Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/323830343a313437383a3a2f33322d3438203d3e20323633333332.roa
File:                     323830343a313437383a3a2f33322d3438203d3e20323633333332.roa (raw, json)
Hash identifier:          qysovmzvgdL2y5g84WqCqWCD/W5wUzH/Lm3JWvovoeY=
Subject key identifier:   63:FA:76:08:14:19:32:67:F8:E6:3C:1D:88:99:9E:EC:11:39:F7:63
Certificate issuer:       /CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
Certificate serial:       481817A662916066A91EFE087075FD7F61C24117
Authority key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/323830343a313437383a3a2f33322d3438203d3e20323633333332.roa
Signing time:             Tue 18 Mar 2025 19:41:16 +0000
ROA not before:           Tue 18 Mar 2025 19:36:16 +0000
ROA not after:            Tue 17 Mar 2026 19:41:16 +0000
asID:                     263332
IP address blocks:        2804:1478::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl
                          rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:17:a6:62:91:60:66:a9:1e:fe:08:70:75:fd:7f:61:c2:41:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
        Validity
            Not Before: Mar 18 19:36:16 2025 GMT
            Not After : Mar 17 19:41:16 2026 GMT
        Subject: CN=63FA760814193267F8E63C1D88999EEC1139F763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:4a:9e:f0:cd:e4:96:a7:ba:8c:5f:e6:ad:
                    30:63:3f:a7:ae:ad:75:a5:af:1d:aa:48:3f:43:f5:
                    c6:cf:fd:7f:65:ee:94:22:a3:9b:4e:ec:fb:80:40:
                    c7:07:fd:0b:15:b6:19:33:5b:b1:5f:fc:01:95:4e:
                    6b:13:ba:68:07:19:cd:e8:23:f6:7e:c2:05:93:39:
                    f4:01:67:37:c5:32:90:51:93:59:e5:18:f4:a6:75:
                    dd:e4:ed:f0:71:ae:fd:6f:42:b2:52:61:a4:c0:cc:
                    f9:99:6c:96:37:7a:81:4d:18:53:e4:12:77:b1:e8:
                    7d:f9:a0:51:30:3d:af:7a:36:57:1c:50:c6:55:e9:
                    5f:c9:e1:b8:1b:10:df:d8:c1:91:0c:e6:54:50:56:
                    86:22:95:10:76:a4:56:9d:4b:1f:6a:5a:fb:d1:0a:
                    bb:cb:7a:a5:1c:6c:97:5b:34:be:d8:ab:93:39:98:
                    ab:53:93:10:fc:b2:a3:6e:fe:45:8e:9f:1a:4b:59:
                    09:97:6f:3d:87:48:fd:69:96:ff:92:f5:ab:39:ec:
                    01:5b:2e:6f:a1:d0:f1:e6:5b:48:fc:55:a5:a8:b2:
                    99:fe:b0:92:4c:f4:43:db:71:cc:e6:19:1a:df:25:
                    d2:2c:e0:9c:a1:b6:44:52:c8:9c:0c:41:52:fa:19:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FA:76:08:14:19:32:67:F8:E6:3C:1D:88:99:9E:EC:11:39:F7:63
            X509v3 Authority Key Identifier:
                keyid:DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/323830343a313437383a3a2f33322d3438203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1478::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ee:14:5c:2b:5c:0c:5a:fd:ae:1b:c6:c0:af:60:79:45:53:
         1c:f9:e4:84:6d:06:10:b7:97:b3:b7:26:55:22:7d:27:f3:b6:
         06:1a:d2:f7:e0:60:a3:ba:e7:72:be:4a:60:23:d4:bc:e3:51:
         cb:7b:c1:98:ea:28:ad:8f:3f:f9:36:81:89:e9:94:2b:0d:e7:
         50:28:40:bb:4d:b8:50:34:b0:77:1d:05:80:3e:c0:7c:b4:56:
         aa:5e:87:29:01:30:dc:82:ca:10:4d:b0:11:5a:8b:2f:99:22:
         0f:94:0b:85:49:22:af:62:8b:3d:c2:95:0c:47:7a:b5:a7:a7:
         dd:1d:68:bc:14:52:0e:77:4b:b3:43:9e:44:45:8b:ca:d4:d8:
         2f:37:2d:d8:f4:1f:ab:62:6c:46:ec:8b:16:e2:1f:6c:13:72:
         25:4c:e6:df:f0:11:14:50:ea:6b:83:28:13:54:1e:80:c4:6d:
         45:2e:9b:05:5c:82:0a:f7:9a:05:3b:15:d7:08:fc:1c:c0:ea:
         01:7a:78:1d:5c:15:22:3b:1e:1d:fa:76:cf:19:15:69:6d:68:
         eb:ee:fb:ad:30:e1:09:67:b8:6a:5a:22:c7:ff:ad:9a:a5:b3:
         61:83:23:ac:5a:24:d1:b6:f3:39:30:48:5f:23:0b:22:28:fe:
         fd:e2:a0:95
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSBgXpmKRYGapHv4IcHX9f2HCQRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVERkU1MEI4NUIxNjgxQjM0REFCMTQwOUZCRDMxQzYz
NkEwNDc0QjAeFw0yNTAzMTgxOTM2MTZaFw0yNjAzMTcxOTQxMTZaMDMxMTAvBgNV
BAMTKDYzRkE3NjA4MTQxOTMyNjdGOEU2M0MxRDg4OTk5RUVDMTEzOUY3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE60qe8M3klqe6jF/mrTBjP6eu
rXWlrx2qSD9D9cbP/X9l7pQio5tO7PuAQMcH/QsVthkzW7Ff/AGVTmsTumgHGc3o
I/Z+wgWTOfQBZzfFMpBRk1nlGPSmdd3k7fBxrv1vQrJSYaTAzPmZbJY3eoFNGFPk
Enex6H35oFEwPa96NlccUMZV6V/J4bgbEN/YwZEM5lRQVoYilRB2pFadSx9qWvvR
CrvLeqUcbJdbNL7Yq5M5mKtTkxD8sqNu/kWOnxpLWQmXbz2HSP1plv+S9as57AFb
Lm+h0PHmW0j8VaWospn+sJJM9EPbcczmGRrfJdIs4JyhtkRSyJwMQVL6GXiTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUY/p2CBQZMmf45jwdiJme7BE592MwHwYDVR0j
BBgwFoAU3t/lC4WxaBs02rFAn70xxjagR0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVQb005cjhjZ0NOZkRFN1hoZjJ1dlR4RVgyTW5FR1BmaG5kWW5Oanpu
UUsvMC9ERURGRTUwQjg1QjE2ODFCMzREQUIxNDA5RkJEMzFDNjM2QTA0NzRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFREZFNTBCODVCMTY4MUIz
NERBQjE0MDlGQkQzMUM2MzZBMDQ3NEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlUG9NOXI4Y2dDTmZERTdYaGYydXZUeEVYMk1uRUdQZmhuZFluTmp6blFLLzAv
MzIzODMwMzQzYTMxMzQzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUeDANBgkqhkiG9w0BAQsFAAOCAQEAWe4UXCtc
DFr9rhvGwK9geUVTHPnkhG0GELeXs7cmVSJ9J/O2BhrS9+Bgo7rncr5KYCPUvONR
y3vBmOoorY8/+TaBiemUKw3nUChAu024UDSwdx0FgD7AfLRWql6HKQEw3ILKEE2w
EVqLL5kiD5QLhUkir2KLPcKVDEd6taen3R1ovBRSDndLs0OeREWLytTYLzct2PQf
q2JsRuyLFuIfbBNyJUzm3/ARFFDqa4MoE1QegMRtRS6bBVyCCveaBTsV1wj8HMDq
AXp4HVwVIjseHfp2zxkVaW1o6+77rTDhCWe4aloix/+tmqWzYYMjrFok0bbzOTBI
XyMLIij+/eKglQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:54:53 2025 by rpki-client