Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a343030303a3a2f33342d3334203d3e20323637323039.roa
File:                     323830343a343965633a343030303a3a2f33342d3334203d3e20323637323039.roa (raw, json)
Hash identifier:          KA7Djb/4dd98tWFAb5jWPhpfRwJDTqNACUzjFEDVIVU=
Subject key identifier:   18:22:22:D2:A3:2E:91:22:3E:87:28:57:74:70:47:DB:B9:D6:05:6D
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       414BD1E3365EAFD490021FCF726EF70569E85080
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a343030303a3a2f33342d3334203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:02 +0000
ROA not before:           Thu 06 Mar 2025 11:07:02 +0000
ROA not after:            Thu 05 Mar 2026 11:12:02 +0000
asID:                     267209
IP address blocks:        2804:49ec:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:d1:e3:36:5e:af:d4:90:02:1f:cf:72:6e:f7:05:69:e8:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:02 2025 GMT
            Not After : Mar  5 11:12:02 2026 GMT
        Subject: CN=182222D2A32E91223E872857747047DBB9D6056D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:ee:f3:e1:78:bf:f8:6f:cc:b2:10:c9:cb:
                    f5:0b:be:54:38:86:9e:17:c4:a3:a4:cc:ec:2d:8a:
                    ee:59:21:9b:17:83:1e:73:fc:f9:cb:28:d8:10:39:
                    38:ab:0d:24:d7:0d:bd:cf:5a:ef:bd:18:1b:c3:55:
                    a3:d3:20:a5:d4:c4:2a:fb:6c:8a:b5:56:aa:3c:56:
                    4a:87:2d:e5:6b:4d:0b:a7:6f:49:0d:2e:c7:40:93:
                    95:ec:30:d9:10:a5:c5:8c:b4:d4:e6:70:21:9d:8f:
                    5e:62:7a:00:73:17:5a:2f:a9:47:fd:f6:76:c1:fd:
                    78:d0:b4:06:cb:3c:a8:56:f4:eb:7f:71:ef:c7:5a:
                    b4:e2:b2:89:7d:91:cf:9e:8e:be:bc:4d:cd:80:a3:
                    b3:a3:29:dd:4e:21:9f:83:0a:29:d1:00:de:e0:a5:
                    72:74:30:30:bd:39:d0:2f:21:d6:10:81:b3:78:80:
                    5a:6b:bc:db:3e:da:52:ea:75:64:b6:4c:27:d5:ff:
                    ad:ad:53:7c:45:e4:33:af:48:27:d3:99:50:0c:a1:
                    56:2b:f9:75:55:4f:39:f8:70:0d:b0:e5:90:63:77:
                    c1:5a:95:f1:52:47:d5:2d:b6:b3:28:81:fb:ae:bc:
                    e7:a8:12:bd:bb:43:4b:dc:cd:c6:d7:6c:15:e9:64:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:22:22:D2:A3:2E:91:22:3E:87:28:57:74:70:47:DB:B9:D6:05:6D
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a343030303a3a2f33342d3334203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:6f:c6:f6:d3:58:ba:7d:5f:32:ba:e3:c1:99:78:60:d7:
         53:a1:a3:90:f2:43:d6:77:38:13:c9:44:31:7a:58:f4:ca:db:
         2e:ca:fe:46:a3:b4:bf:31:fc:7a:ff:7d:88:f4:7f:9c:61:bf:
         77:7b:43:1d:36:1b:a1:87:63:3c:3a:56:ed:58:fe:00:1c:9a:
         a3:a7:a2:c1:a6:f5:9a:31:93:ba:5c:1e:4e:8f:f6:c9:bc:d8:
         8c:86:54:6d:af:a8:45:01:f7:6d:37:08:a8:4a:b0:dd:dc:dc:
         2c:64:ed:03:0e:65:4f:0d:75:66:ff:36:de:ef:8d:ae:b1:81:
         70:ba:f1:d2:f2:5e:23:99:07:e6:99:78:83:85:83:58:4d:6b:
         b2:e5:ec:11:69:43:3c:73:c3:db:bb:56:bc:32:68:e7:b6:a2:
         da:d0:14:1a:d8:b4:c5:5c:04:ec:d0:fd:3e:7c:e5:4a:a1:35:
         50:31:21:e1:2f:98:ed:c7:d8:6f:1d:8a:e9:10:b4:b9:dc:ce:
         13:9e:f0:9e:a8:e8:76:df:5c:91:ac:ca:44:9c:b2:3f:50:6c:
         4d:2c:d0:bb:e4:e6:c0:50:e5:86:bf:0f:39:6b:c6:dc:b5:36:
         62:65:5e:d8:b5:fb:97:8c:91:be:a7:c0:b5:f7:ab:ea:4a:58:
         85:20:2c:b8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUQUvR4zZer9SQAh/Pcm73BWnoUIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NDRFODkxOUNEQUJGOTg2NUMwNzhBQUJBOUMyRkZE
N0YyRTFGODAeFw0yNTAzMDYxMTA3MDJaFw0yNjAzMDUxMTEyMDJaMDMxMTAvBgNV
BAMTKDE4MjIyMkQyQTMyRTkxMjIzRTg3Mjg1Nzc0NzA0N0RCQjlENjA1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUM+7z4Xi/+G/MshDJy/ULvlQ4
hp4XxKOkzOwtiu5ZIZsXgx5z/PnLKNgQOTirDSTXDb3PWu+9GBvDVaPTIKXUxCr7
bIq1Vqo8VkqHLeVrTQunb0kNLsdAk5XsMNkQpcWMtNTmcCGdj15iegBzF1ovqUf9
9nbB/XjQtAbLPKhW9Ot/ce/HWrTisol9kc+ejr68Tc2Ao7OjKd1OIZ+DCinRAN7g
pXJ0MDC9OdAvIdYQgbN4gFprvNs+2lLqdWS2TCfV/62tU3xF5DOvSCfTmVAMoVYr
+XVVTzn4cA2w5ZBjd8FalfFSR9UttrMogfuuvOeoEr27Q0vczcbXbBXpZC1zAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUGCIi0qMukSI+hyhXdHBH27nWBW0wHwYDVR0j
BBgwFoAU+3ROiRnNq/mGXAeKq6nC/9fy4fgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FOFdTWFNQZTJWbnBXaTNUTEtYellSREphN0pFeWpjYXIzTTRzYUtCanBM
LzEvRkI3NDRFODkxOUNEQUJGOTg2NUMwNzhBQUJBOUMyRkZEN0YyRTFGOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjc0NEU4OTE5Q0RBQkY5ODY1
QzA3OEFBQkE5QzJGRkQ3RjJFMUY4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
OFdTWFNQZTJWbnBXaTNUTEtYellSREphN0pFeWpjYXIzTTRzYUtCanBMLzEvMzIz
ODMwMzQzYTM0Mzk2NTYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzNzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigESexAMA0GCSqGSIb3DQEBCwUAA4IB
AQAAa2/G9tNYun1fMrrjwZl4YNdToaOQ8kPWdzgTyUQxelj0ytsuyv5Go7S/Mfx6
/32I9H+cYb93e0MdNhuhh2M8OlbtWP4AHJqjp6LBpvWaMZO6XB5Oj/bJvNiMhlRt
r6hFAfdtNwioSrDd3NwsZO0DDmVPDXVm/zbe742usYFwuvHS8l4jmQfmmXiDhYNY
TWuy5ewRaUM8c8Pbu1a8MmjntqLa0BQa2LTFXATs0P0+fOVKoTVQMSHhL5jtx9hv
HYrpELS53M4TnvCeqOh231yRrMpEnLI/UGxNLNC75ObAUOWGvw85a8bctTZiZV7Y
tfuXjJG+p8C196vqSliFICy4
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:40:15 2025 by rpki-client