q0I5NkZGRjAxRTY5NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UySDZNYTJTSEZnQnRyQ0VuNUFrRzdOQ1hMQ2tnQUd6SHJhUkxIaW1rNWNxLzAv
MzIzODMwMzQzYTM4NjMzNTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzczOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMXDANBgkqhkiG9w0BAQsFAAOCAQEAfBhlZ9Og
bP0EnbM1AIdbKJMogeTMJLRrwiNnERI/Nx2Tz1d7F2CsmlecdJIKSxzP6mgQiBCs
OmwA/wFVEZr/q1CC0S7odTjLjQA0t/F/PVnEnwFyCvvZxKLymqz97gA9bOHNgBQg
pVU9dYSQ6ilif8jiHwkobK/v826rLuYGA47A6rMU7MAcbiKlhMkSxqE1soqVGzj/
Dmz3KBJIfDKCOg3ODnh7QU6AHMBj6APGWHlZtuYGOQFXlx6j/jtBbpwoW8V5yFSr
G4g89eaoSuJI982PVpy/XP+hsX3XURM2qUpj8GxbxQMGGuym1URV+qieUXcL4OUY
f9Dahub3EycNrA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:58:20 2025 by rpki-client