Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
File:                     323830343a326361633a3a2f33322d3438203d3e20323635323334.roa (raw, json)
Hash identifier:          C/6U33D7nUvxwW1tEZwyJAayasKRNqE14l+OH7AnJVc=
Subject key identifier:   0B:98:19:A8:5F:8B:89:FE:A0:01:6F:E5:8E:C3:4D:7D:EB:AB:A2:E8
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       4BAE526ADDEBF4F18BE74D2F8B008B4E1294CF57
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     265234
IP address blocks:        2804:2cac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ae:52:6a:dd:eb:f4:f1:8b:e7:4d:2f:8b:00:8b:4e:12:94:cf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:ec:a8:e0:58:f1:1f:85:14:71:71:32:e8:
                    20:93:b5:7d:6d:57:6d:15:9c:c3:9c:d8:6d:ac:39:
                    df:91:d2:42:65:ae:f7:fd:f2:ba:56:64:fa:19:5d:
                    e6:1d:60:fc:7a:5e:33:d9:b4:14:02:ce:c8:dd:df:
                    ca:1a:ee:86:38:85:c5:ef:89:5a:fb:fb:40:8e:48:
                    a7:39:d3:37:9a:29:e7:b8:96:b0:02:50:a0:d6:8f:
                    c0:11:eb:b4:b5:a8:2e:b5:47:d9:63:0c:5d:69:44:
                    7f:af:79:1e:f4:5e:d5:cf:f1:aa:65:a6:34:8e:bd:
                    5a:3d:42:8e:d7:76:cd:ff:dd:bc:5b:75:92:38:c7:
                    64:18:da:f1:49:27:54:ba:42:de:2f:6b:ad:1d:a5:
                    62:87:ca:98:03:78:e7:06:45:e1:60:bb:49:62:48:
                    28:d7:45:f8:96:3b:06:81:f6:f3:30:83:71:b5:de:
                    e9:1c:ef:f7:03:13:12:a6:fb:4a:d4:05:cf:b4:10:
                    3b:ba:db:b5:7f:5e:ab:cf:4b:0a:45:21:21:db:4d:
                    93:ad:3a:0b:2b:76:41:17:55:11:87:d8:cc:93:10:
                    54:91:68:b4:02:f1:74:99:3d:ba:fe:1b:f3:88:56:
                    2a:a4:ac:43:5c:99:17:64:b7:01:f9:df:7e:ae:e2:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:19:A8:5F:8B:89:FE:A0:01:6F:E5:8E:C3:4D:7D:EB:AB:A2:E8
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/323830343a326361633a3a2f33322d3438203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:7e:22:db:40:54:d1:95:98:55:36:c9:52:ad:de:91:7b:16:
         0e:a7:ca:24:a6:66:22:7e:77:68:59:e3:4d:cf:52:15:0f:7d:
         89:b1:e8:c5:ec:40:e9:de:ef:3f:d6:bc:c6:be:2d:2d:74:bf:
         80:6f:5d:3b:95:a4:fb:7b:5e:4a:e1:e3:ce:b1:9f:e1:dc:a6:
         8e:3d:0c:a7:4c:5b:ce:2c:11:a8:e4:7a:34:70:04:93:ad:29:
         23:fe:d2:ca:31:c8:6b:6e:fd:e6:a2:10:a2:86:31:aa:41:65:
         99:66:90:d5:89:28:a7:3e:6b:2a:75:0d:e5:b4:81:31:1e:cc:
         3b:cd:a5:6a:21:73:13:d2:b1:13:99:18:17:0c:5b:80:44:e0:
         54:27:d7:df:db:4c:6a:1e:38:d9:ab:fe:be:2b:ff:89:44:44:
         ee:0b:9c:1c:a4:eb:be:3a:0d:8a:27:e8:db:85:26:47:37:0d:
         f8:e0:46:a3:b7:83:db:4a:9f:af:30:4a:d7:70:55:65:20:cf:
         19:63:d5:72:d8:99:df:e9:ef:f4:09:5d:c0:d0:eb:e8:5f:88:
         5c:fc:a6:8a:e3:79:1a:1f:45:84:01:35:2b:00:30:d6:32:e3:
         d7:ed:c7:5d:7d:54:e8:5d:01:e0:32:de:60:eb:21:c7:1f:95:
         c0:7d:b9:41
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUS65Sat3r9PGL500viwCLThKUz1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyOTZDQjk1RDY1NzA5N0Q4MUFGQzc4QkU2QTQwQUMy
NTkxRTM0OTAeFw0yNTAzMDYxODU1MDBaFw0yNjAzMDYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE5RUVDQThFMDU4RjExRjg1
MTQ3MTcxMzJFODIwOTNCNTdENkQ1NzZEMTU5Q0MzOUNEODZEQUMzOURGOTFEMjQy
NjVBRUY3RkRGMkJBNTY2NEZBMTk1REU2MUQ2MEZDN0E1RTMzRDlCNDE0MDJDRUM4
RERERkNBMUFFRTg2Mzg4NUM1RUY4OTVBRkJGQjQwOEU0OEE3MzlEMzM3OUEyOUU3
Qjg5NkIwMDI1MEEwRDY4RkMwMTFFQkI0QjVBODJFQjU0N0Q5NjMwQzVENjk0NDdG
QUY3OTFFRjQ1RUQ1Q0ZGMUFBNjVBNjM0OEVCRDVBM0Q0MjhFRDc3NkNERkZEREJD
NUI3NTkyMzhDNzY0MThEQUYxNDkyNzU0QkE0MkRFMkY2QkFEMURBNTYyODdDQTk4
MDM3OEU3MDY0NUUxNjBCQjQ5NjI0ODI4RDc0NUY4OTYzQjA2ODFGNkYzMzA4Mzcx
QjVERUU5MUNFRkY3MDMxMzEyQTZGQjRBRDQwNUNGQjQxMDNCQkFEQkI1N0Y1RUFC
Q0Y0QjBBNDUyMTIxREI0RDkzQUQzQTBCMkI3NjQxMTc1NTExODdEOENDOTMxMDU0
OTE2OEI0MDJGMTc0OTkzREJBRkUxQkYzODg1NjJBQTRBQzQzNUM5OTE3NjRCNzAx
RjlERjdFQUVFMkM4NDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwZ7sqOBY8R+FFHFxMuggk7V9bVdtFZzDnNhtrDnfkdJCZa73/fK6
VmT6GV3mHWD8el4z2bQUAs7I3d/KGu6GOIXF74la+/tAjkinOdM3minnuJawAlCg
1o/AEeu0tagutUfZYwxdaUR/r3ke9F7Vz/GqZaY0jr1aPUKO13bN/928W3WSOMdk
GNrxSSdUukLeL2utHaVih8qYA3jnBkXhYLtJYkgo10X4ljsGgfbzMINxtd7pHO/3
AxMSpvtK1AXPtBA7utu1f16rz0sKRSEh202TrToLK3ZBF1URh9jMkxBUkWi0AvF0
mT26/hvziFYqpKxDXJkXZLcB+d9+ruLIRwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FAuYGahfi4n+oAFv5Y7DTX3rq6LoMB8GA1UdIwQYMBaAFPspbLldZXCX2Br8eL5q
QKwlkeNJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5MWgxV0Z3Yk5YNFpE
ZXRZZlN5M2t6dHA1RUZuZWlvYVlGQXh6NXBmaHp2LzEvRkIyOTZDQjk1RDY1NzA5
N0Q4MUFGQzc4QkU2QTQwQUMyNTkxRTM0OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GQjI5NkNCOTVENjU3MDk3RDgxQUZDNzhCRTZBNDBBQzI1OTFF
MzQ5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FOTFoMVdGd2JOWDRaRGV0WWZT
eTNrenRwNUVGbmVpb2FZRkF4ejVwZmh6di8xLzMyMzgzMDM0M2EzMjYzNjE2MzNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzNTMyMzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
LKwwDQYJKoZIhvcNAQELBQADggEBALt+IttAVNGVmFU2yVKt3pF7Fg6nyiSmZiJ+
d2hZ403PUhUPfYmx6MXsQOne7z/WvMa+LS10v4BvXTuVpPt7Xkrh486xn+Hcpo49
DKdMW84sEajkejRwBJOtKSP+0soxyGtu/eaiEKKGMapBZZlmkNWJKKc+ayp1DeW0
gTEezDvNpWohcxPSsROZGBcMW4BE4FQn19/bTGoeONmr/r4r/4lERO4LnByk6746
DYon6NuFJkc3DfjgRqO3g9tKn68wStdwVWUgzxlj1XLYmd/p7/QJXcDQ6+hfiFz8
porjeRofRYQBNSsAMNYy49ftx119VOhdAeAy3mDrIccflcB9uUE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:50 2025 by rpki-client