Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (raw, json)
Hash identifier:          7XorcYPFdj5Ia9d/FDlmPP72qYqt6CBolYpyEY2eUmo=
Subject key identifier:   D2:F1:29:AE:95:3F:07:53:FF:77:71:A2:5E:9E:A4:1E:BC:76:15:0F
Certificate issuer:       /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Certificate serial:       69B0CD510E2D64FE6C3F968EFF6885D5E6DB77E0
Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
Signing time:             Wed 12 Feb 2025 14:39:56 +0000
ROA not before:           Wed 12 Feb 2025 14:34:56 +0000
ROA not after:            Wed 11 Feb 2026 14:39:56 +0000
asID:                     268746
IP address blocks:        2804:5a10::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:cd:51:0e:2d:64:fe:6c:3f:96:8e:ff:68:85:d5:e6:db:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
        Validity
            Not Before: Feb 12 14:34:56 2025 GMT
            Not After : Feb 11 14:39:56 2026 GMT
        Subject: CN=D2F129AE953F0753FF7771A25E9EA41EBC76150F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b6:eb:9f:e1:08:8b:24:81:35:42:39:a0:82:
                    4c:82:ad:0e:f5:95:22:9a:85:fe:e2:5f:ed:b9:a6:
                    1f:67:8c:4c:f6:5b:4e:07:c3:a8:24:61:be:91:38:
                    7f:cb:cb:65:6d:47:f3:d6:d1:32:8a:40:20:6d:b6:
                    4b:43:03:23:48:12:69:0b:59:27:bb:da:8e:1f:8f:
                    20:7a:99:0a:ce:5c:aa:a6:f8:64:eb:bc:20:52:6f:
                    4d:84:ea:ad:db:7f:51:5c:ad:8c:c2:1e:9b:41:70:
                    82:51:7c:53:8f:60:3e:cc:12:92:47:09:37:5d:c1:
                    aa:26:0c:5e:9e:9b:f9:61:7b:35:5e:01:84:52:48:
                    8c:9b:fb:f2:24:00:bf:51:7b:30:00:2b:3c:a3:91:
                    34:1e:1b:4b:57:e7:ed:00:31:d6:30:17:17:c3:39:
                    14:a6:d7:f3:22:39:5f:49:0e:0f:6d:0a:ca:2a:44:
                    63:40:68:d5:eb:90:e8:59:bd:bb:c7:71:eb:f0:91:
                    88:63:9c:b1:04:98:3a:6b:0d:0f:e4:cd:7b:8d:4b:
                    16:23:0b:1b:e4:13:d9:5c:d9:86:d4:23:71:d6:1b:
                    1b:f9:20:42:2a:f5:ec:05:d8:75:53:de:72:24:ce:
                    68:b2:a7:86:b4:d8:94:b5:05:c4:a3:bd:ac:66:ff:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:29:AE:95:3F:07:53:FF:77:71:A2:5E:9E:A4:1E:BC:76:15:0F
            X509v3 Authority Key Identifier:
                keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:42:fd:f5:d5:f2:73:aa:a3:86:bf:7b:94:e2:ca:aa:3a:b3:
         a9:3d:f3:dc:9b:f5:b9:b8:71:21:0b:55:3a:09:a6:29:23:73:
         ea:db:da:3a:42:f5:6f:2b:0b:d5:d3:01:b5:5d:68:ee:51:79:
         74:a0:92:54:f3:73:7b:6d:72:29:a4:82:4d:6d:61:b8:17:61:
         76:fa:1a:02:22:07:29:4d:7a:65:3a:a2:b2:06:cf:81:6d:9b:
         52:1c:37:19:c0:0c:0f:3a:3a:d4:fe:6f:88:4d:64:5c:9c:74:
         8e:a3:66:4c:6f:e5:89:f9:65:a4:97:15:53:a5:84:84:03:2b:
         cf:ce:82:3a:c8:52:45:0e:03:c4:ff:6c:56:b5:c5:f5:b7:2c:
         09:fe:af:d1:61:53:5d:e0:98:49:0c:ca:a4:d6:ad:2c:34:f6:
         af:3c:44:d8:84:8a:41:35:2b:78:da:2d:97:40:e1:97:81:07:
         95:bc:70:f2:29:55:97:10:ab:63:2f:77:07:38:a5:4a:6c:dd:
         33:df:3c:82:52:00:a4:14:21:9b:3e:12:7b:5f:a2:8d:87:59:
         fa:25:32:b7:53:f8:7d:3d:8c:f4:68:b3:6c:7f:ed:6d:a5:12:
         d0:34:1e:40:5e:33:1c:34:7b:9b:d6:98:41:e1:08:c0:2f:d8:
         75:4d:28:b0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUabDNUQ4tZP5sP5aO/2iF1ebbd+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQx
RUM1RDY0MzAeFw0yNTAyMTIxNDM0NTZaFw0yNjAyMTExNDM5NTZaMDMxMTAvBgNV
BAMTKEQyRjEyOUFFOTUzRjA3NTNGRjc3NzFBMjVFOUVBNDFFQkM3NjE1MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1tuuf4QiLJIE1QjmggkyCrQ71
lSKahf7iX+25ph9njEz2W04Hw6gkYb6ROH/Ly2VtR/PW0TKKQCBttktDAyNIEmkL
WSe72o4fjyB6mQrOXKqm+GTrvCBSb02E6q3bf1FcrYzCHptBcIJRfFOPYD7MEpJH
CTddwaomDF6em/lhezVeAYRSSIyb+/IkAL9RezAAKzyjkTQeG0tX5+0AMdYwFxfD
ORSm1/MiOV9JDg9tCsoqRGNAaNXrkOhZvbvHcevwkYhjnLEEmDprDQ/kzXuNSxYj
CxvkE9lc2YbUI3HWGxv5IEIq9ewF2HVT3nIkzmiyp4a02JS1BcSjvaxm/4prAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU0vEprpU/B1P/d3GiXp6kHrx2FQ8wHwYDVR0j
BBgwFoAUx1Y5NB6zENkQXNmKSPx87R7F1kMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQxRUM1RDY0My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNzU2MzkzNDFFQjMxMEQ5MTA1
Q0Q5OEE0OEZDN0NFRDFFQzVENjQzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4Mzcz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYHKARaEAAwDQYJKoZIhvcNAQELBQADggEBACJC/fXV8nOq
o4a/e5Tiyqo6s6k989yb9bm4cSELVToJpikjc+rb2jpC9W8rC9XTAbVdaO5ReXSg
klTzc3ttcimkgk1tYbgXYXb6GgIiBylNemU6orIGz4Ftm1IcNxnADA86OtT+b4hN
ZFycdI6jZkxv5Yn5ZaSXFVOlhIQDK8/OgjrIUkUOA8T/bFa1xfW3LAn+r9FhU13g
mEkMyqTWrSw09q88RNiEikE1K3jaLZdA4ZeBB5W8cPIpVZcQq2Mvdwc4pUps3TPf
PIJSAKQUIZs+Entfoo2HWfolMrdT+H09jPRos2x/7W2lEtA0HkBeMxw0e5vWmEHh
CMAv2HVNKLA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:44 2025 by rpki-client