Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (raw, json)
Hash identifier:          plNUueA3irfkbK3SOOuMY94LQIbeZrvZU3etSiEki8Q=
Subject key identifier:   1C:C8:A5:A9:41:52:A1:19:BA:E6:EC:6B:53:53:A8:E9:E7:94:6A:93
Certificate issuer:       /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial:       750EBC146F3FEC742A32F7D3406BA5B1C0F6698E
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa
Signing time:             Mon 10 Feb 2025 17:25:10 +0000
ROA not before:           Mon 10 Feb 2025 17:20:10 +0000
ROA not after:            Mon 09 Feb 2026 17:25:10 +0000
asID:                     265080
IP address blocks:        2804:3278::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:bc:14:6f:3f:ec:74:2a:32:f7:d3:40:6b:a5:b1:c0:f6:69:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
        Validity
            Not Before: Feb 10 17:20:10 2025 GMT
            Not After : Feb  9 17:25:10 2026 GMT
        Subject: CN=1CC8A5A94152A119BAE6EC6B5353A8E9E7946A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:59:a2:d6:b0:f7:40:56:17:ec:08:4f:f5:
                    ba:a4:50:ea:b1:c3:21:1c:9d:33:2a:ba:94:fd:a4:
                    30:2a:64:55:af:55:96:9b:7d:3e:67:9d:ce:65:5b:
                    b5:fd:9d:1d:d1:ec:1c:ef:bd:ad:14:fd:66:97:48:
                    1b:92:e3:f4:b7:93:cd:83:23:16:74:e2:9b:d4:e9:
                    4f:fd:af:66:82:36:f9:f7:bb:fe:64:5e:5e:fb:39:
                    ef:55:49:24:79:38:e2:df:1f:d2:12:e6:87:6a:62:
                    a4:88:30:12:64:af:36:50:45:27:c1:a1:49:30:cf:
                    10:37:60:6f:39:74:82:78:44:c3:2b:76:8f:d4:b6:
                    53:be:ae:78:ca:5a:c5:90:52:f8:49:b0:70:6c:70:
                    48:a8:61:29:c4:e9:8b:09:4d:b3:f1:a2:c3:e7:41:
                    26:e4:c1:a4:dc:4a:96:e5:b6:4f:12:9d:3e:8e:48:
                    0d:e1:dd:0c:41:a1:78:87:73:8e:ee:5c:af:f7:c4:
                    bc:43:50:25:cf:c4:45:af:16:22:62:a8:c9:37:6a:
                    b3:70:70:a6:ab:b9:e0:77:53:22:35:9c:38:98:67:
                    64:de:44:b3:ba:a1:b4:33:0f:63:da:df:23:5a:58:
                    74:d5:f0:69:5c:a9:27:c9:3b:6f:e5:ae:4d:ac:41:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C8:A5:A9:41:52:A1:19:BA:E6:EC:6B:53:53:A8:E9:E7:94:6A:93
            X509v3 Authority Key Identifier:
                keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33322d3332203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:74:df:54:dc:26:30:46:be:87:7a:d3:7e:bb:82:f2:36:
         3b:91:55:b5:43:8e:e7:7d:88:80:a1:04:31:c2:3e:6c:d1:cc:
         87:e7:f1:60:46:8e:3d:bf:1b:03:46:ba:fd:7b:39:cf:79:49:
         35:d5:c8:dc:cf:b4:77:ae:27:7e:79:0f:1b:f3:44:d8:ed:de:
         e2:bc:c4:d1:d0:8b:80:43:5b:5e:ee:86:b4:dd:d5:06:11:aa:
         cd:e6:af:ab:aa:28:6b:97:8c:5d:5b:0b:5b:99:26:f1:b8:62:
         55:a9:44:68:bf:75:19:25:36:1f:9b:2d:a5:25:17:da:cf:86:
         ac:67:6a:35:e1:ca:c9:2d:eb:7d:b6:b2:8b:ac:a9:4c:18:7b:
         21:d8:ab:9e:cd:c3:36:d6:c6:01:66:54:e1:a5:56:ce:40:30:
         c2:b3:76:7d:39:cb:74:56:5e:6b:ec:e9:b7:bb:92:fd:17:25:
         54:6f:fe:15:37:5a:46:6d:b1:8f:74:2e:97:8d:0c:22:c0:50:
         39:71:73:11:4e:32:e8:30:a2:fe:89:ed:ae:1b:b2:3e:eb:82:
         27:46:cc:9d:e8:75:b8:9c:41:48:65:a6:f2:f6:c3:30:41:cb:
         5f:f3:f3:8f:f2:9a:0f:cc:4a:25:34:1a:4a:8c:22:22:5b:00:
         cf:39:21:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdQ68FG8/7HQqMvfTQGulscD2aY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwNkNDNzRFQzkzNkFBOEVEN0YzODRBOUUxQjdDMEE5
NDVDMEEzODAeFw0yNTAyMTAxNzIwMTBaFw0yNjAyMDkxNzI1MTBaMDMxMTAvBgNV
BAMTKDFDQzhBNUE5NDE1MkExMTlCQUU2RUM2QjUzNTNBOEU5RTc5NDZBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/L1mi1rD3QFYX7AhP9bqkUOqx
wyEcnTMqupT9pDAqZFWvVZabfT5nnc5lW7X9nR3R7Bzvva0U/WaXSBuS4/S3k82D
IxZ04pvU6U/9r2aCNvn3u/5kXl77Oe9VSSR5OOLfH9IS5odqYqSIMBJkrzZQRSfB
oUkwzxA3YG85dIJ4RMMrdo/UtlO+rnjKWsWQUvhJsHBscEioYSnE6YsJTbPxosPn
QSbkwaTcSpbltk8SnT6OSA3h3QxBoXiHc47uXK/3xLxDUCXPxEWvFiJiqMk3arNw
cKarueB3UyI1nDiYZ2TeRLO6obQzD2Pa3yNaWHTV8GlcqSfJO2/lrk2sQb2RAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHMilqUFSoRm65uxrU1Oo6eeUapMwHwYDVR0j
BBgwFoAU1gbMdOyTaqjtfzhKnht8CpRcCjgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC9ENjA2Q0M3NEVDOTM2QUE4RUQ3RjM4NEE5RTFCN0MwQTk0NUMwQTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MDZDQzc0RUM5MzZBQThF
RDdGMzg0QTlFMUI3QzBBOTQ1QzBBMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzIzODMwMzQzYTMzMzIzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyeDANBgkqhkiG9w0BAQsFAAOCAQEAMPJ031Tc
JjBGvod60367gvI2O5FVtUOO532IgKEEMcI+bNHMh+fxYEaOPb8bA0a6/Xs5z3lJ
NdXI3M+0d64nfnkPG/NE2O3e4rzE0dCLgENbXu6GtN3VBhGqzeavq6ooa5eMXVsL
W5km8bhiValEaL91GSU2H5stpSUX2s+GrGdqNeHKyS3rfbayi6ypTBh7Idirns3D
NtbGAWZU4aVWzkAwwrN2fTnLdFZea+zpt7uS/RclVG/+FTdaRm2xj3Qul40MIsBQ
OXFzEU4y6DCi/ontrhuyPuuCJ0bMneh1uJxBSGWm8vbDMEHLX/Pzj/KaD8xKJTQa
SowiIlsAzzkhLA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:32 2025 by rpki-client