Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33362d3336203d3e20323635303136.roa
File:                     323830343a333137343a3a2f33362d3336203d3e20323635303136.roa (raw, json)
Hash identifier:          XUlskBv9CHhhhP5puGgWWbCRHVGr53E9uZTp03M7Sxw=
Subject key identifier:   EA:4B:AC:93:CC:45:75:F0:B1:7F:66:31:EF:A4:BE:0D:47:B4:8D:D0
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       39E732817FBC5D63174BF1969C6A6592FB14BAEA
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33362d3336203d3e20323635303136.roa
Signing time:             Wed 05 Mar 2025 19:00:29 +0000
ROA not before:           Wed 05 Mar 2025 18:55:29 +0000
ROA not after:            Wed 04 Mar 2026 19:00:29 +0000
asID:                     265016
IP address blocks:        2804:3174::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:32:81:7f:bc:5d:63:17:4b:f1:96:9c:6a:65:92:fb:14:ba:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Mar  5 18:55:29 2025 GMT
            Not After : Mar  4 19:00:29 2026 GMT
        Subject: CN=EA4BAC93CC4575F0B17F6631EFA4BE0D47B48DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:dd:1f:42:34:f3:14:c4:f2:e5:d7:58:06:
                    f2:d1:e6:e0:35:62:1f:cb:e0:c9:bc:07:29:da:ad:
                    b9:cf:15:1d:83:8e:7c:c0:12:bd:e3:63:79:80:aa:
                    2d:ab:02:e3:70:23:36:e0:a6:3c:bb:c6:c0:7a:ac:
                    5f:5c:b0:24:ff:b8:fa:d7:d7:d4:4e:89:0e:d5:72:
                    a5:c0:7c:0b:d7:35:42:32:e2:81:f4:b4:e7:4b:2a:
                    f7:c7:e8:b5:b5:3b:78:61:1a:63:23:50:38:60:bd:
                    7c:3c:8b:39:dc:f9:fa:47:79:2d:c9:2c:fa:07:49:
                    7f:80:df:7c:91:b2:f9:c4:6a:6a:2e:46:8b:ff:fc:
                    9c:85:3b:e4:59:4d:a2:57:e7:40:7b:81:19:af:3a:
                    ac:00:93:1a:9a:2f:c5:4b:ae:a1:bf:fd:be:6c:bd:
                    f2:a5:7d:7a:6c:4f:fb:80:de:c9:8c:33:3a:55:da:
                    cb:d3:98:c4:4f:41:9c:a9:75:1d:1d:bb:9d:30:bc:
                    f2:5a:ba:da:5f:78:f9:df:77:11:e1:46:d0:0d:36:
                    f7:e7:de:9c:83:f0:13:68:12:34:31:b4:b1:dd:62:
                    ff:dc:ae:77:d7:ca:65:02:98:99:64:65:3f:d1:78:
                    db:b4:05:70:65:1c:4d:83:f2:54:b7:6a:1f:25:d6:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4B:AC:93:CC:45:75:F0:B1:7F:66:31:EF:A4:BE:0D:47:B4:8D:D0
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33362d3336203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:fb:59:97:d2:79:e6:84:2d:8f:fc:43:d6:9f:24:96:12:
         43:43:29:69:95:ed:a6:b2:80:60:8e:ef:ac:04:e3:8c:b0:41:
         67:c7:f9:76:1e:9b:03:a6:ad:3f:67:60:5a:2e:0b:41:f2:04:
         d4:e7:f7:e3:2c:ea:c2:07:b5:ff:f7:a5:9f:23:a6:fe:c1:32:
         19:f0:b6:34:8f:ed:8a:90:37:c6:eb:0f:9d:4e:60:c1:fa:52:
         98:18:70:37:5f:3c:de:eb:75:e1:5b:1c:84:79:0c:eb:c4:a7:
         fb:f8:a5:15:25:a3:1d:cc:fe:cc:49:b8:5d:52:a5:9b:0d:f1:
         69:4c:ad:d2:fc:15:c4:54:bc:04:b5:c6:b6:d7:3a:c3:c5:10:
         5b:2f:86:35:19:92:20:a4:83:84:ec:a5:2b:d5:77:7f:7a:2f:
         cc:cb:97:10:ee:40:12:4a:fa:bc:30:ad:d1:86:ed:8f:ca:26:
         d4:46:3d:d8:5b:eb:18:e8:78:aa:4a:f1:a2:74:f6:09:d2:25:
         82:01:a7:ab:39:a0:a4:a0:91:f0:07:43:e3:95:93:9d:81:e6:
         f2:67:97:ce:4b:1a:7f:b3:51:ab:5e:4e:5f:14:7f:0f:59:dc:
         6c:01:48:75:83:2e:10:63:aa:10:cd:4b:71:a6:34:0c:d7:29:
         dd:44:87:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOecygX+8XWMXS/GWnGplkvsUuuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFCODg0QjcwODIzRjRGQkQ2RDVBNkJDMzBGMjRFNjNE
MEIwQ0U1NjAeFw0yNTAzMDUxODU1MjlaFw0yNjAzMDQxOTAwMjlaMDMxMTAvBgNV
BAMTKEVBNEJBQzkzQ0M0NTc1RjBCMTdGNjYzMUVGQTRCRTBENDdCNDhERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Kt0fQjTzFMTy5ddYBvLR5uA1
Yh/L4Mm8BynarbnPFR2DjnzAEr3jY3mAqi2rAuNwIzbgpjy7xsB6rF9csCT/uPrX
19ROiQ7VcqXAfAvXNUIy4oH0tOdLKvfH6LW1O3hhGmMjUDhgvXw8iznc+fpHeS3J
LPoHSX+A33yRsvnEamouRov//JyFO+RZTaJX50B7gRmvOqwAkxqaL8VLrqG//b5s
vfKlfXpsT/uA3smMMzpV2svTmMRPQZypdR0du50wvPJautpfePnfdxHhRtANNvfn
3pyD8BNoEjQxtLHdYv/crnfXymUCmJlkZT/ReNu0BXBlHE2D8lS3ah8l1nzjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6kusk8xFdfCxf2Yx76S+DUe0jdAwHwYDVR0j
BBgwFoAU6riEtwgj9PvW1aa8MPJOY9CwzlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV
WGQvMi9FQUI4ODRCNzA4MjNGNEZCRDZENUE2QkMzMEYyNEU2M0QwQjBDRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQjg4NEI3MDgyM0Y0RkJE
NkQ1QTZCQzMwRjI0RTYzRDBCMENFNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHcmNCSGVmZkhNdjVSbThvN0YyWEozZExCdEJaOUprNThKY2UxYmhmVVhkLzIv
MzIzODMwMzQzYTMzMzEzNzM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM1
MzAzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQxdAAwDQYJKoZIhvcNAQELBQADggEBAKuP+1mX
0nnmhC2P/EPWnySWEkNDKWmV7aaygGCO76wE44ywQWfH+XYemwOmrT9nYFouC0Hy
BNTn9+Ms6sIHtf/3pZ8jpv7BMhnwtjSP7YqQN8brD51OYMH6UpgYcDdfPN7rdeFb
HIR5DOvEp/v4pRUlox3M/sxJuF1SpZsN8WlMrdL8FcRUvAS1xrbXOsPFEFsvhjUZ
kiCkg4TspSvVd396L8zLlxDuQBJK+rwwrdGG7Y/KJtRGPdhb6xjoeKpK8aJ09gnS
JYIBp6s5oKSgkfAHQ+OVk52B5vJnl85LGn+zUateTl8Ufw9Z3GwBSHWDLhBjqhDN
S3GmNAzXKd1Eh5I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:26 2025 by rpki-client