Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3430203d3e20323635393131.roa
File:                     323830343a336662633a3a2f33322d3430203d3e20323635393131.roa (raw, json)
Hash identifier:          1dz9/OdOFfrgIBG84r9D5yldRoEm3lF20G2Sag37KMA=
Subject key identifier:   E2:92:0F:42:E8:F1:A8:44:A9:50:51:F8:3B:89:F5:13:90:B7:5B:9D
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       1D3F23E0A6FEDA6E1E415D3D1CA7FEB986F786DC
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3430203d3e20323635393131.roa
Signing time:             Mon 17 Feb 2025 16:04:22 +0000
ROA not before:           Mon 17 Feb 2025 15:59:22 +0000
ROA not after:            Mon 16 Feb 2026 16:04:22 +0000
asID:                     265911
IP address blocks:        2804:3fbc::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:23:e0:a6:fe:da:6e:1e:41:5d:3d:1c:a7:fe:b9:86:f7:86:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Feb 17 15:59:22 2025 GMT
            Not After : Feb 16 16:04:22 2026 GMT
        Subject: CN=E2920F42E8F1A844A95051F83B89F51390B75B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:dd:5e:ab:fb:a4:37:0f:f6:e7:c6:70:b2:
                    f8:49:12:9a:f7:49:5c:de:71:9b:4a:4d:47:86:71:
                    df:7a:1c:34:ce:70:b3:dc:13:45:89:de:a6:5f:73:
                    dc:9a:31:a1:8f:b7:7f:81:56:dd:78:a2:8a:dd:27:
                    67:e4:4e:b4:8b:45:23:45:68:7f:0c:f2:40:22:a9:
                    8b:c5:92:64:87:b0:eb:7c:d6:c2:39:44:62:65:4e:
                    52:dc:98:26:ea:6a:fb:3f:3e:e7:51:d0:b5:b9:b5:
                    1a:81:79:6d:8e:e8:0d:6c:b7:78:d6:85:67:b5:a1:
                    d9:d8:13:c8:a9:66:0c:69:9b:9c:18:e7:22:16:70:
                    f0:cc:c7:fd:1e:40:99:cc:29:53:41:b4:8c:0a:8b:
                    2b:49:c8:99:5f:c6:33:51:d6:d9:ee:d7:51:83:10:
                    af:40:f8:84:26:02:77:e6:36:e7:6b:c1:12:dd:f6:
                    95:53:ce:21:f3:c1:1c:44:0e:2f:5e:b2:b1:ff:6c:
                    71:dd:b2:53:16:77:dd:ca:d8:be:b4:e6:2c:1e:32:
                    dd:cf:44:b9:10:1f:fb:dc:85:1a:65:9d:cb:e8:70:
                    62:82:a6:d3:2d:06:12:0b:96:0e:43:da:f8:81:10:
                    e5:43:1b:87:19:4e:ea:47:20:30:5e:d1:7d:5c:57:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:92:0F:42:E8:F1:A8:44:A9:50:51:F8:3B:89:F5:13:90:B7:5B:9D
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a336662633a3a2f33322d3430203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:70:d0:d9:94:58:94:44:ea:5a:7c:20:12:55:52:22:e2:
         2e:34:a5:7b:bf:91:18:9a:c3:9c:f0:cc:ff:1c:b7:21:7b:a2:
         75:c8:30:3a:de:3e:c1:28:ec:7c:6c:a5:b1:27:7f:6e:50:34:
         db:40:55:71:bb:25:57:52:84:a9:39:69:1e:81:4b:b7:0b:91:
         42:de:66:ba:6d:44:92:44:33:97:db:17:c4:47:ba:27:cd:08:
         a8:0a:67:0e:64:e8:2b:d6:09:28:ff:69:bf:e6:17:9d:dc:a5:
         28:8b:e3:3d:f0:93:f2:f3:41:56:fe:10:7f:02:58:a5:28:ee:
         40:3f:34:0c:10:75:7c:d1:ce:2c:0a:01:9d:1a:13:c1:b9:f4:
         0e:71:d7:10:f5:53:11:a9:3d:43:b8:48:ba:3a:2a:bd:c9:79:
         67:7f:22:08:69:20:5f:ca:45:ff:85:dd:25:3a:42:2b:7c:b4:
         1f:f5:5e:af:c9:db:d8:f3:4f:36:65:23:f0:d6:ed:7a:e8:9b:
         ea:34:9f:f5:fe:0e:3c:c3:64:f5:56:32:e9:61:a5:5c:68:38:
         87:7f:e9:4c:68:3b:f7:ae:4e:bf:a3:05:c6:18:58:7f:1a:2b:
         d1:2e:50:63:52:d1:77:de:46:98:59:16:b3:1b:2b:0a:7f:cd:
         b4:ef:48:b7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHT8j4Kb+2m4eQV09HKf+uYb3htwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNTAyMTcxNTU5MjJaFw0yNjAyMTYxNjA0MjJaMDMxMTAvBgNV
BAMTKEUyOTIwRjQyRThGMUE4NDRBOTUwNTFGODNCODlGNTEzOTBCNzVCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMt1eq/ukNw/258ZwsvhJEpr3
SVzecZtKTUeGcd96HDTOcLPcE0WJ3qZfc9yaMaGPt3+BVt14oordJ2fkTrSLRSNF
aH8M8kAiqYvFkmSHsOt81sI5RGJlTlLcmCbqavs/PudR0LW5tRqBeW2O6A1st3jW
hWe1odnYE8ipZgxpm5wY5yIWcPDMx/0eQJnMKVNBtIwKiytJyJlfxjNR1tnu11GD
EK9A+IQmAnfmNudrwRLd9pVTziHzwRxEDi9esrH/bHHdslMWd93K2L605iweMt3P
RLkQH/vchRplncvocGKCptMtBhILlg5D2viBEOVDG4cZTupHIDBe0X1cV4XPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4pIPQujxqESpUFH4O4n1E5C3W50wHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzIz
ODMwMzQzYTMzNjY2MjYzM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNjM1Mzkz
MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ/vDANBgkqhkiG9w0BAQsFAAOCAQEAIFtw0NmUWJRE
6lp8IBJVUiLiLjSle7+RGJrDnPDM/xy3IXuidcgwOt4+wSjsfGylsSd/blA020BV
cbslV1KEqTlpHoFLtwuRQt5mum1EkkQzl9sXxEe6J80IqApnDmToK9YJKP9pv+YX
ndylKIvjPfCT8vNBVv4QfwJYpSjuQD80DBB1fNHOLAoBnRoTwbn0DnHXEPVTEak9
Q7hIujoqvcl5Z38iCGkgX8pF/4XdJTpCK3y0H/Ver8nb2PNPNmUj8Nbteuib6jSf
9f4OPMNk9VYy6WGlXGg4h3/pTGg7965Ov6MFxhhYfxor0S5QY1LRd95GmFkWsxsr
Cn/NtO9Itw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:47:48 2025 by rpki-client