Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa
File:                     323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (raw, json)
Hash identifier:          q++Y8uDb0QZkkc+9358Zhs1Jsl0QBiuDx2Mno5lvNRs=
Subject key identifier:   7D:C4:77:A4:7D:14:D4:59:B4:88:43:AE:65:74:54:62:E9:18:1F:97
Certificate issuer:       /CN=B27B85F02C63CD742721D85E375F5A98C91ED00B
Certificate serial:       4F825EEEE8FD1DF89E8E7A3690B0BD7191C405C2
Authority key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa
Signing time:             Wed 07 May 2025 07:43:27 +0000
ROA not before:           Wed 07 May 2025 07:38:27 +0000
ROA not after:            Wed 06 May 2026 07:43:27 +0000
asID:                     263905
IP address blocks:        2804:2780::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 02:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:5e:ee:e8:fd:1d:f8:9e:8e:7a:36:90:b0:bd:71:91:c4:05:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B
        Validity
            Not Before: May  7 07:38:27 2025 GMT
            Not After : May  6 07:43:27 2026 GMT
        Subject: CN=7DC477A47D14D459B48843AE65745462E9181F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:e0:31:1f:9b:02:5e:de:70:de:0f:63:ea:
                    1f:1f:a1:17:c9:fd:93:ef:81:1f:e0:2b:da:da:55:
                    c7:05:6b:e7:cf:a8:90:38:f9:cb:09:bb:f2:84:70:
                    78:70:15:cd:83:83:cf:68:57:d3:3f:ca:ef:4a:60:
                    11:a8:e7:06:b7:cd:97:91:b0:f4:00:8d:64:6e:f7:
                    77:d1:c3:9a:6d:dc:bd:29:41:cb:68:a3:f4:de:73:
                    41:df:ae:c0:c4:7b:48:db:c3:c0:a5:42:5b:df:87:
                    21:46:66:92:d2:45:43:1e:32:a1:d4:3c:94:b8:f1:
                    ed:f5:eb:1a:cb:d3:d2:96:db:23:08:59:25:1e:b5:
                    64:4b:a2:92:bc:6a:78:53:d4:bd:a8:d8:31:dc:81:
                    a6:bd:53:fd:91:46:ff:12:a9:5c:16:0d:a5:3e:e3:
                    12:f4:3a:2f:6f:9c:f9:30:37:de:b6:d4:a1:90:99:
                    1e:76:7a:5d:e5:38:6f:43:c9:35:29:7b:8e:a8:2b:
                    35:34:df:6b:38:2d:c0:b7:6a:69:b5:e9:d5:1e:4f:
                    41:d8:59:54:5f:e5:42:45:ab:a5:9b:b5:85:42:fd:
                    27:1d:54:23:e5:9b:8f:8a:87:33:2c:6c:f6:83:09:
                    b8:1e:d4:23:55:81:60:be:96:9f:59:36:d9:a9:50:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:77:A4:7D:14:D4:59:B4:88:43:AE:65:74:54:62:E9:18:1F:97
            X509v3 Authority Key Identifier:
                keyid:B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2780::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:63:e6:45:37:32:d3:ff:c2:04:6f:8a:67:0a:cd:8c:d3:
         59:b2:0a:7d:a4:0f:4c:00:c1:aa:6e:c0:c6:44:65:b5:3e:87:
         6d:07:02:e2:c9:76:d5:2e:4d:36:f8:e8:3c:dd:09:9b:5b:a9:
         46:04:38:9d:70:2f:54:f4:40:a7:32:ad:74:fb:91:37:d8:b3:
         71:cb:bd:de:d4:33:95:b4:a3:41:89:3e:c4:24:3a:fd:4d:de:
         d2:5f:e4:fd:c7:ee:ae:3d:77:81:a5:3d:af:be:f3:f1:4d:5b:
         18:ab:ca:66:d7:40:6d:6f:e7:04:98:b6:9e:f1:0a:51:a7:38:
         87:fd:5d:e0:4e:ea:98:09:6d:87:4c:bb:1b:31:3d:0b:76:77:
         d7:b6:9c:d8:2b:b9:fc:ee:cb:16:f2:f8:46:b3:ff:b1:9d:06:
         4d:6b:40:5c:7d:72:0a:d6:92:60:99:70:10:f8:de:27:60:84:
         23:f9:fe:63:d0:9a:93:cc:bf:27:4b:d3:2c:97:10:8b:94:c6:
         73:0b:b9:56:a6:7d:89:f3:b3:e3:50:67:91:94:43:02:50:1f:
         d5:70:5c:06:5d:54:3d:a9:69:f2:49:53:40:8a:ba:43:b7:d7:
         f6:2f:ca:8b:18:0c:24:3a:b1:7d:c5:aa:f9:0f:80:68:10:c6:
         1b:25:4a:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT4Je7uj9Hfiejno2kLC9cZHEBcIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI3Qjg1RjAyQzYzQ0Q3NDI3MjFEODVFMzc1RjVBOThD
OTFFRDAwQjAeFw0yNTA1MDcwNzM4MjdaFw0yNjA1MDYwNzQzMjdaMDMxMTAvBgNV
BAMTKDdEQzQ3N0E0N0QxNEQ0NTlCNDg4NDNBRTY1NzQ1NDYyRTkxODFGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiF+AxH5sCXt5w3g9j6h8foRfJ
/ZPvgR/gK9raVccFa+fPqJA4+csJu/KEcHhwFc2Dg89oV9M/yu9KYBGo5wa3zZeR
sPQAjWRu93fRw5pt3L0pQctoo/Tec0HfrsDEe0jbw8ClQlvfhyFGZpLSRUMeMqHU
PJS48e316xrL09KW2yMIWSUetWRLopK8anhT1L2o2DHcgaa9U/2RRv8SqVwWDaU+
4xL0Oi9vnPkwN9621KGQmR52el3lOG9DyTUpe46oKzU032s4LcC3amm16dUeT0HY
WVRf5UJFq6WbtYVC/ScdVCPlm4+KhzMsbPaDCbge1CNVgWC+lp9ZNtmpUHe7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfcR3pH0U1Fm0iEOuZXRUYukYH5cwHwYDVR0j
BBgwFoAUsnuF8CxjzXQnIdheN19amMke0AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj
eUYvMC9CMjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyN0I4NUYwMkM2M0NENzQy
NzIxRDg1RTM3NUY1QTk4QzkxRUQwMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYjdTYWhadFJWQzhQdU1jZ3l6YkFtZVVmVnd5UmNzeFdtSENHRnZwY3lGLzAv
MzIzODMwMzQzYTMyMzczODMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMz
MzkzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQngDANBgkqhkiG9w0BAQsFAAOCAQEAsdNj5kU3
MtP/wgRvimcKzYzTWbIKfaQPTADBqm7AxkRltT6HbQcC4sl21S5NNvjoPN0Jm1up
RgQ4nXAvVPRApzKtdPuRN9izccu93tQzlbSjQYk+xCQ6/U3e0l/k/cfurj13gaU9
r77z8U1bGKvKZtdAbW/nBJi2nvEKUac4h/1d4E7qmAlth0y7GzE9C3Z317ac2Cu5
/O7LFvL4RrP/sZ0GTWtAXH1yCtaSYJlwEPjeJ2CEI/n+Y9Cak8y/J0vTLJcQi5TG
cwu5VqZ9ifOz41BnkZRDAlAf1XBcBl1UPalp8klTQIq6Q7fX9i/KixgMJDqxfcWq
+Q+AaBDGGyVKnA==
-----END CERTIFICATE-----
Generated at Thu May 15 15:51:42 2025 by rpki-client