Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa
File:                     323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (raw, json)
Hash identifier:          F8C1M9ExsKqvOiXN93YJ+GMs5GM54Va82EHzWjYNmOI=
Subject key identifier:   83:3F:5D:C9:0D:0B:01:C1:4D:BA:91:19:5D:BC:1D:FF:6D:11:39:F2
Certificate issuer:       /CN=D4B92897692C4F611B738C6728923C318CA5378D
Certificate serial:       7859BEFE60C8743BB88E9E7D592F0CAE1E99F225
Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa
Signing time:             Thu 06 Mar 2025 00:57:46 +0000
ROA not before:           Thu 06 Mar 2025 00:52:46 +0000
ROA not after:            Thu 05 Mar 2026 00:57:46 +0000
asID:                     273654
IP address blocks:        2804:8a34::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl
                          rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 23:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:59:be:fe:60:c8:74:3b:b8:8e:9e:7d:59:2f:0c:ae:1e:99:f2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D
        Validity
            Not Before: Mar  6 00:52:46 2025 GMT
            Not After : Mar  5 00:57:46 2026 GMT
        Subject: CN=833F5DC90D0B01C14DBA91195DBC1DFF6D1139F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:90:63:ef:33:04:a7:32:7a:6b:b2:c1:af:
                    2a:8b:63:90:31:49:d8:a4:f6:2c:63:56:48:89:d7:
                    19:cb:bb:53:e0:27:9d:c2:6e:47:12:f8:64:48:91:
                    58:9d:38:8e:7f:29:de:31:9d:e3:cf:06:45:49:4d:
                    8f:58:a6:79:5f:09:d4:3d:c8:10:e2:47:20:59:79:
                    9a:76:0a:4b:5c:57:56:ad:5b:ee:bb:aa:5c:97:0b:
                    be:40:ec:1a:75:91:87:d3:9e:9e:87:25:d2:2e:73:
                    a5:54:1f:9f:58:8a:19:84:d9:34:3b:35:3c:39:b8:
                    b9:fb:4a:6d:f2:d3:c7:d3:a8:76:db:a9:96:79:85:
                    ed:21:33:9d:cc:33:dc:a9:31:0b:11:2a:d0:73:ef:
                    f3:d8:7e:32:4c:c3:16:db:25:1a:ec:b4:df:1e:ad:
                    a1:1d:b8:fd:ea:66:a7:d9:c1:d7:a9:9b:98:43:bc:
                    05:ca:38:0c:10:05:e9:0d:f9:3b:9b:02:f4:9f:ee:
                    34:84:e8:64:5f:25:77:f9:d2:30:fe:97:09:b7:65:
                    fa:92:8c:61:48:08:95:dc:e9:b3:be:3d:ef:fe:3c:
                    62:26:40:e1:2e:a8:53:bc:02:01:7d:cc:de:7d:a3:
                    01:88:11:68:ab:37:b7:82:02:2d:10:06:cf:5a:05:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:5D:C9:0D:0B:01:C1:4D:BA:91:19:5D:BC:1D:FF:6D:11:39:F2
            X509v3 Authority Key Identifier:
                keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/323830343a386133343a3a2f33382d3338203d3e20323733363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34::/38

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:bb:02:66:e5:75:72:c4:90:a3:fb:22:99:f9:7f:c3:4f:
         2a:95:98:21:d9:5b:3e:c5:9d:ee:e0:d3:0d:17:ab:40:13:29:
         1f:ea:8f:c0:a8:55:df:d1:7a:37:e8:ae:26:81:95:a8:53:6e:
         86:fb:4c:eb:43:d4:22:eb:34:65:60:70:c5:94:17:af:5e:99:
         fe:4d:5a:91:4c:4a:14:14:6d:2c:b6:f9:0a:4a:3f:b9:3a:5f:
         a2:9f:52:d6:91:70:0d:f0:e8:e6:7a:ee:8c:ef:e2:31:c6:04:
         6e:dc:bc:d1:25:b2:bc:c0:12:b1:2d:85:bc:c7:7e:41:56:ba:
         aa:92:d7:ad:5e:28:16:90:70:92:04:5b:f9:b7:3f:aa:f1:4a:
         40:f2:60:66:48:f1:20:87:ce:4b:e9:de:d8:fc:b3:d2:4c:55:
         92:5e:22:26:1a:6f:33:3b:5a:e1:35:23:e0:78:b3:e6:e9:49:
         ba:36:35:14:a0:5e:82:3c:a1:01:5e:9c:1a:0a:94:0d:f5:39:
         fe:5b:4d:e2:38:16:c3:fe:4f:4c:97:eb:ca:98:d8:69:42:93:
         8e:07:b6:55:d6:21:85:83:31:6f:70:dc:44:25:75:1d:f1:e0:
         50:a5:a7:8d:72:eb:c5:02:b1:2f:c0:71:3a:df:74:43:d6:04:
         a8:ff:ea:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeFm+/mDIdDu4jp59WS8Mrh6Z8iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRCOTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4
Q0E1Mzc4RDAeFw0yNTAzMDYwMDUyNDZaFw0yNjAzMDUwMDU3NDZaMDMxMTAvBgNV
BAMTKDgzM0Y1REM5MEQwQjAxQzE0REJBOTExOTVEQkMxREZGNkQxMTM5RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNpBj7zMEpzJ6a7LBryqLY5Ax
Sdik9ixjVkiJ1xnLu1PgJ53CbkcS+GRIkVidOI5/Kd4xnePPBkVJTY9YpnlfCdQ9
yBDiRyBZeZp2CktcV1atW+67qlyXC75A7Bp1kYfTnp6HJdIuc6VUH59YihmE2TQ7
NTw5uLn7Sm3y08fTqHbbqZZ5he0hM53MM9ypMQsRKtBz7/PYfjJMwxbbJRrstN8e
raEduP3qZqfZwdepm5hDvAXKOAwQBekN+TubAvSf7jSE6GRfJXf50jD+lwm3ZfqS
jGFICJXc6bO+Pe/+PGImQOEuqFO8AgF9zN59owGIEWirN7eCAi0QBs9aBQIrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgz9dyQ0LAcFNupEZXbwd/20ROfIwHwYDVR0j
BBgwFoAU1Lkol2ksT2Ebc4xnKJI8MYylN40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6
ZzMvMS9ENEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QjkyODk3NjkyQzRGNjEx
QjczOEM2NzI4OTIzQzMxOENBNTM3OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dobnFCaEVNaFJOU1Z5aHZjS25DY2plNHVvakQxRUxwd1RkRFdlYk1IemczLzEv
MzIzODMwMzQzYTM4NjEzMzM0M2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIzNzMz
MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYCKASKNAAwDQYJKoZIhvcNAQELBQADggEBAJw3uwJm
5XVyxJCj+yKZ+X/DTyqVmCHZWz7Fne7g0w0Xq0ATKR/qj8CoVd/RejforiaBlahT
bob7TOtD1CLrNGVgcMWUF69emf5NWpFMShQUbSy2+QpKP7k6X6KfUtaRcA3w6OZ6
7ozv4jHGBG7cvNElsrzAErEthbzHfkFWuqqS161eKBaQcJIEW/m3P6rxSkDyYGZI
8SCHzkvp3tj8s9JMVZJeIiYabzM7WuE1I+B4s+bpSbo2NRSgXoI8oQFenBoKlA31
Of5bTeI4FsP+T0yX68qY2GlCk44HtlXWIYWDMW9w3EQldR3x4FClp41y68UCsS/A
cTrfdEPWBKj/6go=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:23:28 2025 by rpki-client