Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
File:                     323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (raw, json)
Hash identifier:          Zf5J1vo0exwtyULcPbQWl9oqPv7UiP9VJcKCX094QC8=
Subject key identifier:   2F:AE:14:3F:DE:C3:16:86:26:E2:93:E7:2C:A6:70:44:27:FD:90:57
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       237706E48936C9ADB677390AAD019A1BF32D2BE7
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa
Signing time:             Wed 05 Mar 2025 19:55:11 +0000
ROA not before:           Wed 05 Mar 2025 19:50:11 +0000
ROA not after:            Wed 04 Mar 2026 19:55:11 +0000
asID:                     270240
IP address blocks:        2804:68f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl
                          rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:06:e4:89:36:c9:ad:b6:77:39:0a:ad:01:9a:1b:f3:2d:2b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Mar  5 19:50:11 2025 GMT
            Not After : Mar  4 19:55:11 2026 GMT
        Subject: CN=2FAE143FDEC3168626E293E72CA6704427FD9057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:6a:43:c9:da:f7:bb:a3:9a:c1:cd:f1:95:
                    47:27:c1:55:a3:36:8d:f1:8e:52:f0:73:f6:f9:c9:
                    15:23:db:cd:cc:db:b1:f2:ba:ef:f9:83:f9:df:b9:
                    3b:54:9e:38:b5:d3:a3:2a:0a:37:bd:24:d6:75:52:
                    9b:0a:e3:a8:03:f8:b3:b1:35:14:2f:65:59:e3:f6:
                    66:4e:72:3e:16:73:55:fe:1a:07:55:08:c6:44:98:
                    73:3a:0b:88:f1:a5:39:cb:b9:33:44:c2:3f:a8:6f:
                    22:ca:c2:07:bb:56:89:83:93:88:56:79:11:01:a4:
                    da:32:ff:a9:a9:bb:c1:de:29:9f:ba:f5:a4:b2:bf:
                    a4:06:c3:40:78:16:bc:c9:17:1b:f8:42:3a:1e:e0:
                    8e:8e:04:e9:d5:d1:94:57:11:09:23:da:24:39:ff:
                    a4:06:eb:6a:39:2b:e5:b1:67:24:0a:63:49:89:b0:
                    99:98:5c:33:bb:f6:b4:aa:20:3f:fd:49:d2:b2:08:
                    f0:1b:ce:9a:cb:eb:2c:93:32:69:52:c4:18:79:e2:
                    e0:df:ad:0a:2e:d0:be:ec:3a:aa:60:5c:8e:b6:b1:
                    18:9b:f1:b7:b7:e1:c4:77:97:0d:ec:62:5d:7f:ba:
                    d7:46:64:ad:9b:3e:75:95:70:02:a4:c3:10:3a:0e:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AE:14:3F:DE:C3:16:86:26:E2:93:E7:2C:A6:70:44:27:FD:90:57
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/323830343a363866383a3a2f33322d3438203d3e20323730323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:01:60:09:47:23:a0:01:8d:fe:f1:ee:ff:25:90:0e:a0:
         a6:03:7c:72:97:51:1d:fc:8d:15:5a:ee:9c:ff:f5:9d:05:02:
         18:53:5e:57:66:87:9e:76:c9:33:39:b1:b9:54:3c:9b:70:73:
         f1:bb:07:ce:0a:21:ba:d5:27:25:78:22:71:68:47:fb:4e:f5:
         b1:41:99:f6:43:bf:d8:cd:0c:f8:d5:ca:f9:9e:0c:92:e1:b3:
         6e:2f:ad:ee:a7:79:0f:ef:96:1d:7d:85:17:a5:60:4a:3a:f3:
         c3:b4:6c:d2:99:b8:f1:74:38:d4:26:0c:ae:09:cc:06:ff:59:
         80:e1:ce:b9:9a:33:ef:4e:b8:b5:72:78:a0:35:55:a9:3a:c0:
         7a:74:68:bf:0d:7f:0a:f0:77:dd:0f:83:39:d5:e3:fb:09:5e:
         8c:1d:8c:0a:1d:dd:db:c2:ed:d2:94:ec:55:d0:89:04:5a:75:
         7f:bd:31:9a:12:be:25:ec:42:fe:fb:d4:b9:d6:80:4a:5c:12:
         23:9d:45:2a:80:f2:f3:83:d5:9f:df:56:0b:6d:b6:3a:b1:1e:
         cb:9f:f0:ae:c7:d2:ab:84:6b:c8:34:12:15:c4:21:21:b4:f5:
         59:a8:30:9b:e0:81:c1:2a:70:1c:d1:67:e8:41:97:a7:42:dd:
         7c:65:c9:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI3cG5Ik2ya22dzkKrQGaG/MtK+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5
Q0U3MUEwNTAeFw0yNTAzMDUxOTUwMTFaFw0yNjAzMDQxOTU1MTFaMDMxMTAvBgNV
BAMTKDJGQUUxNDNGREVDMzE2ODYyNkUyOTNFNzJDQTY3MDQ0MjdGRDkwNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/2pDydr3u6Oawc3xlUcnwVWj
No3xjlLwc/b5yRUj283M27Hyuu/5g/nfuTtUnji106MqCje9JNZ1UpsK46gD+LOx
NRQvZVnj9mZOcj4Wc1X+GgdVCMZEmHM6C4jxpTnLuTNEwj+obyLKwge7VomDk4hW
eREBpNoy/6mpu8HeKZ+69aSyv6QGw0B4FrzJFxv4Qjoe4I6OBOnV0ZRXEQkj2iQ5
/6QG62o5K+WxZyQKY0mJsJmYXDO79rSqID/9SdKyCPAbzprL6yyTMmlSxBh54uDf
rQou0L7sOqpgXI62sRib8be34cR3lw3sYl1/utdGZK2bPnWVcAKkwxA6Ds3LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUL64UP97DFoYm4pPnLKZwRCf9kFcwHwYDVR0j
BBgwFoAUPb7HcfWzseGVCTRiOu7FUZznGgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xNmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJv
LzEvM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5Q0U3MUEwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREJFQzc3MUY1QjNCMUUxOTUw
OTM0NjIzQUVFQzU1MTlDRTcxQTA1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
NmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJvLzEvMzIz
ODMwMzQzYTM2Mzg2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMwMzIz
NDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARo+DANBgkqhkiG9w0BAQsFAAOCAQEAJI8BYAlHI6AB
jf7x7v8lkA6gpgN8cpdRHfyNFVrunP/1nQUCGFNeV2aHnnbJMzmxuVQ8m3Bz8bsH
zgohutUnJXgicWhH+071sUGZ9kO/2M0M+NXK+Z4MkuGzbi+t7qd5D++WHX2FF6Vg
Sjrzw7Rs0pm48XQ41CYMrgnMBv9ZgOHOuZoz7064tXJ4oDVVqTrAenRovw1/CvB3
3Q+DOdXj+wlejB2MCh3d28Lt0pTsVdCJBFp1f70xmhK+JexC/vvUudaASlwSI51F
KoDy84PVn99WC222OrEey5/wrsfSq4RryDQSFcQhIbT1Wagwm+CBwSpwHNFn6EGX
p0LdfGXJXA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:59 2025 by rpki-client