Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa
File:                     323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (raw, json)
Hash identifier:          jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=
Subject key identifier:   94:37:84:05:88:B5:0E:EC:23:AB:84:B3:F2:E9:C5:67:A0:65:74:A8
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       550B2C956991501DABB28538034D94029BDABF0F
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa
Signing time:             Wed 07 May 2025 19:31:23 +0000
ROA not before:           Wed 07 May 2025 19:26:23 +0000
ROA not after:            Wed 06 May 2026 19:31:23 +0000
asID:                     263084
IP address blocks:        2804:a48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 23:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0b:2c:95:69:91:50:1d:ab:b2:85:38:03:4d:94:02:9b:da:bf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: May  7 19:26:23 2025 GMT
            Not After : May  6 19:31:23 2026 GMT
        Subject: CN=9437840588B50EEC23AB84B3F2E9C567A06574A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:87:b4:a9:03:1b:0f:bb:f5:8c:c4:fd:1d:
                    03:2f:f2:ed:b4:64:6a:18:77:fa:d5:35:0e:9a:b2:
                    e7:9d:f3:a4:f7:f8:eb:7d:9d:9f:8a:f8:00:91:6e:
                    8b:5e:2f:70:78:de:d3:4a:8e:78:5a:e4:65:38:0b:
                    c1:f8:aa:89:94:5a:13:7c:3e:93:9a:72:bd:e8:78:
                    56:15:cc:a2:c5:9c:c8:24:cd:be:85:4a:29:7a:9a:
                    b7:e3:54:01:d3:31:7b:7e:bb:6c:08:0e:88:0e:19:
                    40:37:83:3a:a0:c0:a3:f6:6c:04:47:48:72:50:f2:
                    75:bc:58:6f:f9:f5:e0:15:d2:76:4d:7e:c5:71:6c:
                    51:ac:ef:08:72:84:68:3d:4f:6e:70:0f:fb:c9:fc:
                    f3:a3:72:c8:d1:14:d0:6a:12:6d:0d:5c:b6:e6:35:
                    d9:76:90:47:ce:2f:26:91:ee:74:dd:de:f6:47:7d:
                    a3:07:d6:dc:11:00:ba:1d:d2:c6:b9:94:fa:0b:86:
                    8e:67:94:80:25:64:f7:48:c5:43:27:4a:a6:bd:5b:
                    b4:fd:63:f3:40:fd:36:24:34:1d:14:f5:99:71:06:
                    37:c6:d3:23:13:f6:fb:ce:bf:38:fc:04:86:76:e9:
                    63:d8:c6:2d:af:db:8a:1f:f8:a2:17:8b:b7:55:74:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:84:05:88:B5:0E:EC:23:AB:84:B3:F2:E9:C5:67:A0:65:74:A8
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/323830343a6134383a3a2f33322d3438203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a48::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:62:75:b3:6a:3f:41:52:18:56:e6:fe:29:f1:82:f3:6e:
         db:5d:b7:3e:58:8f:52:68:26:a0:9b:01:55:19:a3:d8:96:ff:
         3c:ba:3e:b5:23:29:e2:32:a2:5a:3c:d2:ec:80:56:d7:49:1c:
         33:41:19:ee:63:c8:14:41:55:ca:97:c0:bb:0d:81:48:b6:83:
         35:cc:d5:7e:c2:1a:a5:41:99:4b:ee:1f:da:a9:c5:89:5b:5e:
         9c:ff:0d:02:a7:35:2d:59:62:21:c2:43:32:84:51:04:56:ec:
         e7:c7:09:13:ce:26:2b:85:e1:ec:5a:79:8b:f7:b8:ca:cf:24:
         9d:4a:4c:40:8c:09:a0:0b:05:2f:df:2f:15:19:fc:65:11:2b:
         35:75:df:6f:83:33:09:26:49:cd:cd:a1:fd:ed:01:c3:e0:59:
         63:03:a1:e9:1d:37:2c:58:a6:a4:d1:14:91:d2:67:4c:54:83:
         ba:7c:10:a7:d0:14:eb:16:0c:f5:d2:7a:0c:d1:dd:9e:01:6b:
         63:72:f6:1c:24:5b:82:31:82:be:69:26:53:0a:4f:28:f2:2a:
         9c:b7:6a:06:d3:ca:8a:98:64:e4:ed:7c:5a:da:3d:1c:45:38:
         2b:85:03:5f:46:93:55:db:52:ab:e4:23:c3:bf:68:4f:24:86:
         f9:6f:dc:1e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVQsslWmRUB2rsoU4A02UApvavw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG
NjMwNDJBMzAeFw0yNTA1MDcxOTI2MjNaFw0yNjA1MDYxOTMxMjNaMDMxMTAvBgNV
BAMTKDk0Mzc4NDA1ODhCNTBFRUMyM0FCODRCM0YyRTlDNTY3QTA2NTc0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqYe0qQMbD7v1jMT9HQMv8u20
ZGoYd/rVNQ6asued86T3+Ot9nZ+K+ACRboteL3B43tNKjnha5GU4C8H4qomUWhN8
PpOacr3oeFYVzKLFnMgkzb6FSil6mrfjVAHTMXt+u2wIDogOGUA3gzqgwKP2bARH
SHJQ8nW8WG/59eAV0nZNfsVxbFGs7whyhGg9T25wD/vJ/POjcsjRFNBqEm0NXLbm
Ndl2kEfOLyaR7nTd3vZHfaMH1twRALod0sa5lPoLho5nlIAlZPdIxUMnSqa9W7T9
Y/NA/TYkNB0U9ZlxBjfG0yMT9vvOvzj8BIZ26WPYxi2v24of+KIXi7dVdK+jAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUlDeEBYi1Duwjq4Sz8unFZ6BldKgwHwYDVR0j
BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk
N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC
NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSQmt4WWRESERYSDJTYVh3ZWFGUTFqQW5zWG1acUVzcHNqZnRBR1JFZDdZLzAv
MzIzODMwMzQzYTYxMzQzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMw
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECkgwDQYJKoZIhvcNAQELBQADggEBAAitYnWzaj9B
UhhW5v4p8YLzbttdtz5Yj1JoJqCbAVUZo9iW/zy6PrUjKeIyolo80uyAVtdJHDNB
Ge5jyBRBVcqXwLsNgUi2gzXM1X7CGqVBmUvuH9qpxYlbXpz/DQKnNS1ZYiHCQzKE
UQRW7OfHCRPOJiuF4exaeYv3uMrPJJ1KTECMCaALBS/fLxUZ/GURKzV132+DMwkm
Sc3Nof3tAcPgWWMDoekdNyxYpqTRFJHSZ0xUg7p8EKfQFOsWDPXSegzR3Z4Ba2Ny
9hwkW4Ixgr5pJlMKTyjyKpy3agbTyoqYZOTtfFraPRxFOCuFA19Gk1XbUqvkI8O/
aE8khvlv3B4=
-----END CERTIFICATE-----
Generated at Thu May 15 02:57:16 2025 by rpki-client