Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa
File:                     323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (raw, json)
Hash identifier:          d5s2JyEN4cNkPgu2RyAG0Tl4mWwr4eYppkTDVzH7Grw=
Subject key identifier:   9A:E7:78:04:2E:7C:FC:F7:0B:6C:06:B6:E1:FF:62:70:97:89:2F:13
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       14E3815D8A414172FB810A4F1338AA7E7A843030
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa
Signing time:             Thu 30 Jan 2025 16:04:39 +0000
ROA not before:           Thu 30 Jan 2025 15:59:39 +0000
ROA not after:            Thu 29 Jan 2026 16:04:39 +0000
asID:                     267657
IP address blocks:        2804:44d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 05:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e3:81:5d:8a:41:41:72:fb:81:0a:4f:13:38:aa:7e:7a:84:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Jan 30 15:59:39 2025 GMT
            Not After : Jan 29 16:04:39 2026 GMT
        Subject: CN=9AE778042E7CFCF70B6C06B6E1FF627097892F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:af:e9:c3:61:91:a9:c4:67:96:4c:38:7e:
                    1e:38:97:b5:1f:e7:ca:19:23:af:b8:3d:74:e3:7c:
                    ba:f6:aa:78:a0:fe:4f:b3:11:a9:c0:66:86:b7:a3:
                    4c:e6:1e:cc:39:2a:95:85:05:26:b1:ae:a4:0d:5f:
                    2e:76:3a:e9:98:d9:e5:26:7c:06:94:5e:8e:7a:79:
                    a5:60:6c:df:59:ac:7a:00:21:84:6e:d9:0f:c5:67:
                    94:0c:08:bc:b4:1d:12:cd:8a:b9:14:f4:6d:26:7d:
                    12:20:40:40:a9:1f:cf:db:e2:8c:ac:a0:2e:01:89:
                    fe:3b:3b:41:f9:25:7a:cf:32:62:48:6d:56:47:7f:
                    61:ef:d7:1e:ea:80:e3:3b:2f:f9:67:83:c3:b8:df:
                    a9:a9:71:70:d8:51:f2:a1:fb:1c:58:a3:b1:37:9f:
                    69:14:db:42:2f:30:92:03:0f:05:c9:16:49:c0:b7:
                    f9:e2:3a:6d:84:06:88:94:a3:1e:78:c5:1a:a7:99:
                    b9:0d:50:cb:af:6c:cf:f2:9a:ee:38:ed:4e:4a:d8:
                    b1:76:a4:fa:4a:e1:c4:48:a6:32:96:ed:7f:28:1c:
                    04:ba:50:fd:5d:af:95:8c:16:a2:f4:2d:b2:88:c1:
                    03:d0:ee:bc:79:92:53:60:43:2c:63:99:ba:29:1c:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E7:78:04:2E:7C:FC:F7:0B:6C:06:B6:E1:FF:62:70:97:89:2F:13
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3332203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:00:a4:a2:48:10:14:06:1b:a1:00:61:98:8a:2e:7a:db:
         af:20:99:ee:6c:74:36:4d:7d:65:2a:c9:3a:3b:76:c9:ab:4b:
         c5:1f:e0:20:45:bd:22:c5:92:3e:4a:6c:fb:86:7f:1c:c4:14:
         d2:55:9c:01:a4:da:92:cc:46:77:d8:92:3f:3a:04:79:36:78:
         3e:82:4a:d9:07:b4:6c:24:9b:42:40:3a:f5:35:a3:ca:3b:ea:
         b1:49:54:59:8a:84:bd:bb:8e:72:4c:f2:28:0e:4b:29:e0:55:
         a6:54:39:ee:31:f2:0d:4d:14:de:f2:9e:19:b0:6a:44:fb:22:
         f7:0e:c9:b5:64:db:f8:5c:26:ce:80:49:c4:8e:25:08:db:63:
         3b:a8:5a:56:12:5d:fa:02:a4:0a:c2:58:58:41:62:ee:7c:ac:
         b6:f5:35:31:d5:dc:ad:0c:7b:91:22:9c:d6:14:59:5d:bd:1e:
         05:2e:b1:dc:b6:d6:13:00:22:0b:26:9d:70:af:28:a6:63:b9:
         1d:cf:2f:57:a6:66:a6:d2:a3:78:5d:d6:a7:29:cd:44:d8:4a:
         65:9b:4d:d1:08:ef:a8:df:ee:9c:67:db:a2:13:87:e6:7f:72:
         33:79:dd:e0:d0:89:a6:5d:cb:74:a5:70:58:5f:fe:10:1c:09:
         70:e2:0b:99
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFOOBXYpBQXL7gQpPEziqfnqEMDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0QjFEMTFEQTFDODUzMjIzN0IxMDJGMEMxQzYxN0U3
MEEyNzJDNTAeFw0yNTAxMzAxNTU5MzlaFw0yNjAxMjkxNjA0MzlaMDMxMTAvBgNV
BAMTKDlBRTc3ODA0MkU3Q0ZDRjcwQjZDMDZCNkUxRkY2MjcwOTc4OTJGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZ6/pw2GRqcRnlkw4fh44l7Uf
58oZI6+4PXTjfLr2qnig/k+zEanAZoa3o0zmHsw5KpWFBSaxrqQNXy52OumY2eUm
fAaUXo56eaVgbN9ZrHoAIYRu2Q/FZ5QMCLy0HRLNirkU9G0mfRIgQECpH8/b4oys
oC4Bif47O0H5JXrPMmJIbVZHf2Hv1x7qgOM7L/lng8O436mpcXDYUfKh+xxYo7E3
n2kU20IvMJIDDwXJFknAt/niOm2EBoiUox54xRqnmbkNUMuvbM/ymu447U5K2LF2
pPpK4cRIpjKW7X8oHAS6UP1dr5WMFqL0LbKIwQPQ7rx5klNgQyxjmbopHEgNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmud4BC58/PcLbAa24f9icJeJLxMwHwYDVR0j
BBgwFoAUO0sdEdochTIjexAvDBxhfnCicsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8zQjRCMUQxMURBMUM4NTMyMjM3QjEwMkYwQzFDNjE3RTcwQTI3MkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNEIxRDExREExQzg1MzIy
MzdCMTAyRjBDMUM2MTdFNzBBMjcyQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYa3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzAv
MzIzODMwMzQzYTM0MzQ2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE2DANBgkqhkiG9w0BAQsFAAOCAQEAOaMApKJI
EBQGG6EAYZiKLnrbryCZ7mx0Nk19ZSrJOjt2yatLxR/gIEW9IsWSPkps+4Z/HMQU
0lWcAaTaksxGd9iSPzoEeTZ4PoJK2Qe0bCSbQkA69TWjyjvqsUlUWYqEvbuOckzy
KA5LKeBVplQ57jHyDU0U3vKeGbBqRPsi9w7JtWTb+FwmzoBJxI4lCNtjO6haVhJd
+gKkCsJYWEFi7nystvU1MdXcrQx7kSKc1hRZXb0eBS6x3LbWEwAiCyadcK8opmO5
Hc8vV6ZmptKjeF3WpynNRNhKZZtN0QjvqN/unGfbohOH5n9yM3nd4NCJpl3LdKVw
WF/+EBwJcOILmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:42:30 2025 by rpki-client