Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa
File:                     323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa (raw, json)
Hash identifier:          q5ZLMfONHtrzh7YiOXVkNWb8WyHCyM48+StJiIlS7z0=
Subject key identifier:   30:FF:5E:EF:4C:52:EE:DC:DA:01:96:1B:26:04:79:83:89:F8:9F:81
Certificate issuer:       /CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
Certificate serial:       4C8E1262A51649F3FC5C1B3871691614E141064E
Authority key identifier: CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa
Signing time:             Tue 18 Mar 2025 00:01:21 +0000
ROA not before:           Mon 17 Mar 2025 23:56:21 +0000
ROA not after:            Tue 17 Mar 2026 00:01:21 +0000
asID:                     271363
IP address blocks:        2804:7a4c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl
                          rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8e:12:62:a5:16:49:f3:fc:5c:1b:38:71:69:16:14:e1:41:06:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8B5B9F537D71AAF7422F603CAD3715D99F65F2
        Validity
            Not Before: Mar 17 23:56:21 2025 GMT
            Not After : Mar 17 00:01:21 2026 GMT
        Subject: CN=30FF5EEF4C52EEDCDA01961B2604798389F89F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6f:98:3e:d7:30:a8:82:96:32:b9:d7:38:81:
                    77:0c:7d:cf:7b:89:af:99:ca:8f:a9:da:1e:88:5d:
                    7c:c5:11:21:61:a3:9c:e9:da:f5:60:ff:48:31:fe:
                    44:14:eb:0a:c9:6a:12:a8:e7:ec:91:34:bd:34:c1:
                    58:21:7f:32:d3:bc:cd:d8:ca:69:cb:50:77:7e:e0:
                    39:a8:97:c0:95:28:35:67:f7:f4:8f:09:4e:c7:34:
                    2a:1a:3b:09:e5:cc:d8:6d:8d:fe:9a:c1:74:03:8b:
                    0d:8b:14:dd:a5:ec:83:7a:43:5a:1f:7a:2a:c3:e3:
                    d8:7d:c5:aa:c6:55:07:95:b0:69:a6:33:7e:49:4e:
                    1b:c5:84:e3:b4:25:31:4e:10:6b:15:db:7c:cd:be:
                    20:05:b1:65:cc:55:29:3d:66:09:70:87:c2:d9:f9:
                    a0:c6:a4:55:85:df:fe:4a:35:f3:c5:fa:1e:6f:8c:
                    1d:75:d3:a4:1e:25:4d:9f:02:1c:65:7d:a5:6e:fc:
                    ae:0d:77:16:9d:3d:61:87:92:61:4f:23:a6:bd:5f:
                    21:57:9a:15:41:ca:6b:18:8c:8f:d5:10:54:c2:38:
                    fb:9e:b5:ba:16:48:3b:c6:61:b3:d5:57:8d:f1:fd:
                    29:b2:5e:51:a7:71:0f:50:bd:9d:6e:32:6f:93:c9:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FF:5E:EF:4C:52:EE:DC:DA:01:96:1B:26:04:79:83:89:F8:9F:81
            X509v3 Authority Key Identifier:
                keyid:CB:8B:5B:9F:53:7D:71:AA:F7:42:2F:60:3C:AD:37:15:D9:9F:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB8B5B9F537D71AAF7422F603CAD3715D99F65F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoD9d75DyMEocGkKALy93pPyV7Hh2Fy4FeuPtyFJmNmn/0/323830343a376134633a313030303a3a2f33362d3336203d3e20323731333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:05:42:44:04:be:ed:48:75:91:91:ba:32:b5:08:07:b8:
         86:98:fc:a7:c5:4b:5c:33:bc:d8:19:ff:86:75:f6:f5:37:a7:
         d3:6f:58:85:8f:2f:f5:0d:58:66:d3:09:c9:cb:5c:a2:52:d4:
         61:62:db:af:ea:3d:22:1e:bc:af:ff:86:26:a7:68:bf:12:38:
         3e:8f:0f:d5:b7:d8:04:fc:12:5c:3a:dc:4b:fc:0c:9c:2e:46:
         c4:8f:f1:a3:bd:81:75:67:48:ed:90:b6:57:76:00:d8:b2:37:
         c4:0c:ed:7a:de:f5:f3:38:6c:ce:ac:06:a6:c5:8d:53:d0:a7:
         54:ee:13:ab:29:1e:df:cc:25:12:fe:05:88:1e:cc:2e:7d:ee:
         77:03:91:46:77:d8:26:53:94:97:09:3e:e8:de:ec:f7:56:19:
         49:f8:68:4a:a5:e6:63:8b:e0:0b:26:13:29:60:ce:57:d2:10:
         5b:84:96:62:cd:65:72:25:01:54:44:89:6c:ef:f1:2f:84:8b:
         aa:d4:c8:92:44:85:b3:f7:f1:6e:77:15:ad:8c:f9:ba:7e:77:
         a9:ea:5d:68:c5:48:9e:9c:8e:d6:79:13:58:c0:eb:30:b9:da:
         c7:8f:3a:9a:a7:33:62:b1:56:f3:95:8b:1b:ae:e7:e0:54:bb:
         fc:f7:cf:2b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTI4SYqUWSfP8XBs4cWkWFOFBBk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4QjVCOUY1MzdENzFBQUY3NDIyRjYwM0NBRDM3MTVE
OTlGNjVGMjAeFw0yNTAzMTcyMzU2MjFaFw0yNjAzMTcwMDAxMjFaMDMxMTAvBgNV
BAMTKDMwRkY1RUVGNEM1MkVFRENEQTAxOTYxQjI2MDQ3OTgzODlGODlGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzb5g+1zCogpYyudc4gXcMfc97
ia+Zyo+p2h6IXXzFESFho5zp2vVg/0gx/kQU6wrJahKo5+yRNL00wVghfzLTvM3Y
ymnLUHd+4Dmol8CVKDVn9/SPCU7HNCoaOwnlzNhtjf6awXQDiw2LFN2l7IN6Q1of
eirD49h9xarGVQeVsGmmM35JThvFhOO0JTFOEGsV23zNviAFsWXMVSk9Zglwh8LZ
+aDGpFWF3/5KNfPF+h5vjB1106QeJU2fAhxlfaVu/K4NdxadPWGHkmFPI6a9XyFX
mhVBymsYjI/VEFTCOPuetboWSDvGYbPVV43x/SmyXlGncQ9QvZ1uMm+TyeFPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMP9e70xS7tzaAZYbJgR5g4n4n4EwHwYDVR0j
BBgwFoAUy4tbn1N9car3Qi9gPK03FdmfZfIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29EOWQ3NUR5TUVvY0drS0FMeTkzcFB5VjdIaDJGeTRGZXVQdHlGSm1O
bW4vMC9DQjhCNUI5RjUzN0Q3MUFBRjc0MjJGNjAzQ0FEMzcxNUQ5OUY2NUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOEI1QjlGNTM3RDcxQUFG
NzQyMkY2MDNDQUQzNzE1RDk5RjY1RjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvRDlkNzVEeU1Fb2NHa0tBTHk5M3BQeVY3SGgyRnk0RmV1UHR5RkptTm1uLzAv
MzIzODMwMzQzYTM3NjEzNDYzM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEekwQMA0GCSqGSIb3DQEBCwUA
A4IBAQAqsgVCRAS+7Uh1kZG6MrUIB7iGmPynxUtcM7zYGf+Gdfb1N6fTb1iFjy/1
DVhm0wnJy1yiUtRhYtuv6j0iHryv/4Ymp2i/Ejg+jw/Vt9gE/BJcOtxL/AycLkbE
j/GjvYF1Z0jtkLZXdgDYsjfEDO163vXzOGzOrAamxY1T0KdU7hOrKR7fzCUS/gWI
Hswufe53A5FGd9gmU5SXCT7o3uz3VhlJ+GhKpeZji+ALJhMpYM5X0hBbhJZizWVy
JQFURIls7/EvhIuq1MiSRIWz9/FudxWtjPm6fnep6l1oxUienI7WeRNYwOswudrH
jzqapzNisVbzlYsbrufgVLv8988r
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:45:18 2025 by rpki-client