Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33322d3332203d3e20323636363233.roa
File:                     323830343a336564343a3a2f33322d3332203d3e20323636363233.roa (raw, json)
Hash identifier:          nWNeXCZ9NH6ANT8UE6Z9k3Vdn4XoNN2TOK1soN9I5oo=
Subject key identifier:   6C:91:B3:7C:52:2A:27:29:4C:94:49:3C:78:90:DA:75:0C:09:EC:99
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       296CE93A647160B0AACBE298559AE8872DD5432B
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33322d3332203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     266623
IP address blocks:        2804:3ed4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:e9:3a:64:71:60:b0:aa:cb:e2:98:55:9a:e8:87:2d:d5:43:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=6C91B37C522A27294C94493C7890DA750C09EC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:3d:63:14:48:04:7b:11:bd:18:92:70:cc:
                    08:5b:ca:21:c4:a9:5a:c3:0b:68:84:9a:28:54:0e:
                    7a:e4:66:fb:b3:3a:80:cf:0e:71:81:fa:4f:e0:d7:
                    3d:4d:fb:f1:96:4a:74:15:36:bf:07:c9:d7:2b:8d:
                    b9:15:11:6f:70:54:a5:3e:71:c3:1e:98:f0:35:42:
                    e8:a1:c2:f0:93:d2:70:c6:a8:1e:39:a0:da:97:6a:
                    f7:9e:94:05:6e:a9:87:b2:d3:c4:be:79:bc:e1:a8:
                    7c:49:ab:94:54:65:20:06:f3:40:65:10:85:86:93:
                    ec:af:e1:79:ae:af:d0:cb:24:97:2c:cb:27:74:26:
                    7b:94:19:98:41:f2:c7:f5:e5:00:20:dd:a0:17:4a:
                    55:87:b6:cf:d8:76:af:85:1d:ee:ed:87:10:e9:26:
                    7a:0b:a4:b8:f5:f5:8c:c2:04:6d:d3:55:5b:8f:24:
                    37:df:a9:fb:d2:48:3d:48:a8:df:db:a7:04:ba:a2:
                    82:91:5d:1d:74:9a:67:f4:02:e3:6c:0d:ce:b2:b1:
                    e9:f4:78:52:b8:32:fc:76:41:80:9e:10:50:99:6d:
                    ef:4e:7d:c2:e8:9c:9e:ad:54:2a:58:0f:33:27:c0:
                    91:e5:9b:57:86:1a:d7:c7:e3:98:21:e6:66:85:88:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:91:B3:7C:52:2A:27:29:4C:94:49:3C:78:90:DA:75:0C:09:EC:99
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a3a2f33322d3332203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:79:87:a3:94:6d:d1:d2:b4:16:83:46:48:d1:31:12:e8:
         95:c7:8f:7a:d0:63:87:af:ac:fd:a2:64:16:58:c3:94:c2:46:
         d7:ea:de:aa:52:84:49:54:65:24:fa:a9:5a:cf:66:7a:80:3d:
         93:45:a4:c3:0e:70:39:83:84:14:61:af:19:2e:42:c1:eb:00:
         8e:d6:c5:56:92:0b:df:7e:f2:38:33:fd:b1:74:f8:17:a2:ea:
         4c:82:56:ac:08:ee:de:fd:f2:2b:c1:d5:07:e7:09:f0:e2:9b:
         d2:9a:61:f3:1e:33:70:6a:b1:55:cd:b7:fd:55:65:cd:a8:f7:
         9f:9d:70:44:00:a8:1b:ce:ed:0e:36:cf:4e:55:da:39:2b:c0:
         6e:e5:bf:71:57:8b:e9:a8:7c:d5:ee:22:49:d3:e8:1d:3d:98:
         86:a9:ee:10:ff:ad:aa:58:00:75:20:5e:5f:6b:c1:0d:eb:2f:
         1f:e7:22:c1:2c:17:4c:8e:cb:2c:39:54:c7:63:71:52:c4:18:
         f3:35:05:5a:f0:01:fc:0f:87:42:d1:77:fe:cd:0f:56:e4:d7:
         0a:ce:68:99:a0:ff:e7:dc:8e:5b:5e:3a:d0:8a:40:34:84:ed:
         2d:02:3d:73:cc:46:19:4d:8f:91:61:c4:94:ee:81:c1:70:b2:
         30:87:7f:0d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKWzpOmRxYLCqy+KYVZrohy3VQyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNTAzMDUxODU1MTJaFw0yNjAzMDQxOTAwMTJaMDMxMTAvBgNV
BAMTKDZDOTFCMzdDNTIyQTI3Mjk0Qzk0NDkzQzc4OTBEQTc1MEMwOUVDOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2D1jFEgEexG9GJJwzAhbyiHE
qVrDC2iEmihUDnrkZvuzOoDPDnGB+k/g1z1N+/GWSnQVNr8HydcrjbkVEW9wVKU+
ccMemPA1QuihwvCT0nDGqB45oNqXaveelAVuqYey08S+ebzhqHxJq5RUZSAG80Bl
EIWGk+yv4Xmur9DLJJcsyyd0JnuUGZhB8sf15QAg3aAXSlWHts/Ydq+FHe7thxDp
JnoLpLj19YzCBG3TVVuPJDffqfvSSD1IqN/bpwS6ooKRXR10mmf0AuNsDc6ysen0
eFK4Mvx2QYCeEFCZbe9OfcLonJ6tVCpYDzMnwJHlm1eGGtfH45gh5maFiNMnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbJGzfFIqJylMlEk8eJDadQwJ7JkwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzYzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+1DANBgkqhkiG9w0BAQsFAAOCAQEAQu95h6OU
bdHStBaDRkjRMRLolcePetBjh6+s/aJkFljDlMJG1+reqlKESVRlJPqpWs9meoA9
k0Wkww5wOYOEFGGvGS5CwesAjtbFVpIL337yODP9sXT4F6LqTIJWrAju3v3yK8HV
B+cJ8OKb0pph8x4zcGqxVc23/VVlzaj3n51wRACoG87tDjbPTlXaOSvAbuW/cVeL
6ah81e4iSdPoHT2YhqnuEP+tqlgAdSBeX2vBDesvH+ciwSwXTI7LLDlUx2NxUsQY
8zUFWvAB/A+HQtF3/s0PVuTXCs5omaD/59yOW1460IpANITtLQI9c8xGGU2PkWHE
lO6BwXCyMId/DQ==
-----END CERTIFICATE-----
Generated at Sat May 10 14:43:43 2025 by rpki-client