Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
File:                     323830343a376561343a3a2f33332d3333203d3e20323731363337.roa (raw, json)
Hash identifier:          8wdbXwaYWkPW8qY0h+g5OFZiVEEka1FbBC1v1tHRvSs=
Subject key identifier:   A5:70:7A:DC:F6:06:91:67:98:27:CF:A0:C5:4B:7D:45:38:16:24:6F
Certificate issuer:       /CN=777AF1144189B88FDF022922157DD65E18F5A179
Certificate serial:       1307AB7A7DFB6BE78BD8EF4C10FB387B6337D9A2
Authority key identifier: 77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa
Signing time:             Thu 06 Mar 2025 12:00:08 +0000
ROA not before:           Thu 06 Mar 2025 11:55:08 +0000
ROA not after:            Thu 05 Mar 2026 12:00:08 +0000
asID:                     271637
IP address blocks:        2804:7ea4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl
                          rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:07:ab:7a:7d:fb:6b:e7:8b:d8:ef:4c:10:fb:38:7b:63:37:d9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777AF1144189B88FDF022922157DD65E18F5A179
        Validity
            Not Before: Mar  6 11:55:08 2025 GMT
            Not After : Mar  5 12:00:08 2026 GMT
        Subject: CN=A5707ADCF60691679827CFA0C54B7D453816246F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:98:bb:b0:2b:c1:96:f8:4f:98:44:1c:4d:
                    7d:02:f2:c8:b3:eb:76:a9:3d:7a:2f:29:5e:43:fb:
                    53:d9:3c:ca:17:54:c0:f0:d8:f0:20:1b:3b:6f:5a:
                    20:15:5f:ca:4d:36:3c:a6:0c:35:87:17:6f:8b:47:
                    ab:70:f6:a0:bd:2b:27:07:99:2c:9e:4d:e5:8f:f9:
                    35:fd:ae:de:ee:e5:cd:61:96:30:ed:3f:c8:9f:60:
                    49:1a:2e:ba:ff:00:fb:b2:f3:e9:25:80:8a:23:9f:
                    7e:fd:11:e7:23:fb:da:89:a4:36:87:52:0d:05:5c:
                    ba:0f:55:55:4b:45:ee:f6:5f:aa:c3:a6:26:f6:b3:
                    fe:e1:0f:f3:68:22:fb:5d:77:8b:74:db:90:f2:f8:
                    6c:48:c1:c0:f0:d3:92:51:a7:d8:84:95:2c:c6:33:
                    e8:6f:c0:44:77:3b:6f:26:ca:44:8b:35:47:3b:74:
                    ca:02:2e:c6:a6:43:a9:d2:ed:b6:48:30:1b:64:80:
                    8c:62:e4:3a:fa:dc:91:18:b9:ea:04:28:3c:d4:2f:
                    d8:e6:6e:64:03:d8:fb:b8:e2:3f:83:6d:6f:53:a9:
                    b3:7d:51:3d:ae:f6:0a:3d:e7:ce:82:69:57:f1:5b:
                    58:40:7b:7e:4c:39:af:7f:86:1c:ca:84:82:03:9b:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:7A:DC:F6:06:91:67:98:27:CF:A0:C5:4B:7D:45:38:16:24:6F
            X509v3 Authority Key Identifier:
                keyid:77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/323830343a376561343a3a2f33332d3333203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ea4::/33

    Signature Algorithm: sha256WithRSAEncryption
         12:67:97:0b:ff:a5:46:c1:9c:6a:d2:ff:9d:d7:f0:d6:0f:07:
         ce:bd:69:ad:bc:c2:54:fc:c5:2e:dc:ed:58:ee:fb:0f:94:c1:
         88:0d:80:03:dc:fa:a1:9c:05:f3:c1:36:8c:63:66:31:31:02:
         bd:43:84:82:da:85:3f:81:5b:f8:3c:3e:75:93:f3:a5:00:5a:
         09:79:98:e9:63:c1:e8:b5:95:b7:ac:9d:32:ea:91:61:04:be:
         37:38:b4:1e:3c:cd:0f:be:73:cb:32:32:8d:f7:93:d4:0b:41:
         55:8a:45:79:ba:79:27:d0:24:5d:32:7a:c5:f8:bd:61:cb:36:
         c5:ad:81:9b:41:d1:e7:fa:f0:41:4f:3e:b3:2e:2b:1a:43:17:
         dc:95:7e:57:d5:ce:89:00:7e:71:61:b1:78:b9:b0:c7:dc:bc:
         b3:51:25:92:5c:f9:c2:78:57:17:0a:3f:15:5d:79:c3:d6:32:
         e1:31:d4:73:46:f7:9a:0a:84:e8:94:7e:83:2e:e5:33:49:ba:
         f5:5f:2e:3b:b4:00:2b:f6:17:33:4a:6d:0f:72:6a:c0:0c:47:
         a2:03:0e:df:cd:32:18:28:1e:c7:96:6a:ec:a2:99:cf:8b:1e:
         01:61:d8:56:6e:c4:e9:d8:06:00:c5:5f:2f:41:b0:60:7d:4e:
         d2:27:31:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEweren37a+eL2O9MEPs4e2M32aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3QUYxMTQ0MTg5Qjg4RkRGMDIyOTIyMTU3REQ2NUUx
OEY1QTE3OTAeFw0yNTAzMDYxMTU1MDhaFw0yNjAzMDUxMjAwMDhaMDMxMTAvBgNV
BAMTKEE1NzA3QURDRjYwNjkxNjc5ODI3Q0ZBMEM1NEI3RDQ1MzgxNjI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3Ji7sCvBlvhPmEQcTX0C8siz
63apPXovKV5D+1PZPMoXVMDw2PAgGztvWiAVX8pNNjymDDWHF2+LR6tw9qC9KycH
mSyeTeWP+TX9rt7u5c1hljDtP8ifYEkaLrr/APuy8+klgIojn379Eecj+9qJpDaH
Ug0FXLoPVVVLRe72X6rDpib2s/7hD/NoIvtdd4t025Dy+GxIwcDw05JRp9iElSzG
M+hvwER3O28mykSLNUc7dMoCLsamQ6nS7bZIMBtkgIxi5Dr63JEYueoEKDzUL9jm
bmQD2Pu44j+DbW9TqbN9UT2u9go9586CaVfxW1hAe35MOa9/hhzKhIIDm+VRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpXB63PYGkWeYJ8+gxUt9RTgWJG8wHwYDVR0j
BBgwFoAUd3rxFEGJuI/fAikiFX3WXhj1oXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2h0dDNIUnJ6VnlaYVl4bXliR3F3eWZZeGd6V28xWW1wa3ZHRFhDbVZm
TDQvMS83NzdBRjExNDQxODlCODhGREYwMjI5MjIxNTdERDY1RTE4RjVBMTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3N0FGMTE0NDE4OUI4OEZE
RjAyMjkyMjE1N0RENjVFMThGNUExNzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dodHQzSFJyelZ5WmFZeG15Ykdxd3lmWXhneldvMVltcGt2R0RYQ21WZkw0LzEv
MzIzODMwMzQzYTM3NjU2MTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR+pAAwDQYJKoZIhvcNAQELBQADggEBABJnlwv/
pUbBnGrS/53X8NYPB869aa28wlT8xS7c7Vju+w+UwYgNgAPc+qGcBfPBNoxjZjEx
Ar1DhILahT+BW/g8PnWT86UAWgl5mOljwei1lbesnTLqkWEEvjc4tB48zQ++c8sy
Mo33k9QLQVWKRXm6eSfQJF0yesX4vWHLNsWtgZtB0ef68EFPPrMuKxpDF9yVflfV
zokAfnFhsXi5sMfcvLNRJZJc+cJ4VxcKPxVdecPWMuEx1HNG95oKhOiUfoMu5TNJ
uvVfLju0ACv2FzNKbQ9yasAMR6IDDt/NMhgoHseWauyimc+LHgFh2FZuxOnYBgDF
Xy9BsGB9TtInMRo=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:06 2025 by rpki-client