Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
File:                     323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier:          6MnbkBjo7czkhYq5sp9gBQAtXAcq+C4fouGkHFK6J2w=
Subject key identifier:   75:F6:AB:AD:A2:C5:84:6C:DD:48:56:E7:82:4A:6E:A1:E3:23:51:81
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       06AF82EAF79CFEB0485FE38401FB9BFA141AC183
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa
Signing time:             Fri 18 Apr 2025 12:58:27 +0000
ROA not before:           Fri 18 Apr 2025 12:53:27 +0000
ROA not after:            Fri 17 Apr 2026 12:58:27 +0000
asID:                     268307
IP address blocks:        2804:4f24:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:82:ea:f7:9c:fe:b0:48:5f:e3:84:01:fb:9b:fa:14:1a:c1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Apr 18 12:53:27 2025 GMT
            Not After : Apr 17 12:58:27 2026 GMT
        Subject: CN=75F6ABADA2C5846CDD4856E7824A6EA1E3235181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:6a:79:d1:b3:bf:50:2d:2e:d1:eb:96:49:
                    fc:37:ad:68:95:7d:27:bd:7b:ca:c4:93:c6:d0:25:
                    54:96:67:34:ac:8b:98:65:ac:3f:aa:f4:da:c5:05:
                    4e:df:70:d4:ac:cc:7a:54:70:b1:d4:23:8c:5f:5c:
                    38:cd:9b:cf:a9:10:9a:63:1b:58:95:0f:86:15:58:
                    75:7f:6e:b5:14:75:37:8c:c6:aa:c8:3a:46:f2:1a:
                    49:e5:ae:c2:b4:9f:91:fc:a8:7f:66:f9:5d:b4:31:
                    6e:ea:34:e3:e0:b6:3e:a5:4f:05:68:3c:46:eb:96:
                    a4:ae:c1:7b:c9:83:bb:b4:00:24:25:63:de:b0:66:
                    1e:19:1d:fc:45:0e:ff:71:43:6d:49:7c:bc:98:2b:
                    cb:64:8d:2a:8d:70:dc:32:d4:64:c2:29:88:b4:f7:
                    c3:c8:d4:9a:b7:c9:b1:bf:22:13:aa:af:60:c1:01:
                    e4:ce:12:6e:c8:21:1b:e8:4c:3e:ed:90:60:bc:c1:
                    32:75:e1:0d:2b:02:fb:26:45:9e:ed:b3:68:07:d9:
                    c5:95:61:95:09:31:15:f4:2d:15:bc:a1:ce:45:92:
                    16:54:2e:34:09:f8:7f:fd:f7:e5:af:94:b8:e8:fa:
                    78:ae:36:93:a9:a2:ee:d4:57:94:18:96:e9:45:48:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:AB:AD:A2:C5:84:6C:DD:48:56:E7:82:4A:6E:A1:E3:23:51:81
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f24:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:e3:0c:d0:7c:9c:54:39:34:28:0b:8f:02:de:85:f4:cb:
         d9:72:50:d8:17:8d:18:f4:2c:8a:0a:99:85:6e:a6:01:e5:f4:
         48:a8:48:2d:55:e1:ca:c8:f3:06:c7:82:d1:ca:85:8b:59:b8:
         e8:51:de:7a:1f:62:4e:de:45:36:a6:3b:38:07:79:8c:20:c3:
         23:d1:52:34:76:30:cb:c0:6b:b2:e9:03:20:5b:a6:52:b2:61:
         44:a5:d9:4c:fc:b8:ab:d1:12:18:bd:99:35:f6:69:55:d7:7d:
         62:07:54:95:e2:90:da:6e:65:ab:e1:e2:e3:ef:3c:c9:08:53:
         9a:59:28:d5:2f:de:05:90:75:98:3b:50:02:7f:77:94:83:40:
         0d:1d:8a:28:aa:a0:d9:ef:dc:3f:a5:ad:37:e7:1f:7a:11:08:
         45:25:69:61:c2:84:85:03:c7:cd:4a:36:6e:e5:83:1b:5d:55:
         5a:85:3f:8a:b9:71:64:f4:52:1c:3b:10:96:47:f0:88:82:7d:
         69:45:55:b2:ee:18:7b:a5:3e:8e:51:40:13:77:ee:b1:97:dc:
         bd:7d:9e:cb:0f:59:24:66:1a:80:03:e6:43:c9:25:2d:c4:5b:
         79:cd:02:b8:3f:6f:ff:7a:f0:10:53:ef:44:c0:5f:d3:4c:c2:
         78:a2:da:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUBq+C6vec/rBIX+OEAfub+hQawYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZGNjZENTgyNTlGMkNCM0MwMTQ2QkVENUY0QjFFNzlB
ODY5ODhGMjAeFw0yNTA0MTgxMjUzMjdaFw0yNjA0MTcxMjU4MjdaMDMxMTAvBgNV
BAMTKDc1RjZBQkFEQTJDNTg0NkNERDQ4NTZFNzgyNEE2RUExRTMyMzUxODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHGp50bO/UC0u0euWSfw3rWiV
fSe9e8rEk8bQJVSWZzSsi5hlrD+q9NrFBU7fcNSszHpUcLHUI4xfXDjNm8+pEJpj
G1iVD4YVWHV/brUUdTeMxqrIOkbyGknlrsK0n5H8qH9m+V20MW7qNOPgtj6lTwVo
PEbrlqSuwXvJg7u0ACQlY96wZh4ZHfxFDv9xQ21JfLyYK8tkjSqNcNwy1GTCKYi0
98PI1Jq3ybG/IhOqr2DBAeTOEm7IIRvoTD7tkGC8wTJ14Q0rAvsmRZ7ts2gH2cWV
YZUJMRX0LRW8oc5FkhZULjQJ+H/99+WvlLjo+niuNpOpou7UV5QYlulFSOldAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUdfarraLFhGzdSFbngkpuoeMjUYEwHwYDVR0j
BBgwFoAUBvZtWCWfLLPAFGvtX0seeahpiPIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FcFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXph
LzAvMDZGNjZENTgyNTlGMkNCM0MwMTQ2QkVENUY0QjFFNzlBODY5ODhGMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wNkY2NkQ1ODI1OUYyQ0IzQzAx
NDZCRUQ1RjRCMUU3OUE4Njk4OEYyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
cFdUZUQ3NEszajY3MUxVNnR1ckN4WUZaaEhpNnFQektMSEs5ZzJFMXphLzAvMzIz
ODMwMzQzYTM0NjYzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzODMzMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETySAMA0GCSqGSIb3DQEBCwUAA4IB
AQCNo+MM0HycVDk0KAuPAt6F9MvZclDYF40Y9CyKCpmFbqYB5fRIqEgtVeHKyPMG
x4LRyoWLWbjoUd56H2JO3kU2pjs4B3mMIMMj0VI0djDLwGuy6QMgW6ZSsmFEpdlM
/Lir0RIYvZk19mlV131iB1SV4pDabmWr4eLj7zzJCFOaWSjVL94FkHWYO1ACf3eU
g0ANHYooqqDZ79w/pa035x96EQhFJWlhwoSFA8fNSjZu5YMbXVVahT+KuXFk9FIc
OxCWR/CIgn1pRVWy7hh7pT6OUUATd+6xl9y9fZ7LD1kkZhqAA+ZDySUtxFt5zQK4
P2//evAQU+9EwF/TTMJ4otrf
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:35:03 2025 by rpki-client