Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a383030303a3a2f33332d3333203d3e20323730383936.roa
File:                     323830343a373331633a383030303a3a2f33332d3333203d3e20323730383936.roa (raw, json)
Hash identifier:          y/8PHT0G28x4bVtnhz98ZeLhnf7FgAAM84mJrsQqz6w=
Subject key identifier:   8F:05:AC:70:E7:40:63:74:D2:3D:AB:99:07:F1:15:2D:C6:01:7B:09
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       3041534AE0FBEFB2314E492039A31D44DE555AD5
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a383030303a3a2f33332d3333203d3e20323730383936.roa
Signing time:             Wed 16 Apr 2025 12:18:33 +0000
ROA not before:           Wed 16 Apr 2025 12:13:33 +0000
ROA not after:            Wed 15 Apr 2026 12:18:33 +0000
asID:                     270896
IP address blocks:        2804:731c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:41:53:4a:e0:fb:ef:b2:31:4e:49:20:39:a3:1d:44:de:55:5a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: Apr 16 12:13:33 2025 GMT
            Not After : Apr 15 12:18:33 2026 GMT
        Subject: CN=8F05AC70E7406374D23DAB9907F1152DC6017B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:d1:91:a8:7d:56:c1:05:ea:77:3a:5a:6b:
                    24:1b:40:f0:bc:09:c7:af:3b:a2:a9:29:5d:fe:aa:
                    bd:b2:72:8e:5b:06:03:98:be:fe:80:94:6a:13:48:
                    2c:e1:e6:7d:c2:4f:9f:68:b0:87:29:8c:dd:ab:8b:
                    b6:a3:98:91:ca:a4:2a:e4:1a:35:91:2d:bb:2c:08:
                    a6:8b:a4:d1:e3:cf:83:37:ea:84:2d:80:fa:37:a4:
                    65:15:2e:a1:3b:64:21:e5:ac:71:f8:3f:16:6b:72:
                    7a:19:98:02:ad:58:71:9c:21:c8:91:3a:e1:4f:71:
                    9b:28:6b:21:ad:e7:8b:4e:aa:78:92:8d:d7:bd:97:
                    1f:00:81:0a:2c:f7:b2:c5:77:2d:1a:46:b4:eb:d6:
                    34:f6:66:5f:0c:9c:80:fc:af:c1:79:b4:cc:12:79:
                    08:1a:10:e0:19:64:a8:30:f3:c3:59:ee:e8:21:d3:
                    3f:de:78:06:0e:02:62:43:d5:af:bc:94:54:ba:6e:
                    1b:2b:52:12:3c:02:01:77:b3:05:0b:63:f6:0c:30:
                    33:f4:69:df:bf:fe:81:00:cf:6f:21:2d:c7:b7:42:
                    6d:ae:39:9e:05:1c:44:33:67:fd:37:86:5e:14:e8:
                    61:fc:0e:5f:1f:b2:ac:01:83:7b:c6:2f:94:48:25:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:AC:70:E7:40:63:74:D2:3D:AB:99:07:F1:15:2D:C6:01:7B:09
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/323830343a373331633a383030303a3a2f33332d3333203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:731c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:13:54:48:87:46:46:2a:f7:f0:0f:43:c4:5a:7a:89:3d:fa:
         98:b8:bc:41:00:6e:84:ec:47:a3:c8:34:87:bf:41:df:33:c1:
         5f:7a:e0:a4:b9:76:42:5a:57:51:5b:94:b2:64:fc:45:ef:ea:
         54:c6:95:0e:6a:71:4d:c3:05:26:4e:4e:b4:b4:8b:43:a6:dc:
         49:40:34:c0:a8:1c:d0:c3:64:47:e4:6a:43:29:26:77:ed:fe:
         b4:10:42:d6:ef:a9:b6:bc:d6:bc:13:ac:04:ef:ad:9d:4a:0c:
         b2:65:65:9d:c0:12:9b:2a:52:da:a4:70:dc:28:3d:df:f5:3a:
         91:5d:69:5a:22:71:75:78:fd:6d:e8:bb:c4:f2:f8:97:90:20:
         3e:3d:e2:8f:ad:f6:32:fa:b6:fa:f8:6e:f3:18:31:d4:05:5d:
         2f:c4:84:dc:05:3c:26:a5:a8:5c:dc:ae:33:87:f1:a6:29:d1:
         67:66:dc:01:af:92:b5:06:6b:4c:f9:70:8c:f3:6f:33:be:3f:
         6d:f4:cb:c4:4c:83:3d:28:c2:be:20:83:47:88:48:86:b6:25:
         ed:be:3f:55:bc:98:21:cb:ec:d4:34:5c:4b:36:36:48:e2:b3:
         fe:92:c2:a0:96:19:68:37:20:cd:f4:92:91:97:68:91:b9:48:
         2a:09:20:b4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMEFTSuD777IxTkkgOaMdRN5VWtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MkVEMTk2MkRENUM4NENFRjU2RkUwMzFGMzY4MkU5
MEE2QkZCNDAeFw0yNTA0MTYxMjEzMzNaFw0yNjA0MTUxMjE4MzNaMDMxMTAvBgNV
BAMTKDhGMDVBQzcwRTc0MDYzNzREMjNEQUI5OTA3RjExNTJEQzYwMTdCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVANGRqH1WwQXqdzpaayQbQPC8
CcevO6KpKV3+qr2yco5bBgOYvv6AlGoTSCzh5n3CT59osIcpjN2ri7ajmJHKpCrk
GjWRLbssCKaLpNHjz4M36oQtgPo3pGUVLqE7ZCHlrHH4PxZrcnoZmAKtWHGcIciR
OuFPcZsoayGt54tOqniSjde9lx8AgQos97LFdy0aRrTr1jT2Zl8MnID8r8F5tMwS
eQgaEOAZZKgw88NZ7ugh0z/eeAYOAmJD1a+8lFS6bhsrUhI8AgF3swULY/YMMDP0
ad+//oEAz28hLce3Qm2uOZ4FHEQzZ/03hl4U6GH8Dl8fsqwBg3vGL5RIJciNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjwWscOdAY3TSPauZB/EVLcYBewkwHwYDVR0j
BBgwFoAUFkLtGWLdXITO9W/gMfNoLpCmv7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnJXOFdYY2JkRENXdHdnMmtuZG1pdXphWkdyNnUxSFRtdXV3ak5FaWtZ
M2QvMC8xNjQyRUQxOTYyREQ1Qzg0Q0VGNTZGRTAzMUYzNjgyRTkwQTZCRkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NDJFRDE5NjJERDVDODRD
RUY1NkZFMDMxRjM2ODJFOTBBNkJGQjQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJyVzhXWGNiZERDV3R3ZzJrbmRtaXV6YVpHcjZ1MUhUbXV1d2pORWlrWTNkLzAv
MzIzODMwMzQzYTM3MzMzMTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM4MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEcxyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBDE1RIh0ZGKvfwD0PEWnqJPfqYuLxBAG6E7EejyDSHv0HfM8FfeuCkuXZC
WldRW5SyZPxF7+pUxpUOanFNwwUmTk60tItDptxJQDTAqBzQw2RH5GpDKSZ37f60
EELW76m2vNa8E6wE762dSgyyZWWdwBKbKlLapHDcKD3f9TqRXWlaInF1eP1t6LvE
8viXkCA+PeKPrfYy+rb6+G7zGDHUBV0vxITcBTwmpahc3K4zh/GmKdFnZtwBr5K1
BmtM+XCM828zvj9t9MvETIM9KMK+IINHiEiGtiXtvj9VvJghy+zUNFxLNjZI4rP+
ksKglhloNyDN9JKRl2iRuUgqCSC0
-----END CERTIFICATE-----
Generated at Tue May 13 13:39:26 2025 by rpki-client