Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
File:                     323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa (raw, json)
Hash identifier:          PLwAi/1vtIyqBQrETNBVOImAVEswTvxScQ4JQ3/wbxs=
Subject key identifier:   A0:4E:0A:20:B3:C6:4E:99:50:10:01:80:B2:BC:84:C0:66:A7:0D:6B
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       6287790BE0D93A62CD552094D9A232C6B5BF4318
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa
Signing time:             Wed 07 May 2025 18:00:00 +0000
ROA not before:           Wed 07 May 2025 17:55:00 +0000
ROA not after:            Wed 06 May 2026 18:00:00 +0000
asID:                     269595
IP address blocks:        2804:66f8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 18:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:87:79:0b:e0:d9:3a:62:cd:55:20:94:d9:a2:32:c6:b5:bf:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: May  7 17:55:00 2025 GMT
            Not After : May  6 18:00:00 2026 GMT
        Subject: CN=3082010A0282010100A624C4A30BF059FE19E2F20B40C6F938CBB5EDB205C3B2C2E88DDF27FBAEE35EA85037E564DBE5EFB8B25AA656257CC20157492689E6DEA9B2624584484EF59DD994DB61FF25A122AD0EF1326AE889133AD52551A3E8FFCFF4374248778A1C02BC8D807701F7FC132792F11D5F37065BAD6A1A68CADC3E4B61839B962BB37A68FC1C723E90A744411907320EE0702A9B586EF78DAABB74EC3194260C01C7A8581DCBFED1AB7D645D35D6EFFEE5C8CE162A57220B982854ACDA085FDC51CF39B9365E08FFD35A2BFCCB2FEE1C259AE51A09CE3CB18D030B2B71DF68E0356D0AE0093CA387ACF7082F6610BC6A11D23229C4635FC0F067E5F6B4AC33B00A25FD6F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:c4:a3:0b:f0:59:fe:19:e2:f2:0b:40:c6:
                    f9:38:cb:b5:ed:b2:05:c3:b2:c2:e8:8d:df:27:fb:
                    ae:e3:5e:a8:50:37:e5:64:db:e5:ef:b8:b2:5a:a6:
                    56:25:7c:c2:01:57:49:26:89:e6:de:a9:b2:62:45:
                    84:48:4e:f5:9d:d9:94:db:61:ff:25:a1:22:ad:0e:
                    f1:32:6a:e8:89:13:3a:d5:25:51:a3:e8:ff:cf:f4:
                    37:42:48:77:8a:1c:02:bc:8d:80:77:01:f7:fc:13:
                    27:92:f1:1d:5f:37:06:5b:ad:6a:1a:68:ca:dc:3e:
                    4b:61:83:9b:96:2b:b3:7a:68:fc:1c:72:3e:90:a7:
                    44:41:19:07:32:0e:e0:70:2a:9b:58:6e:f7:8d:aa:
                    bb:74:ec:31:94:26:0c:01:c7:a8:58:1d:cb:fe:d1:
                    ab:7d:64:5d:35:d6:ef:fe:e5:c8:ce:16:2a:57:22:
                    0b:98:28:54:ac:da:08:5f:dc:51:cf:39:b9:36:5e:
                    08:ff:d3:5a:2b:fc:cb:2f:ee:1c:25:9a:e5:1a:09:
                    ce:3c:b1:8d:03:0b:2b:71:df:68:e0:35:6d:0a:e0:
                    09:3c:a3:87:ac:f7:08:2f:66:10:bc:6a:11:d2:32:
                    29:c4:63:5f:c0:f0:67:e5:f6:b4:ac:33:b0:0a:25:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:0A:20:B3:C6:4E:99:50:10:01:80:B2:BC:84:C0:66:A7:0D:6B
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/323830343a363666383a383030303a3a2f33342d3334203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:fa:85:d4:6b:03:3c:2e:21:61:fc:68:5a:2b:20:1f:78:
         a0:bd:80:4f:fc:35:a0:8c:fa:59:46:06:20:2b:7f:6c:31:2c:
         4c:4e:80:65:63:72:ad:07:c5:20:ea:a5:1a:4f:33:ef:d0:96:
         de:58:a0:12:2f:ac:b8:37:53:16:15:fd:7f:7c:6c:c6:38:61:
         98:32:5f:66:8b:e5:d7:45:c5:5a:d3:ff:8e:5a:e2:ab:a6:10:
         86:19:b5:69:57:c8:57:53:95:00:0a:40:af:c0:6d:db:2c:08:
         a8:64:b8:7a:2f:bd:84:3e:6d:85:c3:18:59:3d:0e:34:3c:ac:
         5b:0e:ec:d8:a3:bb:88:22:34:40:2b:6b:93:30:ff:a8:83:f6:
         bf:e5:de:cc:48:6a:5f:9d:f6:8e:01:08:7c:c7:11:8c:cc:24:
         b2:0a:16:68:d7:a4:0b:29:7c:63:62:00:ef:6c:2a:d4:e8:83:
         63:43:dd:83:e0:88:88:43:0b:67:04:ee:c9:81:8b:87:15:87:
         24:a8:7f:d2:c9:c7:9e:00:25:0a:e8:2e:57:32:4d:61:e4:8b:
         41:e2:d4:ee:44:c5:1b:c2:c5:94:37:6d:8a:23:22:b5:9d:c6:
         5c:8c:e8:9b:00:a4:11:8d:e4:3a:ef:c1:40:40:85:13:83:87:
         08:4c:59:4c
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUYod5C+DZOmLNVSCU2aIyxrW/QxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5QTE1NTQzQTYxRDZFMTlEQzg1QkZFOTkzRjRFMDcz
QzRFNTE5QzAeFw0yNTA1MDcxNzU1MDBaFw0yNjA1MDYxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTYyNEM0QTMwQkYwNTlGRTE5
RTJGMjBCNDBDNkY5MzhDQkI1RURCMjA1QzNCMkMyRTg4RERGMjdGQkFFRTM1RUE4
NTAzN0U1NjREQkU1RUZCOEIyNUFBNjU2MjU3Q0MyMDE1NzQ5MjY4OUU2REVBOUIy
NjI0NTg0NDg0RUY1OUREOTk0REI2MUZGMjVBMTIyQUQwRUYxMzI2QUU4ODkxMzNB
RDUyNTUxQTNFOEZGQ0ZGNDM3NDI0ODc3OEExQzAyQkM4RDgwNzcwMUY3RkMxMzI3
OTJGMTFENUYzNzA2NUJBRDZBMUE2OENBREMzRTRCNjE4MzlCOTYyQkIzN0E2OEZD
MUM3MjNFOTBBNzQ0NDExOTA3MzIwRUUwNzAyQTlCNTg2RUY3OERBQUJCNzRFQzMx
OTQyNjBDMDFDN0E4NTgxRENCRkVEMUFCN0Q2NDVEMzVENkVGRkVFNUM4Q0UxNjJB
NTcyMjBCOTgyODU0QUNEQTA4NUZEQzUxQ0YzOUI5MzY1RTA4RkZEMzVBMkJGQ0NC
MkZFRTFDMjU5QUU1MUEwOUNFM0NCMThEMDMwQjJCNzFERjY4RTAzNTZEMEFFMDA5
M0NBMzg3QUNGNzA4MkY2NjEwQkM2QTExRDIzMjI5QzQ2MzVGQzBGMDY3RTVGNkI0
QUMzM0IwMEEyNUZENkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApiTEowvwWf4Z4vILQMb5OMu17bIFw7LC6I3fJ/uu416oUDflZNvl
77iyWqZWJXzCAVdJJonm3qmyYkWESE71ndmU22H/JaEirQ7xMmroiRM61SVRo+j/
z/Q3Qkh3ihwCvI2AdwH3/BMnkvEdXzcGW61qGmjK3D5LYYObliuzemj8HHI+kKdE
QRkHMg7gcCqbWG73jaq7dOwxlCYMAceoWB3L/tGrfWRdNdbv/uXIzhYqVyILmChU
rNoIX9xRzzm5Nl4I/9NaK/zLL+4cJZrlGgnOPLGNAwsrcd9o4DVtCuAJPKOHrPcI
L2YQvGoR0jIpxGNfwPBn5fa0rDOwCiX9bwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKBOCiCzxk6ZUBABgLK8hMBmpw1rMB8GA1UdIwQYMBaAFHmaFVQ6Ydbhnchb/pk/
Tgc8TlGcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVHRENpcmdoUXZCYUpY
OXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzEvNzk5QTE1NTQzQTYxRDZF
MTlEQzg1QkZFOTkzRjRFMDczQzRFNTE5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83OTlBMTU1NDNBNjFENkUxOURDODVCRkU5OTNGNEUwNzNDNEU1
MTlDLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81R0RDaXJnaFF2QmFKWDlyV2tL
MXdSUGc1QTZRcjk3bzVCZEpiUVRtWWRQNi8xLzMyMzgzMDM0M2EzNjM2NjYzODNh
MzgzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNTM5MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBGb4gDANBgkqhkiG9w0BAQsFAAOCAQEAHyr6hdRrAzwuIWH8aFor
IB94oL2AT/w1oIz6WUYGICt/bDEsTE6AZWNyrQfFIOqlGk8z79CW3ligEi+suDdT
FhX9f3xsxjhhmDJfZovl10XFWtP/jlriq6YQhhm1aVfIV1OVAApAr8Bt2ywIqGS4
ei+9hD5thcMYWT0ONDysWw7s2KO7iCI0QCtrkzD/qIP2v+XezEhqX532jgEIfMcR
jMwksgoWaNekCyl8Y2IA72wq1OiDY0Pdg+CIiEMLZwTuyYGLhxWHJKh/0snHngAl
CuguVzJNYeSLQeLU7kTFG8LFlDdtiiMitZ3GXIzomwCkEY3kOu/BQECFE4OHCExZ
TA==
-----END CERTIFICATE-----
Generated at Sat May 17 23:14:14 2025 by rpki-client