Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa
File:                     323830343a336432343a3a2f33322d3332203d3e20323636323536.roa (raw, json)
Hash identifier:          wIoT7IHLw2nLj+JjSgz6dbNJaacVVyi5KJqMg+NKvIE=
Subject key identifier:   2E:69:7D:8F:6B:BC:A2:53:B0:1E:AB:F5:4B:66:02:AA:16:A8:88:75
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       66984FC375D5E2F672ED67A5014338B1D4106A27
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa
Signing time:             Thu 06 Mar 2025 02:51:47 +0000
ROA not before:           Thu 06 Mar 2025 02:46:47 +0000
ROA not after:            Thu 05 Mar 2026 02:51:47 +0000
asID:                     266256
IP address blocks:        2804:3d24::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:98:4f:c3:75:d5:e2:f6:72:ed:67:a5:01:43:38:b1:d4:10:6a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Mar  6 02:46:47 2025 GMT
            Not After : Mar  5 02:51:47 2026 GMT
        Subject: CN=2E697D8F6BBCA253B01EABF54B6602AA16A88875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:ed:f3:18:0a:8f:4a:9b:11:79:99:cc:74:
                    84:a2:f1:e2:32:0d:ab:3b:15:a2:6c:b7:df:a7:e5:
                    d9:9d:f1:f5:95:b6:90:ad:9f:4c:f0:0d:bb:4a:6e:
                    2b:cc:e3:ec:6b:41:6d:7b:fe:d6:12:4d:cd:b1:b1:
                    ea:aa:2a:87:4e:47:c0:40:9e:11:ee:32:d4:d2:1a:
                    b9:e1:fa:f6:70:24:6d:21:6a:07:77:fd:5f:91:45:
                    10:bb:e6:2d:90:ca:8a:b1:43:f4:1d:1a:8d:06:39:
                    ee:0b:e8:a7:ab:8c:11:42:49:89:c2:be:2f:79:de:
                    04:40:90:b6:27:16:23:22:f6:c2:51:c6:92:fb:be:
                    05:8e:08:ae:37:9f:7e:fa:d7:c5:b1:71:64:18:a6:
                    6c:0b:8b:35:49:46:60:0b:7c:ee:81:e3:e2:20:6a:
                    84:c4:99:54:48:90:71:f6:60:29:bd:b3:72:be:d3:
                    8a:ed:56:51:75:57:90:a6:e3:87:02:17:1a:74:c6:
                    aa:5d:75:79:ae:04:b5:7d:63:aa:6a:a5:10:e8:0e:
                    39:43:bc:1c:1b:46:16:33:2d:72:d3:71:2b:15:a6:
                    db:ca:01:11:62:b8:17:68:1c:e7:91:9b:8e:04:f3:
                    21:d4:08:94:60:dd:52:fb:11:7d:ce:8d:86:17:f3:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:7D:8F:6B:BC:A2:53:B0:1E:AB:F5:4B:66:02:AA:16:A8:88:75
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/323830343a336432343a3a2f33322d3332203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:75:39:83:43:5b:a1:d2:46:d3:c7:92:28:0f:09:df:da:
         06:82:60:1d:c7:5c:ba:d1:79:ff:39:e5:bc:fb:24:99:ed:2c:
         e7:6d:a1:3f:5b:eb:e0:3e:38:2e:00:8e:13:85:0e:77:77:7d:
         42:80:dc:15:c8:a8:53:e6:6d:1c:bc:1b:dd:0d:55:3b:e3:5a:
         ea:80:8b:74:b4:ec:31:4d:e1:e2:62:32:38:75:08:98:49:21:
         89:5c:c7:5f:3d:cf:12:27:c1:de:9b:97:6b:d4:ce:52:2b:1b:
         f9:9b:cb:35:f2:f1:b5:dc:73:d4:d8:8a:da:e9:54:03:7a:54:
         44:ad:a2:9f:fc:a2:37:11:4c:0b:26:09:ec:b2:01:9f:e3:e5:
         41:60:e3:b1:e4:34:46:83:b8:03:4b:fb:4e:80:21:77:76:07:
         c5:74:b2:5d:08:2a:66:b0:e6:2e:19:23:6d:ea:82:ee:58:8a:
         be:0b:21:c1:17:3c:14:af:13:84:c0:8e:bc:b3:66:be:9d:1e:
         a5:2c:00:b7:76:c2:80:71:0b:db:92:39:0f:fd:40:8d:ae:50:
         d9:e7:52:37:cc:c4:a1:77:0b:96:c7:f3:01:d1:19:34:ae:b9:
         5d:52:93:1e:ab:45:87:14:fa:37:5b:f9:e4:a0:0d:07:7e:bf:
         9e:9c:b0:6a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZphPw3XV4vZy7WelAUM4sdQQaicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJC
QUEyRDkyMzAeFw0yNTAzMDYwMjQ2NDdaFw0yNjAzMDUwMjUxNDdaMDMxMTAvBgNV
BAMTKDJFNjk3RDhGNkJCQ0EyNTNCMDFFQUJGNTRCNjYwMkFBMTZBODg4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yO3zGAqPSpsReZnMdISi8eIy
Das7FaJst9+n5dmd8fWVtpCtn0zwDbtKbivM4+xrQW17/tYSTc2xseqqKodOR8BA
nhHuMtTSGrnh+vZwJG0hagd3/V+RRRC75i2QyoqxQ/QdGo0GOe4L6KerjBFCSYnC
vi953gRAkLYnFiMi9sJRxpL7vgWOCK43n37618WxcWQYpmwLizVJRmALfO6B4+Ig
aoTEmVRIkHH2YCm9s3K+04rtVlF1V5Cm44cCFxp0xqpddXmuBLV9Y6pqpRDoDjlD
vBwbRhYzLXLTcSsVptvKARFiuBdoHOeRm44E8yHUCJRg3VL7EX3OjYYX86KnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULml9j2u8olOwHqv1S2YCqhaoiHUwHwYDVR0j
BBgwFoAUmKEc9FqZfKkJYE8uRhk5i7qi2SMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3
LzEvOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJCQUEyRDkyMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OEExMUNGNDVBOTk3Q0E5MDk2
MDRGMkU0NjE5Mzk4QkJBQTJEOTIzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
U3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3LzEvMzIz
ODMwMzQzYTMzNjQzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2MzIz
NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ9JDANBgkqhkiG9w0BAQsFAAOCAQEAnb91OYNDW6HS
RtPHkigPCd/aBoJgHcdcutF5/znlvPskme0s522hP1vr4D44LgCOE4UOd3d9QoDc
FcioU+ZtHLwb3Q1VO+Na6oCLdLTsMU3h4mIyOHUImEkhiVzHXz3PEifB3puXa9TO
Uisb+ZvLNfLxtdxz1NiK2ulUA3pURK2in/yiNxFMCyYJ7LIBn+PlQWDjseQ0RoO4
A0v7ToAhd3YHxXSyXQgqZrDmLhkjbeqC7liKvgshwRc8FK8ThMCOvLNmvp0epSwA
t3bCgHEL25I5D/1Aja5Q2edSN8zEoXcLlsfzAdEZNK65XVKTHqtFhxT6N1v55KAN
B36/npywag==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:00:57 2025 by rpki-client