Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa
File:                     323830343a333961303a3a2f33322d3438203d3e20323636303430.roa (raw, json)
Hash identifier:          i+RPHMe8NN9mLMvDqLfuob8xrL8yh9C3EC4A6Tiarik=
Subject key identifier:   68:D3:19:AE:E4:96:4E:F2:A0:9E:F9:2E:76:E0:18:E8:5E:78:C2:34
Certificate issuer:       /CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
Certificate serial:       2894AC06BA695340549B5117CB99CA55AD6B666E
Authority key identifier: 4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa
Signing time:             Tue 04 Feb 2025 14:55:03 +0000
ROA not before:           Tue 04 Feb 2025 14:50:03 +0000
ROA not after:            Tue 03 Feb 2026 14:55:03 +0000
asID:                     266040
IP address blocks:        2804:39a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl
                          rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:94:ac:06:ba:69:53:40:54:9b:51:17:cb:99:ca:55:ad:6b:66:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EAEA4860A9C24CC747D00D453DD1C54366841FB
        Validity
            Not Before: Feb  4 14:50:03 2025 GMT
            Not After : Feb  3 14:55:03 2026 GMT
        Subject: CN=68D319AEE4964EF2A09EF92E76E018E85E78C234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:64:ce:d0:8c:1c:5c:68:a5:2c:f2:1f:3a:
                    4a:2d:62:1d:6e:1e:d9:4c:26:80:e7:23:2d:26:72:
                    ad:a7:9c:e2:19:5e:c2:c1:ca:ec:96:a3:ff:f2:6f:
                    39:41:bc:f1:50:b6:ba:1a:dd:fd:64:8a:02:e4:f9:
                    21:13:19:78:e6:e6:1b:80:e7:b8:1e:f3:67:99:a4:
                    6b:10:a2:33:88:8c:83:30:68:31:16:06:10:af:4d:
                    e1:d7:44:8c:1b:23:e7:dc:52:b0:6a:62:ae:92:26:
                    d8:21:08:d5:f8:c5:0f:1d:de:76:f7:ae:fd:c4:a6:
                    cb:83:23:24:ca:1c:19:13:78:36:7e:72:fe:d4:95:
                    07:73:15:3f:18:06:3a:60:5b:27:e2:85:4d:f8:86:
                    2e:ba:e7:54:10:84:97:0c:c3:41:c0:0d:76:31:6c:
                    ab:69:02:04:29:37:a9:d7:8a:7e:ab:8a:81:4f:ac:
                    8a:b2:1f:96:ab:e3:15:9b:8d:31:c3:d7:7c:d5:2f:
                    cc:c5:c9:e1:b2:f1:95:a3:b7:fc:41:3a:a1:16:66:
                    32:77:82:a2:06:f1:9f:9f:a6:73:2f:bc:92:d3:dc:
                    eb:49:6a:64:47:ba:91:97:ab:b4:d2:f2:f5:de:c8:
                    64:b3:1b:dd:6a:09:8f:8b:0c:1c:9f:45:a8:a9:f2:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:19:AE:E4:96:4E:F2:A0:9E:F9:2E:76:E0:18:E8:5E:78:C2:34
            X509v3 Authority Key Identifier:
                keyid:4E:AE:A4:86:0A:9C:24:CC:74:7D:00:D4:53:DD:1C:54:36:68:41:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/4EAEA4860A9C24CC747D00D453DD1C54366841FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EAEA4860A9C24CC747D00D453DD1C54366841FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/323830343a333961303a3a2f33322d3438203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:0b:96:33:e1:15:89:1d:08:c4:a4:1f:5d:d3:b6:45:b6:e0:
         55:80:b4:ac:47:84:ad:1d:5b:23:e0:18:f5:b7:00:03:65:b4:
         50:08:ba:35:0b:0d:20:81:07:57:f8:96:d9:32:14:f9:f5:d3:
         bc:7c:f0:69:72:b0:41:3d:63:0c:07:95:03:4e:b7:ee:59:0a:
         d2:32:2d:9c:96:17:23:1f:ca:69:2f:c8:6b:e3:db:ba:75:56:
         ca:c4:60:df:22:2d:ae:34:58:b6:88:ce:d6:ac:82:8b:41:3b:
         a5:81:9e:b6:4d:72:bc:b6:9b:64:1d:aa:56:8b:fd:ec:1f:5e:
         1f:ef:47:14:8a:1e:5c:39:e7:a0:db:90:82:63:bb:42:19:62:
         6e:93:d0:1d:13:a9:23:34:93:72:3b:d3:07:d5:4e:1e:4e:98:
         88:90:01:23:09:52:81:54:18:6c:ff:87:1b:56:6a:3f:c6:8c:
         f1:b3:c8:b2:ba:8d:c3:b7:b2:fc:b8:d4:ed:d0:5f:1f:85:28:
         f9:ad:8c:64:3c:e4:d7:ce:46:b8:d3:b8:5d:23:c2:f0:3a:e0:
         de:52:2d:55:df:61:5f:0b:27:19:f6:36:b6:b6:42:83:ac:0b:
         5c:31:90:b9:d0:f3:32:0a:4d:81:b2:d7:84:73:c8:d1:bb:a3:
         8d:b8:4c:45
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKJSsBrppU0BUm1EXy5nKVa1rZm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVBRUE0ODYwQTlDMjRDQzc0N0QwMEQ0NTNERDFDNTQz
NjY4NDFGQjAeFw0yNTAyMDQxNDUwMDNaFw0yNjAyMDMxNDU1MDNaMDMxMTAvBgNV
BAMTKDY4RDMxOUFFRTQ5NjRFRjJBMDlFRjkyRTc2RTAxOEU4NUU3OEMyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3GTO0IwcXGilLPIfOkotYh1u
HtlMJoDnIy0mcq2nnOIZXsLByuyWo//ybzlBvPFQtroa3f1kigLk+SETGXjm5huA
57ge82eZpGsQojOIjIMwaDEWBhCvTeHXRIwbI+fcUrBqYq6SJtghCNX4xQ8d3nb3
rv3EpsuDIyTKHBkTeDZ+cv7UlQdzFT8YBjpgWyfihU34hi6651QQhJcMw0HADXYx
bKtpAgQpN6nXin6rioFPrIqyH5ar4xWbjTHD13zVL8zFyeGy8ZWjt/xBOqEWZjJ3
gqIG8Z+fpnMvvJLT3OtJamRHupGXq7TS8vXeyGSzG91qCY+LDByfRaip8tNlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaNMZruSWTvKgnvkuduAY6F54wjQwHwYDVR0j
BBgwFoAUTq6khgqcJMx0fQDUU90cVDZoQfswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDR4RjNjU3h1NmM3bW9jdkNaeUpjakM5ZVpHYnkzTXpSd0gxNzJvdVJ3
UlEvMC80RUFFQTQ4NjBBOUMyNENDNzQ3RDAwRDQ1M0REMUM1NDM2Njg0MUZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQUVBNDg2MEE5QzI0Q0M3
NDdEMDBENDUzREQxQzU0MzY2ODQxRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0eEYzY1N4dTZjN21vY3ZDWnlKY2pDOWVaR2J5M016UndIMTcyb3VSd1JRLzAv
MzIzODMwMzQzYTMzMzk2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzAzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5oDANBgkqhkiG9w0BAQsFAAOCAQEAzAuWM+EV
iR0IxKQfXdO2RbbgVYC0rEeErR1bI+AY9bcAA2W0UAi6NQsNIIEHV/iW2TIU+fXT
vHzwaXKwQT1jDAeVA0637lkK0jItnJYXIx/KaS/Ia+PbunVWysRg3yItrjRYtojO
1qyCi0E7pYGetk1yvLabZB2qVov97B9eH+9HFIoeXDnnoNuQgmO7QhlibpPQHROp
IzSTcjvTB9VOHk6YiJABIwlSgVQYbP+HG1ZqP8aM8bPIsrqNw7ey/LjU7dBfH4Uo
+a2MZDzk185GuNO4XSPC8Drg3lItVd9hXwsnGfY2trZCg6wLXDGQudDzMgpNgbLX
hHPI0bujjbhMRQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:06 2025 by rpki-client