Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
File:                     323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (raw, json)
Hash identifier:          iFvroAGLuzeDnKcx4rHDR3zShr/DLq+A6T0ARZBNJ7o=
Subject key identifier:   1C:8B:07:94:F4:F6:DE:03:E3:31:FE:59:D7:03:DD:A7:6D:F5:D7:4F
Certificate issuer:       /CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
Certificate serial:       3F6329D67CF6880DD075DC25CB7A6317CCAF7913
Authority key identifier: 3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
Signing time:             Thu 27 Mar 2025 20:17:14 +0000
ROA not before:           Thu 27 Mar 2025 20:12:14 +0000
ROA not after:            Thu 26 Mar 2026 20:17:14 +0000
asID:                     273779
IP address blocks:        2804:8c18::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl
                          rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:63:29:d6:7c:f6:88:0d:d0:75:dc:25:cb:7a:63:17:cc:af:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
        Validity
            Not Before: Mar 27 20:12:14 2025 GMT
            Not After : Mar 26 20:17:14 2026 GMT
        Subject: CN=1C8B0794F4F6DE03E331FE59D703DDA76DF5D74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:da:37:e0:be:b1:a6:9c:56:3b:af:a8:2e:
                    47:f0:12:9b:8d:f3:84:3e:9a:46:fd:52:e3:c0:be:
                    1a:c8:1d:bd:c1:ca:41:71:3d:51:6c:04:31:97:ac:
                    d3:b3:f7:5b:c6:6c:ce:cf:9b:c2:09:fb:e3:46:4d:
                    bf:91:7a:be:d3:4d:27:de:f2:d9:fd:6a:e4:e6:4a:
                    37:bb:f7:39:3c:f6:10:e8:f8:17:5d:4b:30:dd:7a:
                    de:c4:e9:4d:a1:c6:cb:4c:ea:97:70:e9:3a:2d:a1:
                    02:3b:82:2e:d0:05:be:a7:c0:bd:37:62:68:10:c5:
                    7d:0b:e0:c0:cd:8b:8a:11:c3:4f:be:e9:55:e7:6b:
                    17:bf:ec:f8:44:d1:bf:be:cd:57:88:0d:cb:8e:cd:
                    c9:0e:5f:33:32:8a:cf:c1:a4:3a:49:f5:96:2e:88:
                    5d:9b:49:ba:b6:36:a6:f2:3e:e5:35:1b:02:3c:92:
                    46:09:91:bd:90:92:67:c7:72:1f:91:50:21:ae:84:
                    3a:d8:09:8c:37:11:24:75:a9:f6:00:fd:f3:51:bc:
                    d1:54:5e:e0:a0:c0:c1:dc:61:f0:74:aa:fd:89:7a:
                    20:e1:44:b1:21:cc:0b:b7:ca:3e:9a:b0:2b:b4:0e:
                    97:2b:ca:d5:06:55:17:51:d4:76:b3:56:28:c2:0d:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:07:94:F4:F6:DE:03:E3:31:FE:59:D7:03:DD:A7:6D:F5:D7:4F
            X509v3 Authority Key Identifier:
                keyid:3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:77:58:c1:e2:f5:18:5d:0e:b6:28:1c:15:d6:d8:ac:de:c5:
         14:9c:a2:12:62:5e:de:1a:b4:a3:bc:7b:8b:26:b2:fe:0b:1c:
         ad:fb:d6:01:30:f1:e9:11:99:96:c5:21:57:fa:c4:75:d1:62:
         8f:e2:8a:d6:d8:cc:6c:7e:6a:a1:bd:14:95:58:95:3d:fb:23:
         b4:f8:9f:65:a1:7d:a9:a2:84:36:bc:9d:fc:cd:a2:f9:de:8a:
         f8:42:4f:c2:e0:1b:36:33:40:6c:e3:b9:2e:48:5d:eb:aa:3b:
         b4:37:aa:cc:55:f5:b8:78:5a:96:fe:d1:d4:0c:3d:0d:29:90:
         5c:73:42:5d:15:9f:92:0a:c1:bc:82:31:6f:fd:86:5a:09:46:
         ce:67:29:62:c5:d6:9c:ee:d5:a2:45:82:62:ad:9e:5b:af:fd:
         b6:05:71:4d:28:0d:0e:cd:54:55:0a:7b:d1:0e:51:d6:a0:49:
         d4:06:35:bb:8c:69:68:a9:c4:78:f5:15:46:7d:37:45:d5:4f:
         c1:dc:80:73:70:02:f8:4c:0b:5e:81:e7:bd:a5:0d:21:85:50:
         9d:0f:43:b0:bf:e4:04:1f:6d:2a:9d:d9:4d:13:e1:c5:a8:31:
         ad:92:e8:47:85:e4:d0:00:71:ba:3f:79:47:5e:f1:42:ca:94:
         67:75:6c:8d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUP2Mp1nz2iA3Qddwly3pjF8yveRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0RDFFODBFNUIwODkzNDE1QzhFMTQ3RTYyOEUxMjUx
MzlBMUFERjAeFw0yNTAzMjcyMDEyMTRaFw0yNjAzMjYyMDE3MTRaMDMxMTAvBgNV
BAMTKDFDOEIwNzk0RjRGNkRFMDNFMzMxRkU1OUQ3MDNEREE3NkRGNUQ3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3do34L6xppxWO6+oLkfwEpuN
84Q+mkb9UuPAvhrIHb3BykFxPVFsBDGXrNOz91vGbM7Pm8IJ++NGTb+Rer7TTSfe
8tn9auTmSje79zk89hDo+BddSzDdet7E6U2hxstM6pdw6TotoQI7gi7QBb6nwL03
YmgQxX0L4MDNi4oRw0++6VXnaxe/7PhE0b++zVeIDcuOzckOXzMyis/BpDpJ9ZYu
iF2bSbq2NqbyPuU1GwI8kkYJkb2QkmfHch+RUCGuhDrYCYw3ESR1qfYA/fNRvNFU
XuCgwMHcYfB0qv2JeiDhRLEhzAu3yj6asCu0DpcrytUGVRdR1HazVijCDY2FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHIsHlPT23gPjMf5Z1wPdp231108wHwYDVR0j
BBgwFoAUOk0egOWwiTQVyOFH5ijhJROaGt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZwRk10ejhMMWRIQ2VSNTh5WnFWdVVCeEhjSjh2MWtaWHhRb2tITXR0
U0wvMC8zQTREMUU4MEU1QjA4OTM0MTVDOEUxNDdFNjI4RTEyNTEzOUExQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNEQxRTgwRTVCMDg5MzQx
NUM4RTE0N0U2MjhFMTI1MTM5QTFBREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWcEZNdHo4TDFkSENlUjU4eVpxVnVVQnhIY0o4djFrWlh4UW9rSE10dFNMLzAv
MzIzODMwMzQzYTM4NjMzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzczNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMGDANBgkqhkiG9w0BAQsFAAOCAQEAEHdYweL1
GF0OtigcFdbYrN7FFJyiEmJe3hq0o7x7iyay/gscrfvWATDx6RGZlsUhV/rEddFi
j+KK1tjMbH5qob0UlViVPfsjtPifZaF9qaKENryd/M2i+d6K+EJPwuAbNjNAbOO5
Lkhd66o7tDeqzFX1uHhalv7R1Aw9DSmQXHNCXRWfkgrBvIIxb/2GWglGzmcpYsXW
nO7VokWCYq2eW6/9tgVxTSgNDs1UVQp70Q5R1qBJ1AY1u4xpaKnEePUVRn03RdVP
wdyAc3AC+EwLXoHnvaUNIYVQnQ9DsL/kBB9tKp3ZTRPhxagxrZLoR4Xk0ABxuj95
R17xQsqUZ3VsjQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:16:40 2025 by rpki-client