Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
File:                     323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa (raw, json)
Hash identifier:          RwcSUNEKWCkkP/QXBpUZGwtJWX+SCTHiwT0DyYYFWUI=
Subject key identifier:   61:61:79:58:82:30:2C:5B:C6:E2:C0:80:6F:C7:53:19:B4:1F:13:BD
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       1FE3AAED3B6481BA3968E1F4D3F9FF96D2AC1BCE
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa
Signing time:             Wed 22 Jan 2025 13:28:46 +0000
ROA not before:           Wed 22 Jan 2025 13:23:46 +0000
ROA not after:            Wed 21 Jan 2026 13:28:46 +0000
asID:                     267668
IP address blocks:        2804:4508:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e3:aa:ed:3b:64:81:ba:39:68:e1:f4:d3:f9:ff:96:d2:ac:1b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jan 22 13:23:46 2025 GMT
            Not After : Jan 21 13:28:46 2026 GMT
        Subject: CN=6161795882302C5BC6E2C0806FC75319B41F13BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:35:29:06:df:2a:87:be:a9:bd:74:d1:89:
                    ec:01:44:5c:b6:15:8b:f5:3e:78:ef:89:99:f6:f1:
                    b5:71:02:ca:35:0c:95:92:e9:39:0e:98:fb:97:13:
                    51:80:40:25:b5:12:26:a1:58:37:7e:05:39:73:6d:
                    85:aa:82:2c:05:90:1c:05:f7:bb:ec:40:03:a4:3e:
                    40:99:1f:05:51:3e:97:7a:d4:6e:00:fa:d2:85:ac:
                    13:2a:84:97:d9:90:43:d9:86:b9:54:f8:7e:d1:08:
                    a9:49:15:47:93:a1:15:5b:bc:33:22:da:fd:0e:ca:
                    c3:c4:ae:44:50:60:0e:f3:9c:3d:89:2c:f1:82:69:
                    cf:c4:da:08:41:f5:b6:c5:cc:c0:f6:d7:ae:b8:f5:
                    57:a2:eb:14:c3:e0:53:cd:80:d0:90:67:9c:c6:eb:
                    2b:cf:25:25:d4:7f:77:7c:4e:f3:48:94:45:a8:60:
                    7c:42:d0:c9:20:f1:3c:f2:81:62:71:26:28:74:46:
                    03:5c:02:78:00:6c:17:21:4e:19:50:e9:ac:5e:34:
                    17:c0:de:d7:36:00:b5:a7:76:72:08:c5:60:82:fb:
                    5b:97:ee:db:53:f9:35:2e:fb:6e:2f:91:98:ac:30:
                    b2:5a:b2:c2:d7:0a:df:65:cb:54:14:4e:3e:1f:c6:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:79:58:82:30:2C:5B:C6:E2:C0:80:6F:C7:53:19:B4:1F:13:BD
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a343030303a3a2f33342d3334203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:7c:9b:b6:05:a6:8e:23:b7:85:de:aa:b8:56:40:2b:7a:
         cf:bb:3e:af:50:4f:3b:39:7a:45:07:70:af:c8:de:31:cc:c1:
         2f:86:a2:62:1b:fb:e1:df:1b:af:5f:1e:f4:af:e9:ae:42:cf:
         eb:32:06:bb:85:bb:f1:bf:0d:a7:25:89:cb:80:9b:b6:44:87:
         33:67:26:bc:eb:85:8b:7c:7e:7c:b1:d5:3a:2c:7b:f2:e6:ea:
         9c:5e:c4:fd:0f:a2:0c:5f:8e:f3:4d:71:9f:d4:5f:e0:f0:70:
         c5:89:f9:87:65:df:9b:a5:db:2c:61:01:f2:b5:6e:25:1f:08:
         ff:98:31:7c:7b:5d:0c:40:d7:8b:44:b1:5f:92:e8:2b:f4:f3:
         51:0f:77:fa:40:d5:0b:0d:d7:9e:e0:a4:dd:9f:66:3b:b6:aa:
         03:56:91:fe:14:8e:eb:c5:fa:2a:3a:33:b7:13:90:4f:3d:80:
         fd:a2:f9:57:81:07:68:da:15:5d:ba:37:94:2a:00:1d:96:e4:
         b8:2a:eb:ff:94:aa:a7:9c:eb:3a:b3:e6:1f:a0:d3:ea:90:8d:
         71:3e:6b:cf:4b:47:aa:6d:7e:45:ae:aa:e0:04:0a:fc:05:5f:
         25:85:5c:26:73:9a:5b:7e:a4:c4:8d:91:a8:c4:72:85:be:8d:
         2e:5c:af:85
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUH+Oq7Ttkgbo5aOH00/n/ltKsG84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBE
OEJERTA1RDAeFw0yNTAxMjIxMzIzNDZaFw0yNjAxMjExMzI4NDZaMDMxMTAvBgNV
BAMTKDYxNjE3OTU4ODIzMDJDNUJDNkUyQzA4MDZGQzc1MzE5QjQxRjEzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDTUpBt8qh76pvXTRiewBRFy2
FYv1PnjviZn28bVxAso1DJWS6TkOmPuXE1GAQCW1EiahWDd+BTlzbYWqgiwFkBwF
97vsQAOkPkCZHwVRPpd61G4A+tKFrBMqhJfZkEPZhrlU+H7RCKlJFUeToRVbvDMi
2v0OysPErkRQYA7znD2JLPGCac/E2ghB9bbFzMD216649Vei6xTD4FPNgNCQZ5zG
6yvPJSXUf3d8TvNIlEWoYHxC0Mkg8TzygWJxJih0RgNcAngAbBchThlQ6axeNBfA
3tc2ALWndnIIxWCC+1uX7ttT+TUu+24vkZisMLJassLXCt9ly1QUTj4fxoaNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYWF5WIIwLFvG4sCAb8dTGbQfE70wHwYDVR0j
BBgwFoAU548KIVLxqOTVswl3QnLbcNi94F0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMS9FNzhGMEEyMTUyRjFBOEU0RDVCMzA5Nzc0MjcyREI3MEQ4QkRFMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEYwQTIxNTJGMUE4RTRE
NUIzMDk3NzQyNzJEQjcwRDhCREUwNUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEv
MzIzODMwMzQzYTM0MzUzMDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERQhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBfCXybtgWmjiO3hd6quFZAK3rPuz6vUE87OXpFB3CvyN4xzMEvhqJiG/vh
3xuvXx70r+muQs/rMga7hbvxvw2nJYnLgJu2RIczZya864WLfH58sdU6LHvy5uqc
XsT9D6IMX47zTXGf1F/g8HDFifmHZd+bpdssYQHytW4lHwj/mDF8e10MQNeLRLFf
kugr9PNRD3f6QNULDdee4KTdn2Y7tqoDVpH+FI7rxfoqOjO3E5BPPYD9ovlXgQdo
2hVdujeUKgAdluS4Kuv/lKqnnOs6s+YfoNPqkI1xPmvPS0eqbX5FrqrgBAr8BV8l
hVwmc5pbfqTEjZGoxHKFvo0uXK+F
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:39:42 2025 by rpki-client