Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33332d3438203d3e203532373830.roa
File:                     323830343a326539343a3a2f33332d3438203d3e203532373830.roa (raw, json)
Hash identifier:          b2a05VRzvIFZv/MLp3TlZ15BzNzOw71djdKY2xbezbA=
Subject key identifier:   03:E0:53:83:10:D7:9E:5E:08:B0:2E:B2:02:50:EB:6F:21:D6:D6:32
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       42B9A4E7322FED155B535B34331652CBE30221F9
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33332d3438203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        2804:2e94::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b9:a4:e7:32:2f:ed:15:5b:53:5b:34:33:16:52:cb:e3:02:21:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=03E0538310D79E5E08B02EB20250EB6F21D6D632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:4f:b3:ab:ca:bd:cb:5e:75:cd:69:4d:cb:
                    5a:fb:eb:46:c4:50:78:fb:0d:cf:c1:e7:35:47:38:
                    ba:7f:df:7a:bc:55:7b:dd:7c:84:25:49:99:7f:23:
                    48:b8:60:fa:4a:6a:09:5c:51:13:05:99:20:a2:6d:
                    39:52:fe:7d:cb:f7:7e:6b:bf:62:4d:01:2a:45:6f:
                    0e:9d:62:e6:fd:e3:ff:95:74:9b:16:1b:8d:1e:9c:
                    f6:f7:a2:06:b0:32:0d:a1:1a:bb:32:ce:85:2c:0e:
                    24:63:25:f7:ce:03:2d:ce:83:06:3d:22:fe:82:c5:
                    2a:a8:4b:3b:c8:1f:85:57:f7:82:35:cb:97:21:b7:
                    08:3b:31:05:0e:d3:5b:56:de:9d:79:97:d9:62:20:
                    ac:6f:f6:84:ed:ce:03:ca:53:b8:32:d0:e6:1c:8e:
                    47:e5:c0:42:73:3e:3f:21:c3:f7:61:02:51:d3:7e:
                    35:91:11:0a:50:74:84:0e:9a:7f:6c:37:fa:30:36:
                    80:c4:82:ec:82:99:25:1e:67:41:08:f3:75:b6:a1:
                    98:55:f5:32:9b:7f:d4:fb:17:09:dd:b8:b2:2c:ae:
                    36:00:29:8a:f9:3c:99:15:bd:db:cc:55:c6:e3:cf:
                    e1:7d:0d:d0:9f:1e:bc:5c:8b:a9:c4:5b:3f:01:eb:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:53:83:10:D7:9E:5E:08:B0:2E:B2:02:50:EB:6F:21:D6:D6:32
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/323830343a326539343a3a2f33332d3438203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94::/33

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:72:af:85:8e:15:9e:1a:cd:8f:24:af:a3:b8:95:b2:dc:
         43:cf:bf:81:5f:dd:6c:e5:c4:a9:de:3d:19:78:d7:fb:c4:b6:
         6e:41:79:9e:34:a3:e2:74:ec:5c:a4:37:2c:a9:96:f4:ee:90:
         b1:40:14:55:3a:11:bc:3b:7e:33:36:2d:16:dc:46:23:f1:89:
         f9:85:e1:37:34:95:55:82:74:1e:be:c0:59:88:0a:17:81:16:
         d8:1b:6e:a4:cb:9b:4e:6e:58:80:80:78:52:05:96:50:ce:8b:
         7b:6d:a8:0b:a4:5b:42:c1:26:ec:77:7e:9c:a1:50:7e:0c:f4:
         a4:bf:37:0b:ae:cb:29:eb:ed:a6:c9:e9:44:21:0c:df:de:ad:
         11:1b:0e:84:bb:ec:f0:3c:55:c1:82:8a:af:40:ba:7e:3a:7a:
         07:0d:55:13:3d:8f:4d:f6:bf:80:59:42:17:af:45:8f:5c:2a:
         10:03:69:ba:f5:03:64:21:65:5c:de:d8:d2:6c:91:03:d3:df:
         d1:00:b1:e5:bd:aa:00:e3:a4:25:10:e6:9b:85:34:c2:98:13:
         ec:28:ce:81:c2:57:bc:2c:c6:01:2e:e6:10:33:88:90:2f:84:
         8e:41:c4:65:4b:7c:ce:1f:d7:dc:57:e5:fe:60:b8:7c:4f:09:
         b6:29:97:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQrmk5zIv7RVbU1s0MxZSy+MCIfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVDRTgwQjA0ODdBOTcwNjYzRUExRTA0QzJDREJFRkY3
MkIxMDRFQTAeFw0yNTAzMDYxNTI4MjNaFw0yNjAzMDUxNTMzMjNaMDMxMTAvBgNV
BAMTKDAzRTA1MzgzMTBENzlFNUUwOEIwMkVCMjAyNTBFQjZGMjFENkQ2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3k+zq8q9y151zWlNy1r760bE
UHj7Dc/B5zVHOLp/33q8VXvdfIQlSZl/I0i4YPpKaglcURMFmSCibTlS/n3L935r
v2JNASpFbw6dYub94/+VdJsWG40enPb3ogawMg2hGrsyzoUsDiRjJffOAy3OgwY9
Iv6CxSqoSzvIH4VX94I1y5chtwg7MQUO01tW3p15l9liIKxv9oTtzgPKU7gy0OYc
jkflwEJzPj8hw/dhAlHTfjWREQpQdIQOmn9sN/owNoDEguyCmSUeZ0EI83W2oZhV
9TKbf9T7FwnduLIsrjYAKYr5PJkVvdvMVcbjz+F9DdCfHrxci6nEWz8B6/8XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA+BTgxDXnl4IsC6yAlDrbyHW1jIwHwYDVR0j
BBgwFoAUdc6AsEh6lwZj6h4Ews2+/3KxBOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJuUWFIeU5SNWtVU3Z2anc2QkttVW40cFU4SnNrNW1HeU5WYmFSWGhr
dkMvMS83NUNFODBCMDQ4N0E5NzA2NjNFQTFFMDRDMkNEQkVGRjcyQjEwNEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1Q0U4MEIwNDg3QTk3MDY2
M0VBMUUwNEMyQ0RCRUZGNzJCMTA0RUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCblFhSHlOUjVrVVN2dmp3NkJLbVVuNHBVOEpzazVtR3lOVmJhUlhoa3ZDLzEv
MzIzODMwMzQzYTMyNjUzOTM0M2EzYTJmMzMzMzJkMzQzODIwM2QzZTIwMzUzMjM3
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygELpQAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6HKvhY4V
nhrNjySvo7iVstxDz7+BX91s5cSp3j0ZeNf7xLZuQXmeNKPidOxcpDcsqZb07pCx
QBRVOhG8O34zNi0W3EYj8Yn5heE3NJVVgnQevsBZiAoXgRbYG26ky5tObliAgHhS
BZZQzot7bagLpFtCwSbsd36coVB+DPSkvzcLrssp6+2myelEIQzf3q0RGw6Eu+zw
PFXBgoqvQLp+OnoHDVUTPY9N9r+AWUIXr0WPXCoQA2m69QNkIWVc3tjSbJED09/R
ALHlvaoA46QlEOabhTTCmBPsKM6Bwle8LMYBLuYQM4iQL4SOQcRlS3zOH9fcV+X+
YLh8Twm2KZe3
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:58:22 2025 by rpki-client