Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa
File:                     323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa (raw, json)
Hash identifier:          fhcJkiC9IvFLPAW2kRARSb8oO3OMklzry8lgaZPyN14=
Subject key identifier:   A8:77:12:60:C5:3D:58:D6:8C:B7:19:38:90:CB:27:CC:D6:8B:C0:1B
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       18DDD3D65B48FB2E81BBD65DE2B4483105DABC67
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:24 +0000
ROA not before:           Thu 06 Mar 2025 15:28:24 +0000
ROA not after:            Thu 05 Mar 2026 15:33:24 +0000
asID:                     52780
IP address blocks:        2804:2e94:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:d3:d6:5b:48:fb:2e:81:bb:d6:5d:e2:b4:48:31:05:da:bc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:24 2025 GMT
            Not After : Mar  5 15:33:24 2026 GMT
        Subject: CN=A8771260C53D58D68CB7193890CB27CCD68BC01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:dd:22:71:4c:e2:ca:9c:1f:a5:2e:fa:99:
                    06:cc:3b:96:1c:37:93:cf:cf:bc:27:f0:f4:4a:90:
                    25:83:38:7b:47:37:8d:1b:be:65:87:40:16:b7:40:
                    ba:05:be:a3:0d:b8:a8:5a:f4:87:91:84:96:b5:97:
                    3d:1a:c9:3a:86:9c:ef:45:e3:0f:9b:92:91:0a:f7:
                    44:a1:5a:ee:b3:b4:36:e1:79:b1:08:38:96:60:d8:
                    3c:97:5e:db:65:c5:b0:47:89:6c:86:ce:a6:c1:05:
                    0a:eb:ff:a9:cc:cf:a4:9c:d0:44:e2:1e:28:b1:be:
                    07:e3:2d:d9:cb:51:7c:61:cd:8b:98:92:7e:f8:ab:
                    ad:5d:de:9e:48:14:84:47:2c:6d:f5:31:11:9d:1f:
                    88:46:fb:96:40:de:2d:cc:53:a6:5f:92:a7:a6:2a:
                    b5:93:30:b0:58:bc:b9:94:4d:0f:fb:82:fd:de:2a:
                    84:9f:ec:e0:b8:7b:05:a8:9c:38:e0:82:20:1a:e8:
                    aa:d6:bb:9e:23:53:e3:4c:ef:78:3f:bc:5e:68:4c:
                    28:e2:73:c0:e6:55:4d:37:93:a2:cc:eb:78:dd:c8:
                    0e:46:af:3e:37:ad:5e:b5:69:0f:86:d2:36:17:25:
                    ec:2b:a6:8b:01:4c:6a:68:08:a3:19:e4:4c:ca:3a:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:12:60:C5:3D:58:D6:8C:B7:19:38:90:CB:27:CC:D6:8B:C0:1B
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a363030303a3a2f33352d3335203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:51:f9:6d:1d:e8:ca:6e:eb:12:ea:40:96:dc:e0:61:9d:
         a0:a8:36:4f:8b:f8:b4:5f:41:73:ee:3d:20:12:21:fc:16:d3:
         40:ed:6d:5c:e9:47:60:f0:e0:b1:f4:89:db:13:89:a1:af:82:
         b2:32:3c:28:3e:1e:65:b8:34:02:2d:2c:40:db:d2:65:e5:12:
         0f:3a:38:42:1b:c8:c7:67:fb:d6:a3:15:6a:e6:ba:87:4d:a6:
         85:c4:06:7c:53:d4:c3:a0:20:74:2a:e2:e2:bb:6d:8b:37:44:
         69:30:b8:28:ce:09:84:81:5d:1a:bc:d4:df:0a:c1:f9:c7:bc:
         d6:1e:95:ac:f9:d6:a4:f0:f8:6c:3c:5a:69:ca:f9:b0:71:80:
         4b:39:05:1b:ff:30:36:ee:ba:3d:63:f5:e8:07:5a:16:74:ff:
         ae:8a:5c:ac:0d:1c:21:3d:4b:3c:32:7f:e5:69:f0:f3:30:5a:
         a3:48:2a:b3:17:01:5d:f3:fe:47:9d:4c:10:af:a0:f0:53:36:
         da:3d:75:25:ad:90:57:75:cd:e4:2e:a2:f4:ae:bc:87:0b:a8:
         1d:7a:22:3a:76:e2:7d:d4:46:8d:26:67:60:8a:b3:20:68:fc:
         ab:6d:ad:e7:07:4a:53:f3:24:c7:be:3d:c2:9d:37:ee:15:67:
         84:1f:0b:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGN3T1ltI+y6Bu9Zd4rRIMQXavGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNTAzMDYxNTI4MjRaFw0yNjAzMDUxNTMzMjRaMDMxMTAvBgNV
BAMTKEE4NzcxMjYwQzUzRDU4RDY4Q0I3MTkzODkwQ0IyN0NDRDY4QkMwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEd0icUziypwfpS76mQbMO5Yc
N5PPz7wn8PRKkCWDOHtHN40bvmWHQBa3QLoFvqMNuKha9IeRhJa1lz0ayTqGnO9F
4w+bkpEK90ShWu6ztDbhebEIOJZg2DyXXttlxbBHiWyGzqbBBQrr/6nMz6Sc0ETi
HiixvgfjLdnLUXxhzYuYkn74q61d3p5IFIRHLG31MRGdH4hG+5ZA3i3MU6Zfkqem
KrWTMLBYvLmUTQ/7gv3eKoSf7OC4ewWonDjggiAa6KrWu54jU+NM73g/vF5oTCji
c8DmVU03k6LM63jdyA5Grz43rV61aQ+G0jYXJewrposBTGpoCKMZ5EzKOv9LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqHcSYMU9WNaMtxk4kMsnzNaLwBswHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzIzODMwMzQzYTMyNjUzOTM0M2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM1MzIzNzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBC6UYDANBgkqhkiG9w0BAQsFAAOC
AQEAAMBR+W0d6Mpu6xLqQJbc4GGdoKg2T4v4tF9Bc+49IBIh/BbTQO1tXOlHYPDg
sfSJ2xOJoa+CsjI8KD4eZbg0Ai0sQNvSZeUSDzo4QhvIx2f71qMVaua6h02mhcQG
fFPUw6AgdCri4rttizdEaTC4KM4JhIFdGrzU3wrB+ce81h6VrPnWpPD4bDxaacr5
sHGASzkFG/8wNu66PWP16AdaFnT/ropcrA0cIT1LPDJ/5Wnw8zBao0gqsxcBXfP+
R51MEK+g8FM22j11Ja2QV3XN5C6i9K68hwuoHXoiOnbifdRGjSZnYIqzIGj8q22t
5wdKU/Mkx749wp037hVnhB8LSA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:17:14 2025 by rpki-client