Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          EffEsdxkAER0Fj0xM0pNsunwfYEswky56p5DS+4NX34=
Subject key identifier:   96:5D:DA:4F:41:F8:71:11:B5:15:AD:C4:ED:EE:E6:3D:6A:77:A7:82
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       6727D58BFB1615EEC5DD27D53FBE3DC1CB01CF40
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:31 +0000
ROA not before:           Fri 14 Mar 2025 21:38:31 +0000
ROA not after:            Fri 13 Mar 2026 21:43:31 +0000
asID:                     269508
IP address blocks:        2804:65b0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:27:d5:8b:fb:16:15:ee:c5:dd:27:d5:3f:be:3d:c1:cb:01:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:31 2025 GMT
            Not After : Mar 13 21:43:31 2026 GMT
        Subject: CN=965DDA4F41F87111B515ADC4EDEEE63D6A77A782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:05:6c:e8:70:93:6c:37:41:f0:2b:15:73:
                    b1:62:57:64:3b:93:94:6e:d4:2e:93:15:3a:38:91:
                    80:ae:cc:cc:8c:bd:b1:a9:f3:a7:f3:7b:e3:6d:c8:
                    16:70:79:55:27:1c:c3:34:fa:65:a4:59:58:52:ae:
                    42:94:26:dd:e3:07:0e:8e:1f:cd:5b:ff:ce:3d:0f:
                    df:c3:a6:e0:f7:3b:94:11:c9:fb:58:67:65:43:eb:
                    6f:a2:1e:9c:b2:e2:37:d0:e7:53:cb:b2:85:f5:bc:
                    20:e5:75:e7:33:7e:f7:90:eb:7e:e4:00:ae:d8:cb:
                    7c:5f:a7:64:f4:09:3d:1b:22:14:9e:d1:a1:c4:25:
                    b7:ef:92:30:5a:80:46:c7:52:2e:83:36:56:23:31:
                    5e:80:31:a2:98:b8:3b:c7:56:9a:2f:89:8a:57:d0:
                    54:dc:d5:07:71:3a:a4:75:bd:ad:f3:c2:5e:5f:b0:
                    b1:55:9c:84:f0:b6:99:bf:39:05:05:e7:68:ba:95:
                    2d:76:69:f1:85:a2:14:d5:78:90:c7:61:1c:c1:74:
                    60:75:b1:54:21:48:65:7c:30:e8:26:95:c3:83:8c:
                    ca:26:94:9b:42:6c:e0:3e:c8:1d:1a:98:bf:97:58:
                    1d:ed:9a:53:51:47:44:a0:b3:bf:1c:fe:13:89:22:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:DA:4F:41:F8:71:11:B5:15:AD:C4:ED:EE:E6:3D:6A:77:A7:82
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:7e:1a:35:c4:5f:78:44:f3:bf:c7:22:8a:19:45:a7:87:e9:
         77:13:f3:b2:27:8c:dc:8f:cb:ae:bb:a0:18:5f:f6:48:aa:68:
         57:8e:db:d2:34:ac:f9:d3:aa:95:ce:80:e0:e9:06:5d:b9:6b:
         e4:fc:a6:94:96:e1:4f:86:2e:d6:c6:98:81:09:4d:b8:aa:00:
         43:c7:9a:61:75:99:3d:f7:51:79:f5:25:5a:e6:ca:e8:85:25:
         6f:f9:01:76:a5:94:1f:23:d7:38:33:3f:58:e6:22:2f:4c:74:
         d1:d5:92:8a:b5:35:6f:79:0a:ca:39:3b:56:4f:97:20:00:83:
         b9:9d:45:13:93:68:49:53:e2:1f:5a:2b:77:31:d1:b2:52:d6:
         c8:c3:8a:a1:98:45:00:24:bb:05:01:de:0f:b9:08:af:ec:21:
         c2:e7:9e:8e:aa:af:94:0b:07:61:90:8b:ae:38:5b:96:7f:6f:
         58:db:56:9f:9a:62:44:ad:3e:be:f6:d2:3b:44:4f:bd:11:79:
         ee:16:df:b9:a7:3e:5f:f4:ec:70:e5:df:07:30:66:54:ab:f1:
         2f:f4:97:b3:14:c4:a9:21:5a:c4:a0:01:e1:1a:16:e5:a6:0a:
         48:09:80:3c:59:26:eb:3f:37:f1:1c:5c:7c:fb:cb:2f:2d:73:
         de:fd:85:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZyfVi/sWFe7F3SfVP749wcsBz0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwMjVDM0NFMzc2MzU3OTE4QzA3OEQ4RTYyRDk4OUZG
RDA0MDZFQzAeFw0yNTAzMTQyMTM4MzFaFw0yNjAzMTMyMTQzMzFaMDMxMTAvBgNV
BAMTKDk2NUREQTRGNDFGODcxMTFCNTE1QURDNEVERUVFNjNENkE3N0E3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTjwVs6HCTbDdB8CsVc7FiV2Q7
k5Ru1C6TFTo4kYCuzMyMvbGp86fze+NtyBZweVUnHMM0+mWkWVhSrkKUJt3jBw6O
H81b/849D9/DpuD3O5QRyftYZ2VD62+iHpyy4jfQ51PLsoX1vCDldeczfveQ637k
AK7Yy3xfp2T0CT0bIhSe0aHEJbfvkjBagEbHUi6DNlYjMV6AMaKYuDvHVpoviYpX
0FTc1QdxOqR1va3zwl5fsLFVnITwtpm/OQUF52i6lS12afGFohTVeJDHYRzBdGB1
sVQhSGV8MOgmlcODjMomlJtCbOA+yB0amL+XWB3tmlNRR0Sgs78c/hOJIhC7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUll3aT0H4cRG1Fa3E7e7mPWp3p4IwHwYDVR0j
BBgwFoAUOAJcPON2NXkYwHjY5i2Yn/0EBuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC8zODAyNUMzQ0UzNzYzNTc5MThDMDc4RDhFNjJEOTg5RkZEMDQwNkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4MDI1QzNDRTM3NjM1Nzkx
OEMwNzhEOEU2MkQ5ODlGRkQwNDA2RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzIzODMwMzQzYTM2MzU2MjMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARlsAAwDQYJKoZIhvcNAQELBQADggEBADF+GjXE
X3hE87/HIooZRaeH6XcT87InjNyPy667oBhf9kiqaFeO29I0rPnTqpXOgODpBl25
a+T8ppSW4U+GLtbGmIEJTbiqAEPHmmF1mT33UXn1JVrmyuiFJW/5AXallB8j1zgz
P1jmIi9MdNHVkoq1NW95Cso5O1ZPlyAAg7mdRROTaElT4h9aK3cx0bJS1sjDiqGY
RQAkuwUB3g+5CK/sIcLnno6qr5QLB2GQi644W5Z/b1jbVp+aYkStPr720jtET70R
ee4W37mnPl/07HDl3wcwZlSr8S/0l7MUxKkhWsSgAeEaFuWmCkgJgDxZJus/N/Ec
XHz7yy8tc979hYQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:51:16 2025 by rpki-client