Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
File:                     323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa (raw, json)
Hash identifier:          LNy9tL6dJvvlTdnMHIrtv03/xytR3I3BP8CX480guKA=
Subject key identifier:   4F:86:57:2D:0F:56:C7:33:7D:FA:63:08:45:1A:E3:8D:32:87:A7:EE
Certificate issuer:       /CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
Certificate serial:       7F6A610BDAA4F8D1DCBD27C1242D9E47FD4303AB
Authority key identifier: FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa
Signing time:             Thu 06 Mar 2025 11:12:01 +0000
ROA not before:           Thu 06 Mar 2025 11:07:01 +0000
ROA not after:            Thu 05 Mar 2026 11:12:01 +0000
asID:                     267209
IP address blocks:        2804:49ec:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl
                          rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6a:61:0b:da:a4:f8:d1:dc:bd:27:c1:24:2d:9e:47:fd:43:03:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8
        Validity
            Not Before: Mar  6 11:07:01 2025 GMT
            Not After : Mar  5 11:12:01 2026 GMT
        Subject: CN=4F86572D0F56C7337DFA6308451AE38D3287A7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:1a:11:e7:06:df:21:ec:fb:48:b9:aa:c0:
                    4a:91:30:03:7f:37:c2:dd:38:37:09:9d:62:71:17:
                    60:66:35:bf:05:f8:4b:34:af:1f:56:bc:b5:f2:fc:
                    32:b9:1f:a6:82:25:df:da:9a:a8:0a:24:18:97:a8:
                    c7:19:59:5d:05:90:dd:a6:2f:3f:2b:46:66:47:48:
                    62:d7:d8:26:53:96:ec:7f:4e:f0:17:ce:5e:5c:0e:
                    89:01:6e:0f:dc:3c:dc:fd:de:12:7c:28:4b:a0:a0:
                    f3:d4:24:19:58:e8:1e:ef:95:41:f3:c3:d1:4e:13:
                    0c:ee:53:1e:2a:80:8a:b0:a9:50:26:23:fd:79:67:
                    6e:6c:6d:6e:ab:15:97:87:1a:44:28:3f:e9:75:ad:
                    66:fb:b3:8f:e6:df:5a:e6:17:8c:cc:e7:8a:ed:8c:
                    1e:36:76:b7:38:30:a7:ec:20:8e:a3:93:03:5b:4a:
                    bc:01:80:d0:c6:0d:fc:df:03:af:04:7e:14:b5:3e:
                    04:cb:ad:19:98:4c:b8:ab:2e:aa:d0:5e:51:01:95:
                    f3:5b:ce:e1:ba:99:ab:2a:8c:19:ce:ff:d4:c4:17:
                    2f:16:bf:94:16:1a:e2:89:6e:6d:15:c5:9f:21:aa:
                    e0:ea:ae:4b:77:1f:23:91:5b:6c:1a:86:d5:f9:3e:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:57:2D:0F:56:C7:33:7D:FA:63:08:45:1A:E3:8D:32:87:A7:EE
            X509v3 Authority Key Identifier:
                keyid:FB:74:4E:89:19:CD:AB:F9:86:5C:07:8A:AB:A9:C2:FF:D7:F2:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB744E8919CDABF9865C078AABA9C2FFD7F2E1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8WSXSPe2VnpWi3TLKXzYRDJa7JEyjcar3M4saKBjpL/1/323830343a343965633a383030303a3a2f33332d3333203d3e20323637323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:ee:dd:b2:33:e7:8a:61:ee:b9:4b:1d:ce:79:9c:55:95:
         57:77:6f:03:f3:91:e1:e3:8f:93:71:24:3d:f1:8a:85:b6:97:
         d1:87:d1:05:d5:ac:9b:9e:97:73:3a:a6:a2:c0:27:84:ae:d9:
         29:6c:ff:35:5b:24:ba:39:a9:f3:b0:3f:fc:fa:36:97:24:63:
         e7:c1:77:6d:c2:e4:4e:e8:a0:9e:98:b7:1e:d7:bf:ae:ca:24:
         d7:e7:32:66:e3:69:d3:4b:b0:0a:31:a2:83:24:65:e5:61:54:
         4d:97:cd:c7:94:b8:ea:2e:5c:53:db:45:ae:ad:fa:f8:f8:63:
         32:dd:f4:12:1e:2a:67:60:10:ea:3d:62:c4:f1:27:96:09:78:
         4c:3d:79:b2:9b:ea:c1:d3:3b:d5:8c:8c:a8:26:06:f6:f7:60:
         ec:7c:09:94:5d:e6:4f:9e:66:9d:09:a7:41:82:44:a5:63:b0:
         c8:c8:29:ec:c8:db:6e:ad:d1:59:e5:0e:c1:c5:df:de:7d:ac:
         f6:41:af:60:cb:9c:6a:c1:74:e7:17:d0:88:75:c4:68:cc:87:
         f2:4d:75:b7:56:c8:1a:a1:db:ba:d4:6f:a3:ac:88:19:87:db:
         ab:85:75:40:68:0f:fe:52:aa:72:83:b6:56:98:a9:8b:9f:df:
         5d:b4:b9:ae
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUf2phC9qk+NHcvSfBJC2eR/1DA6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3NDRFODkxOUNEQUJGOTg2NUMwNzhBQUJBOUMyRkZE
N0YyRTFGODAeFw0yNTAzMDYxMTA3MDFaFw0yNjAzMDUxMTEyMDFaMDMxMTAvBgNV
BAMTKDRGODY1NzJEMEY1NkM3MzM3REZBNjMwODQ1MUFFMzhEMzI4N0E3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmxoR5wbfIez7SLmqwEqRMAN/
N8LdODcJnWJxF2BmNb8F+Es0rx9WvLXy/DK5H6aCJd/amqgKJBiXqMcZWV0FkN2m
Lz8rRmZHSGLX2CZTlux/TvAXzl5cDokBbg/cPNz93hJ8KEugoPPUJBlY6B7vlUHz
w9FOEwzuUx4qgIqwqVAmI/15Z25sbW6rFZeHGkQoP+l1rWb7s4/m31rmF4zM54rt
jB42drc4MKfsII6jkwNbSrwBgNDGDfzfA68EfhS1PgTLrRmYTLirLqrQXlEBlfNb
zuG6masqjBnO/9TEFy8Wv5QWGuKJbm0VxZ8hquDqrkt3HyORW2wahtX5PlXRAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUT4ZXLQ9WxzN9+mMIRRrjjTKHp+4wHwYDVR0j
BBgwFoAU+3ROiRnNq/mGXAeKq6nC/9fy4fgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FOFdTWFNQZTJWbnBXaTNUTEtYellSREphN0pFeWpjYXIzTTRzYUtCanBM
LzEvRkI3NDRFODkxOUNEQUJGOTg2NUMwNzhBQUJBOUMyRkZEN0YyRTFGOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjc0NEU4OTE5Q0RBQkY5ODY1
QzA3OEFBQkE5QzJGRkQ3RjJFMUY4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
OFdTWFNQZTJWbnBXaTNUTEtYellSREphN0pFeWpjYXIzTTRzYUtCanBMLzEvMzIz
ODMwMzQzYTM0Mzk2NTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzNzMyMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygESeyAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+Au7dsjPnimHuuUsdznmcVZVXd28D85Hh44+TcSQ98YqFtpfRh9EF1aybnpdz
OqaiwCeErtkpbP81WyS6OanzsD/8+jaXJGPnwXdtwuRO6KCemLce17+uyiTX5zJm
42nTS7AKMaKDJGXlYVRNl83HlLjqLlxT20Wurfr4+GMy3fQSHipnYBDqPWLE8SeW
CXhMPXmym+rB0zvVjIyoJgb292DsfAmUXeZPnmadCadBgkSlY7DIyCnsyNturdFZ
5Q7Bxd/efaz2Qa9gy5xqwXTnF9CIdcRozIfyTXW3Vsgaodu61G+jrIgZh9urhXVA
aA/+Uqpyg7ZWmKmLn99dtLmu
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:45:20 2025 by rpki-client