Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa
File:                     323830343a343338383a3a2f33322d3438203d3e20323637353736.roa (raw, json)
Hash identifier:          cZd/ssKML83qdXJo2RFt0hxOAlYnrkcYP1rxyHfPV10=
Subject key identifier:   1F:91:32:05:0F:12:A1:AA:94:FF:41:8D:C1:5E:28:F6:F1:1A:6E:DE
Certificate issuer:       /CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
Certificate serial:       1FA587374298750B294608D3545C687AA4AB3256
Authority key identifier: 4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa
Signing time:             Wed 05 Mar 2025 23:45:32 +0000
ROA not before:           Wed 05 Mar 2025 23:40:32 +0000
ROA not after:            Wed 04 Mar 2026 23:45:32 +0000
asID:                     267576
IP address blocks:        2804:4388::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 02:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:87:37:42:98:75:0b:29:46:08:d3:54:5c:68:7a:a4:ab:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1FEB8CE307A010648FFEE198D2F6AFBE645E49
        Validity
            Not Before: Mar  5 23:40:32 2025 GMT
            Not After : Mar  4 23:45:32 2026 GMT
        Subject: CN=1F9132050F12A1AA94FF418DC15E28F6F11A6EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:26:76:a1:2c:47:1f:f1:62:a1:72:4f:3b:6e:
                    24:42:c4:31:e6:80:12:99:35:8f:a8:a2:b3:ad:0e:
                    6c:33:d8:07:97:2d:df:d2:e6:77:ec:da:84:72:fc:
                    37:6c:cf:92:87:24:99:03:ec:ed:10:61:d7:3b:6f:
                    e4:4f:74:5f:9b:41:d1:7a:58:b1:a9:c2:27:77:78:
                    92:61:ce:f1:c3:11:87:f5:b8:e9:48:58:1e:6d:d0:
                    bd:07:9c:79:b8:80:8c:51:21:16:ed:db:00:fb:f3:
                    00:9b:17:fd:7b:34:40:cf:e0:85:f5:a4:d4:cc:50:
                    01:81:81:cd:97:03:49:89:8b:cf:6d:3c:fa:af:60:
                    de:d5:34:c9:fa:23:95:cb:a2:1b:5f:23:eb:98:2e:
                    aa:85:91:73:ff:36:12:cd:51:92:e7:c7:6f:c2:fd:
                    12:31:1f:4b:03:b5:1a:3c:9d:ab:41:d2:89:fb:fa:
                    20:a1:9d:7e:82:08:66:d5:8d:64:de:04:1d:d5:12:
                    6f:4d:1b:8e:bf:9f:22:a3:d0:5c:84:ac:05:ea:f8:
                    74:74:f0:ba:a8:84:60:5f:e5:ae:e6:d1:67:da:97:
                    5a:9c:9d:31:fe:93:6f:20:04:a7:ef:61:e9:ec:bd:
                    ab:c9:18:5c:63:4c:8c:fa:98:6c:f1:2b:2c:68:c1:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:91:32:05:0F:12:A1:AA:94:FF:41:8D:C1:5E:28:F6:F1:1A:6E:DE
            X509v3 Authority Key Identifier:
                keyid:4A:1F:EB:8C:E3:07:A0:10:64:8F:FE:E1:98:D2:F6:AF:BE:64:5E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A1FEB8CE307A010648FFEE198D2F6AFBE645E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/1/323830343a343338383a3a2f33322d3438203d3e20323637353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4388::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:fc:94:8e:d8:14:b4:d0:20:78:b3:26:45:1d:b1:c7:51:65:
         f8:b3:eb:e9:da:79:b6:79:96:01:5c:98:61:d5:9b:ea:81:a7:
         6b:29:01:b6:99:75:51:ac:6c:e3:67:9f:21:0b:a0:e4:99:0b:
         9b:26:24:07:88:e8:94:9a:69:0b:8b:d0:25:10:b6:c2:9e:ea:
         ce:fb:79:71:5b:b7:d9:55:9a:ba:7f:cc:a5:1c:ec:d6:12:cb:
         76:22:d6:22:0b:26:4a:56:64:7e:c6:b6:ef:54:1d:18:dd:7c:
         95:dc:08:1e:bf:ea:02:0d:97:ed:39:23:dd:a1:bb:df:0e:24:
         8e:95:93:fe:e4:56:8c:44:0e:09:07:12:36:0d:c1:b4:fa:0e:
         67:1a:e9:55:42:ef:39:99:d9:14:94:af:5c:31:e3:57:da:8d:
         b4:7d:cd:5b:bb:1e:46:fa:f8:e4:99:69:d1:76:17:d7:66:70:
         7a:0c:31:12:86:42:2d:c4:70:99:db:a6:ca:d0:3b:20:7b:a9:
         92:0e:11:3f:77:23:07:ec:db:db:19:b7:6b:52:64:ac:dc:17:
         c8:c8:a2:00:2e:cf:05:3a:64:26:2e:7d:8c:8f:95:3c:6f:a0:
         29:ef:cb:4f:fb:00:66:97:01:49:f0:9c:a3:14:7a:26:e3:b8:
         32:17:c9:83
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH6WHN0KYdQspRgjTVFxoeqSrMlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEExRkVCOENFMzA3QTAxMDY0OEZGRUUxOThEMkY2QUZC
RTY0NUU0OTAeFw0yNTAzMDUyMzQwMzJaFw0yNjAzMDQyMzQ1MzJaMDMxMTAvBgNV
BAMTKDFGOTEzMjA1MEYxMkExQUE5NEZGNDE4REMxNUUyOEY2RjExQTZFREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJnahLEcf8WKhck87biRCxDHm
gBKZNY+oorOtDmwz2AeXLd/S5nfs2oRy/Ddsz5KHJJkD7O0QYdc7b+RPdF+bQdF6
WLGpwid3eJJhzvHDEYf1uOlIWB5t0L0HnHm4gIxRIRbt2wD78wCbF/17NEDP4IX1
pNTMUAGBgc2XA0mJi89tPPqvYN7VNMn6I5XLohtfI+uYLqqFkXP/NhLNUZLnx2/C
/RIxH0sDtRo8natB0on7+iChnX6CCGbVjWTeBB3VEm9NG46/nyKj0FyErAXq+HR0
8LqohGBf5a7m0Wfal1qcnTH+k28gBKfvYensvavJGFxjTIz6mGzxKyxowb9bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUH5EyBQ8SoaqU/0GNwV4o9vEabt4wHwYDVR0j
BBgwFoAUSh/rjOMHoBBkj/7hmNL2r75kXkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVG
VUEvMS80QTFGRUI4Q0UzMDdBMDEwNjQ4RkZFRTE5OEQyRjZBRkJFNjQ1RTQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBMUZFQjhDRTMwN0EwMTA2
NDhGRkVFMTk4RDJGNkFGQkU2NDVFNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3b21tNmN0WFFvOEFxdG5ZYUdWRmt2eFRIa3czYTllSFNWN3ltdTFFRlVBLzEv
MzIzODMwMzQzYTM0MzMzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDiDANBgkqhkiG9w0BAQsFAAOCAQEA0/yUjtgU
tNAgeLMmRR2xx1Fl+LPr6dp5tnmWAVyYYdWb6oGnaykBtpl1Uaxs42efIQug5JkL
myYkB4jolJppC4vQJRC2wp7qzvt5cVu32VWaun/MpRzs1hLLdiLWIgsmSlZkfsa2
71QdGN18ldwIHr/qAg2X7Tkj3aG73w4kjpWT/uRWjEQOCQcSNg3BtPoOZxrpVULv
OZnZFJSvXDHjV9qNtH3NW7seRvr45Jlp0XYX12ZwegwxEoZCLcRwmdumytA7IHup
kg4RP3cjB+zb2xm3a1JkrNwXyMiiAC7PBTpkJi59jI+VPG+gKe/LT/sAZpcBSfCc
oxR6JuO4MhfJgw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:18:50 2025 by rpki-client