Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33342d3334203d3e203631373337.roa
File:                     323830343a316239633a383030303a3a2f33342d3334203d3e203631373337.roa (raw, json)
Hash identifier:          XZitkY1b1IfYQpsQSNBXSVPXEBte3q7QpKFq2v9wX/Y=
Subject key identifier:   A5:1E:E6:5D:4B:20:58:BC:33:E6:C7:AA:DA:80:B7:73:38:92:B5:39
Certificate issuer:       /CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
Certificate serial:       44E4CBD4DD6D5EDAE0F1575ED5CF49C63FABF29D
Authority key identifier: 39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33342d3334203d3e203631373337.roa
Signing time:             Fri 14 Feb 2025 00:08:55 +0000
ROA not before:           Fri 14 Feb 2025 00:03:55 +0000
ROA not after:            Fri 13 Feb 2026 00:08:55 +0000
asID:                     61737
IP address blocks:        2804:1b9c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl
                          rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 21:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e4:cb:d4:dd:6d:5e:da:e0:f1:57:5e:d5:cf:49:c6:3f:ab:f2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39D7DC5EB84F95D2DB8156F97805B6303A56A12B
        Validity
            Not Before: Feb 14 00:03:55 2025 GMT
            Not After : Feb 13 00:08:55 2026 GMT
        Subject: CN=A51EE65D4B2058BC33E6C7AADA80B7733892B539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:9d:95:e5:32:f9:e0:64:10:fb:b5:ee:02:
                    7c:00:06:71:b5:88:b4:de:44:95:39:5d:58:f0:0e:
                    51:c3:04:14:55:b2:9a:60:a3:00:52:37:27:52:97:
                    23:08:1f:cc:54:10:7b:53:97:eb:31:20:58:b6:0e:
                    49:0e:be:18:97:f8:1c:45:7e:a2:35:8d:06:da:38:
                    4d:22:a5:16:69:b1:49:45:94:4a:c1:17:83:81:d7:
                    cf:f8:0d:f2:e3:2b:33:ba:f4:9c:f3:de:36:de:35:
                    63:8d:d4:23:dc:c0:55:fe:98:d2:85:69:43:cd:0b:
                    59:32:e1:95:49:6a:ee:f8:b7:64:c4:67:8b:5b:2e:
                    23:6e:32:8e:ba:05:d4:49:c5:38:c5:d7:c7:2c:57:
                    cb:ad:f9:b9:cc:42:1e:be:72:54:2c:bd:c9:38:41:
                    04:94:8f:16:2a:b8:85:12:12:5b:cb:41:fa:1a:c7:
                    21:8f:d0:60:3c:c1:1f:ca:18:04:41:6f:a9:ef:2c:
                    3c:ae:d5:77:77:80:56:f7:aa:63:f3:aa:8b:54:bf:
                    91:c1:3e:42:38:59:d7:d4:49:97:84:76:0e:55:58:
                    26:3d:81:18:ee:d3:77:3d:aa:be:2a:45:e2:77:9e:
                    7a:07:c9:00:9f:61:7f:e7:70:17:26:8a:a4:a9:b2:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1E:E6:5D:4B:20:58:BC:33:E6:C7:AA:DA:80:B7:73:38:92:B5:39
            X509v3 Authority Key Identifier:
                keyid:39:D7:DC:5E:B8:4F:95:D2:DB:81:56:F9:78:05:B6:30:3A:56:A1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39D7DC5EB84F95D2DB8156F97805B6303A56A12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/323830343a316239633a383030303a3a2f33342d3334203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b9c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         97:95:c1:9d:29:e3:80:ca:3d:54:ec:b4:12:df:aa:f7:af:04:
         b7:1d:40:a3:4b:af:e4:3b:12:97:9b:4e:6d:25:01:79:4f:24:
         c5:5b:32:80:04:e5:dd:fd:63:63:39:f9:bf:cf:ce:91:a0:2c:
         a0:59:4a:87:6e:6d:07:68:c3:09:79:2e:3e:d8:d2:97:68:3d:
         be:de:65:a3:13:39:80:0a:6e:21:6a:0b:b8:95:9f:8a:7e:62:
         25:c4:02:16:a3:5d:52:c8:87:c3:9d:ed:0a:50:31:9a:64:8d:
         07:97:57:4a:fa:e4:17:e5:88:a8:19:68:27:93:6d:b6:23:4c:
         83:af:0e:b4:d0:e5:52:29:7a:6c:fb:b9:d9:05:ec:7b:b1:99:
         23:97:d0:63:5c:65:64:67:0e:16:40:cb:03:f9:d1:68:6e:40:
         ae:de:00:07:e2:27:22:bb:03:34:de:1d:7e:61:a8:7a:95:47:
         1f:3e:75:be:1f:5f:a6:8f:a1:5a:5f:b9:45:4b:17:dc:97:86:
         2a:ec:6e:28:31:f0:bb:73:73:50:6b:53:ff:80:42:8d:2f:89:
         0d:74:fb:97:43:1a:55:e4:53:c9:cb:92:83:25:4c:fb:54:1f:
         6b:5c:ac:28:09:13:18:27:40:99:9c:9f:62:b6:83:b1:11:fa:
         d9:0b:5b:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUROTL1N1tXtrg8Vde1c9Jxj+r8p0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlEN0RDNUVCODRGOTVEMkRCODE1NkY5NzgwNUI2MzAz
QTU2QTEyQjAeFw0yNTAyMTQwMDAzNTVaFw0yNjAyMTMwMDA4NTVaMDMxMTAvBgNV
BAMTKEE1MUVFNjVENEIyMDU4QkMzM0U2QzdBQURBODBCNzczMzg5MkI1MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyJ2V5TL54GQQ+7XuAnwABnG1
iLTeRJU5XVjwDlHDBBRVsppgowBSNydSlyMIH8xUEHtTl+sxIFi2DkkOvhiX+BxF
fqI1jQbaOE0ipRZpsUlFlErBF4OB18/4DfLjKzO69Jzz3jbeNWON1CPcwFX+mNKF
aUPNC1ky4ZVJau74t2TEZ4tbLiNuMo66BdRJxTjF18csV8ut+bnMQh6+clQsvck4
QQSUjxYquIUSElvLQfoaxyGP0GA8wR/KGARBb6nvLDyu1Xd3gFb3qmPzqotUv5HB
PkI4WdfUSZeEdg5VWCY9gRju03c9qr4qReJ3nnoHyQCfYX/ncBcmiqSpsivLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpR7mXUsgWLwz5seq2oC3cziStTkwHwYDVR0j
BBgwFoAUOdfcXrhPldLbgVb5eAW2MDpWoSswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm05WnAydmM1M25vSlRRb1Q1RnpQM0VieG9CZFhuOWNkcVYxSHZFN1JT
YnUvMC8zOUQ3REM1RUI4NEY5NUQyREI4MTU2Rjk3ODA1QjYzMDNBNTZBMTJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5RDdEQzVFQjg0Rjk1RDJE
QjgxNTZGOTc4MDVCNjMwM0E1NkExMkIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZtOVpwMnZjNTNub0pUUW9UNUZ6UDNFYnhvQmRYbjljZHFWMUh2RTdSU2J1LzAv
MzIzODMwMzQzYTMxNjIzOTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNzMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBucgDANBgkqhkiG9w0BAQsFAAOC
AQEAl5XBnSnjgMo9VOy0Et+q968Etx1Ao0uv5DsSl5tObSUBeU8kxVsygATl3f1j
Yzn5v8/OkaAsoFlKh25tB2jDCXkuPtjSl2g9vt5loxM5gApuIWoLuJWfin5iJcQC
FqNdUsiHw53tClAxmmSNB5dXSvrkF+WIqBloJ5NttiNMg68OtNDlUil6bPu52QXs
e7GZI5fQY1xlZGcOFkDLA/nRaG5Art4AB+InIrsDNN4dfmGoepVHHz51vh9fpo+h
Wl+5RUsX3JeGKuxuKDHwu3NzUGtT/4BCjS+JDXT7l0MaVeRTycuSgyVM+1Qfa1ys
KAkTGCdAmZyfYraDsRH62QtbWw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:49 2025 by rpki-client