Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa
File:                     323830343a353636343a3a2f33322d3332203d3e20323637393935.roa (raw, json)
Hash identifier:          4E3fjuabivmcn8dLQn+O7YyTrGGpuPwSa/pAP6nPuPA=
Subject key identifier:   18:4C:A7:0C:56:A2:8A:8C:7F:3D:F4:FD:C7:2C:A5:61:62:B8:9B:D6
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       5973ED5CC3A4785910EEEB8945BA129056FEDD36
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa
Signing time:             Thu 06 Mar 2025 21:19:30 +0000
ROA not before:           Thu 06 Mar 2025 21:14:30 +0000
ROA not after:            Thu 05 Mar 2026 21:19:30 +0000
asID:                     267995
IP address blocks:        2804:5664::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:73:ed:5c:c3:a4:78:59:10:ee:eb:89:45:ba:12:90:56:fe:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Mar  6 21:14:30 2025 GMT
            Not After : Mar  5 21:19:30 2026 GMT
        Subject: CN=184CA70C56A28A8C7F3DF4FDC72CA56162B89BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:de:e7:95:72:5f:bc:d0:ee:9a:8a:c2:69:
                    67:e5:b2:f5:d2:f1:9b:ad:99:5c:e7:b6:4a:ab:68:
                    c9:08:c4:ce:ba:ee:8e:2c:0b:97:1b:de:c4:b1:5f:
                    1d:a5:94:e9:cd:b5:fa:6a:51:7b:b0:5b:ee:68:fd:
                    8e:0a:4a:96:b3:0c:e6:ed:59:2c:22:a2:ae:4c:1e:
                    b6:f1:e1:cd:69:22:de:4d:36:be:d1:8b:2e:d8:36:
                    cb:6e:37:a2:79:67:11:25:27:b3:93:02:b1:ee:00:
                    f7:d8:9c:a5:3e:18:38:a9:b2:d9:4e:50:25:34:38:
                    45:73:d1:bb:2b:a1:1c:bd:f3:6e:2e:3b:63:8a:52:
                    c7:c7:db:7e:5a:18:db:e8:a5:06:33:ef:75:ad:ff:
                    8f:3b:92:7f:7d:1c:4d:4b:e9:b7:99:70:a8:7f:6a:
                    90:8f:ec:3f:1c:ad:7f:e8:76:20:bc:6d:c0:d3:d7:
                    97:db:17:99:eb:6d:5f:f8:33:c3:b2:0b:c9:c0:22:
                    83:cb:43:4c:a7:de:92:db:40:7f:c1:0d:dd:13:78:
                    ca:e5:3a:c4:b4:95:ca:b2:d3:3c:1d:71:be:24:4b:
                    9c:c5:cb:54:0b:81:d6:ed:a1:34:02:73:bb:2e:01:
                    61:72:df:5d:95:8b:4a:7a:87:58:02:1d:f6:34:7f:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4C:A7:0C:56:A2:8A:8C:7F:3D:F4:FD:C7:2C:A5:61:62:B8:9B:D6
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:9e:e6:74:76:9b:10:17:cc:22:e8:d3:14:90:22:2d:af:3a:
         86:e6:4b:34:e4:9e:3d:01:43:de:f3:e9:1a:32:91:9e:46:45:
         c9:96:ca:e2:d0:f8:41:42:1e:e1:33:bc:f6:79:b1:28:90:76:
         b4:7d:db:6a:5e:61:bf:a6:d0:c7:75:e0:79:57:17:bf:1d:18:
         ac:2f:a4:76:a8:29:0a:f0:1c:72:73:ec:c1:d8:e5:9e:de:d0:
         29:cc:5a:40:b1:8b:2e:5a:5b:66:c1:3d:b5:a1:2c:18:98:22:
         35:ca:e8:68:b2:0f:3a:e2:51:72:7c:1f:e3:85:78:5c:c3:0d:
         50:bd:ff:47:de:30:85:ad:94:c2:72:92:96:79:5d:7b:12:5d:
         02:52:1f:e2:13:c3:ec:38:d2:ba:a2:9e:5e:f7:d8:d8:9d:43:
         ae:45:5c:a1:66:94:ec:27:91:c4:7e:04:6f:65:64:86:ed:68:
         b2:ce:c2:9c:32:42:69:cd:05:97:b8:4f:9c:75:a1:a8:4e:6e:
         25:cb:0b:4b:8b:d2:99:21:9c:4a:3b:a1:00:01:a6:e8:35:d4:
         87:a4:24:cd:21:4b:c8:82:67:7b:7e:f3:b9:92:84:4a:a2:3e:
         72:7d:19:10:c9:20:ad:34:9e:d5:ee:da:14:83:02:e9:31:a4:
         74:47:4f:a1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWXPtXMOkeFkQ7uuJRboSkFb+3TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk3NTgwRTgzOTJDQzY1Mzg0M0M3MDA4QUEzMTE1QTM3
QTA5NzM2QTAeFw0yNTAzMDYyMTE0MzBaFw0yNjAzMDUyMTE5MzBaMDMxMTAvBgNV
BAMTKDE4NENBNzBDNTZBMjhBOEM3RjNERjRGREM3MkNBNTYxNjJCODlCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSd7nlXJfvNDumorCaWflsvXS
8ZutmVzntkqraMkIxM667o4sC5cb3sSxXx2llOnNtfpqUXuwW+5o/Y4KSpazDObt
WSwioq5MHrbx4c1pIt5NNr7Riy7YNstuN6J5ZxElJ7OTArHuAPfYnKU+GDipstlO
UCU0OEVz0bsroRy9824uO2OKUsfH235aGNvopQYz73Wt/487kn99HE1L6beZcKh/
apCP7D8crX/odiC8bcDT15fbF5nrbV/4M8OyC8nAIoPLQ0yn3pLbQH/BDd0TeMrl
OsS0lcqy0zwdcb4kS5zFy1QLgdbtoTQCc7suAWFy312Vi0p6h1gCHfY0f58ZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUGEynDFaiiox/PfT9xyylYWK4m9YwHwYDVR0j
BBgwFoAUaXWA6DksxlOEPHAIqjEVo3oJc2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM
ZUgvMS82OTc1ODBFODM5MkNDNjUzODQzQzcwMDhBQTMxMTVBMzdBMDk3MzZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NzU4MEU4MzkyQ0M2NTM4
NDNDNzAwOEFBMzExNUEzN0EwOTczNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQeG9YYUNiVWc0enYySnZSN0FtR1NwdkdmQjkxMUVteTVRam1CUHFkTGVILzEv
MzIzODMwMzQzYTM1MzYzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWZDANBgkqhkiG9w0BAQsFAAOCAQEAuZ7mdHab
EBfMIujTFJAiLa86huZLNOSePQFD3vPpGjKRnkZFyZbK4tD4QUIe4TO89nmxKJB2
tH3bal5hv6bQx3XgeVcXvx0YrC+kdqgpCvAccnPswdjlnt7QKcxaQLGLLlpbZsE9
taEsGJgiNcroaLIPOuJRcnwf44V4XMMNUL3/R94wha2UwnKSlnldexJdAlIf4hPD
7DjSuqKeXvfY2J1DrkVcoWaU7CeRxH4Eb2Vkhu1oss7CnDJCac0Fl7hPnHWhqE5u
JcsLS4vSmSGcSjuhAAGm6DXUh6QkzSFLyIJne37zuZKESqI+cn0ZEMkgrTSe1e7a
FIMC6TGkdEdPoQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:32 2025 by rpki-client