Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa
File:                     323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa (raw, json)
Hash identifier:          GJ4RI/9NV+FMnbpxwB5EjvV2madXLeV39Z3hACwP++c=
Subject key identifier:   8F:97:BB:D1:F7:2D:97:1B:96:55:0E:7E:22:EF:CC:FA:41:16:B5:CB
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       45E483CDAEC3686AF9A21CC51785CC51A345ED4F
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 16:41:43 +0000
ROA not before:           Wed 26 Feb 2025 16:36:43 +0000
ROA not after:            Wed 25 Feb 2026 16:41:43 +0000
asID:                     264496
IP address blocks:        2804:2084:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e4:83:cd:ae:c3:68:6a:f9:a2:1c:c5:17:85:cc:51:a3:45:ed:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 16:36:43 2025 GMT
            Not After : Feb 25 16:41:43 2026 GMT
        Subject: CN=8F97BBD1F72D971B96550E7E22EFCCFA4116B5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c5:a0:dd:1a:cc:12:7a:e9:be:0a:35:c1:61:
                    3f:d8:6a:e1:b5:f6:7e:6e:dc:ab:43:34:eb:67:36:
                    42:4c:cd:b1:00:3e:84:0b:52:1a:4c:01:c3:5e:79:
                    83:ab:ed:d9:18:d2:04:e8:eb:b2:de:72:b0:eb:8f:
                    73:dc:0a:ee:7c:95:40:c7:98:68:5b:5f:eb:8c:cd:
                    09:b2:f2:f8:4e:87:60:81:54:6a:13:87:72:94:e3:
                    9b:dc:b1:3f:0f:64:7f:ae:55:a5:41:23:cf:07:38:
                    6e:bf:a1:3f:d5:fd:36:fd:6d:49:3c:9c:4e:5c:7a:
                    b1:89:91:2d:2f:b6:45:38:5b:d7:99:a6:0f:73:d1:
                    e7:da:8f:5c:e4:4f:c2:c0:ce:93:63:30:80:fb:e9:
                    de:0c:f4:cf:84:ff:08:68:18:69:ba:f9:dd:36:c3:
                    88:f5:49:cc:24:51:bf:88:34:84:d4:6f:d7:60:45:
                    b2:96:26:bc:f2:4e:dd:78:8c:d2:b2:df:ff:1a:30:
                    fd:e6:3c:fa:25:aa:90:f4:26:f0:7a:98:06:00:ec:
                    a2:d4:78:cf:30:65:82:04:2c:90:6e:c8:25:73:42:
                    dd:f4:fc:f0:a7:a7:67:cc:e5:7b:82:38:42:41:58:
                    2d:37:ef:7a:df:dc:8b:5d:d5:12:3d:10:11:79:f6:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:BB:D1:F7:2D:97:1B:96:55:0E:7E:22:EF:CC:FA:41:16:B5:CB
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/323830343a323038343a313030303a3a2f33362d3336203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2084:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:51:ec:01:e6:24:5c:e1:59:ca:ea:22:d9:be:20:ad:bf:
         80:41:ac:ea:b2:74:43:59:cd:04:6b:6b:b8:4b:3e:16:0e:4a:
         10:e4:62:eb:97:96:22:72:b6:b8:0c:60:e8:2b:56:a5:cd:2e:
         22:9a:16:a8:ac:f7:78:e4:da:7d:3f:9e:f0:d1:26:42:53:cf:
         0c:b5:38:49:7e:64:8d:33:49:21:58:7c:66:3b:3e:52:a3:99:
         66:47:5a:e1:3c:f8:91:07:73:d1:6a:99:00:d0:ff:f7:9d:9d:
         43:8f:79:25:dd:ca:f7:77:fc:b8:27:2d:e7:d5:25:d7:bb:0e:
         ca:d9:e9:c1:d0:3b:2b:c9:bd:eb:3c:ff:eb:69:ab:2b:df:fd:
         43:bd:16:e4:d8:70:a9:0a:94:26:b6:b5:ff:38:d8:b5:03:dc:
         93:f1:c6:1c:fd:18:de:d3:ec:90:e3:cd:80:2a:36:f6:98:d3:
         fc:2c:d0:46:62:06:4d:5f:a9:8b:71:25:ec:5f:1e:b2:00:32:
         fe:e9:63:13:21:94:41:ff:75:43:57:c6:b0:78:45:1f:c3:80:
         96:5f:d1:72:bc:1b:71:1c:ba:ec:ae:2f:14:af:0b:60:4e:cb:
         f4:53:23:76:56:59:df:af:71:42:b0:73:ef:c1:1e:c1:98:59:
         a0:c4:b0:80
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUReSDza7DaGr5ohzFF4XMUaNF7U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTAyMjYxNjM2NDNaFw0yNjAyMjUxNjQxNDNaMDMxMTAvBgNV
BAMTKDhGOTdCQkQxRjcyRDk3MUI5NjU1MEU3RTIyRUZDQ0ZBNDExNkI1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwxaDdGswSeum+CjXBYT/YauG1
9n5u3KtDNOtnNkJMzbEAPoQLUhpMAcNeeYOr7dkY0gTo67LecrDrj3PcCu58lUDH
mGhbX+uMzQmy8vhOh2CBVGoTh3KU45vcsT8PZH+uVaVBI88HOG6/oT/V/Tb9bUk8
nE5cerGJkS0vtkU4W9eZpg9z0efaj1zkT8LAzpNjMID76d4M9M+E/whoGGm6+d02
w4j1ScwkUb+INITUb9dgRbKWJrzyTt14jNKy3/8aMP3mPPolqpD0JvB6mAYA7KLU
eM8wZYIELJBuyCVzQt30/PCnp2fM5XuCOEJBWC0373rf3Itd1RI9EBF59nahAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj5e70fctlxuWVQ5+Iu/M+kEWtcswHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzIzODMwMzQzYTMyMzAzODM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEIIQQMA0GCSqGSIb3DQEBCwUA
A4IBAQB3ylHsAeYkXOFZyuoi2b4grb+AQazqsnRDWc0Ea2u4Sz4WDkoQ5GLrl5Yi
cra4DGDoK1alzS4imhaorPd45Np9P57w0SZCU88MtThJfmSNM0khWHxmOz5So5lm
R1rhPPiRB3PRapkA0P/3nZ1Dj3kl3cr3d/y4Jy3n1SXXuw7K2enB0Dsryb3rPP/r
aasr3/1DvRbk2HCpCpQmtrX/ONi1A9yT8cYc/Rje0+yQ482AKjb2mNP8LNBGYgZN
X6mLcSXsXx6yADL+6WMTIZRB/3VDV8aweEUfw4CWX9FyvBtxHLrsri8UrwtgTsv0
UyN2Vlnfr3FCsHPvwR7BmFmgxLCA
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:27 2025 by rpki-client