Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a313a3a2f34382d3438203d3e20323639303338.roa
File:                     323830343a356538343a313a3a2f34382d3438203d3e20323639303338.roa (raw, json)
Hash identifier:          kSSRuHPNoxkDFxJZzHHEJUGe/X8QOLsCBskNjpQq3Dk=
Subject key identifier:   63:D8:C6:91:FF:0F:F7:39:53:DF:2D:12:10:A1:CB:D2:3D:C6:8E:DF
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       1242DDEA079ABD2FB404B7A5AC8D456B6624C2B8
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a313a3a2f34382d3438203d3e20323639303338.roa
Signing time:             Mon 05 May 2025 13:04:22 +0000
ROA not before:           Mon 05 May 2025 12:59:22 +0000
ROA not after:            Mon 04 May 2026 13:04:22 +0000
asID:                     269038
IP address blocks:        2804:5e84:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:42:dd:ea:07:9a:bd:2f:b4:04:b7:a5:ac:8d:45:6b:66:24:c2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: May  5 12:59:22 2025 GMT
            Not After : May  4 13:04:22 2026 GMT
        Subject: CN=63D8C691FF0FF73953DF2D1210A1CBD23DC68EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:20:11:c3:2f:34:27:54:03:7c:98:f2:60:
                    63:32:b0:9b:08:ba:55:6b:1e:d8:62:a5:ea:1d:66:
                    96:91:1d:ec:4c:0d:40:48:1f:cf:57:51:ba:0a:ac:
                    23:a6:70:93:ad:5d:f0:a0:2a:5f:07:f3:8d:96:72:
                    5e:5b:94:3d:ca:5c:cf:5a:75:13:31:ef:65:04:85:
                    fe:5c:e0:b5:c5:0f:c2:5c:d4:18:5f:e6:e1:2f:36:
                    7d:d6:28:5a:b7:08:58:7d:f8:db:fb:e9:a5:64:f3:
                    30:b6:0b:04:58:0e:d0:08:7d:ae:b6:fe:86:4e:6b:
                    ba:bf:a6:48:b4:1e:17:67:4b:9e:0b:ff:f1:fd:40:
                    4c:c9:87:bf:f2:a0:d5:77:e1:74:e8:1b:a2:04:66:
                    82:25:57:09:fd:8f:e9:5c:68:e4:08:64:5f:c8:73:
                    39:3e:e1:eb:64:85:e4:2e:db:a4:39:f5:fc:49:aa:
                    a3:b3:8b:c7:f0:09:65:8d:19:d9:9f:56:56:d2:51:
                    6c:89:59:1a:95:07:65:1e:a3:08:33:8a:1c:23:6d:
                    eb:0c:be:30:8f:d6:d3:f8:82:19:fc:55:8c:e9:4a:
                    4b:88:e4:81:34:0a:cd:7c:4b:4a:b2:78:56:f9:2e:
                    44:15:16:af:ff:8f:7e:71:a6:62:5c:ff:79:31:34:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:C6:91:FF:0F:F7:39:53:DF:2D:12:10:A1:CB:D2:3D:C6:8E:DF
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a313a3a2f34382d3438203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:fb:aa:b6:6f:62:86:ff:fc:21:9c:93:ef:4b:a5:91:d4:
         07:d8:83:c0:b7:72:07:6b:3a:51:c4:74:05:f7:23:5c:78:9a:
         c1:c1:46:23:dc:8c:1c:e4:e3:43:43:60:25:8f:fe:54:d8:55:
         ee:8d:90:23:07:ce:a3:3e:28:5a:1e:67:3f:ce:c0:af:dc:f5:
         d7:81:a1:07:73:4c:62:c0:af:ae:52:6c:76:82:6e:37:d6:8f:
         0d:4c:bb:c3:bc:38:3c:2e:18:b6:ac:35:9b:18:2b:a4:7c:b4:
         e1:59:4d:7b:07:0e:8a:92:51:85:81:83:f5:63:d9:d2:4b:e2:
         7b:35:d1:fb:47:a8:e3:54:98:bd:6b:6d:02:eb:6e:91:bc:7b:
         ce:80:90:c4:2d:ba:5d:5c:b4:d5:fa:76:10:9a:ee:50:44:29:
         f1:62:ca:a8:1b:5c:0f:eb:a9:4a:20:ff:69:77:d5:69:d4:1b:
         6f:c5:f8:51:e0:50:ad:0e:07:42:d0:2c:01:44:b2:e4:23:3c:
         81:42:63:61:4c:2f:66:0e:42:0e:b9:c1:8f:30:d1:1b:0b:87:
         79:75:dc:63:ae:26:ab:be:7f:42:8c:e5:b1:ff:96:61:f5:41:
         7c:41:d6:24:c0:3c:05:e3:aa:4c:9a:22:c4:b3:2c:10:bc:51:
         89:70:11:bb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUEkLd6geavS+0BLelrI1Fa2YkwrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNjQwRDQwQTk4QkVERUIzRkFDOTU1MTEzODc2QzBC
MDRGRUU2MjAeFw0yNTA1MDUxMjU5MjJaFw0yNjA1MDQxMzA0MjJaMDMxMTAvBgNV
BAMTKDYzRDhDNjkxRkYwRkY3Mzk1M0RGMkQxMjEwQTFDQkQyM0RDNjhFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqESARwy80J1QDfJjyYGMysJsI
ulVrHthipeodZpaRHexMDUBIH89XUboKrCOmcJOtXfCgKl8H842Wcl5blD3KXM9a
dRMx72UEhf5c4LXFD8Jc1Bhf5uEvNn3WKFq3CFh9+Nv76aVk8zC2CwRYDtAIfa62
/oZOa7q/pki0HhdnS54L//H9QEzJh7/yoNV34XToG6IEZoIlVwn9j+lcaOQIZF/I
czk+4etkheQu26Q59fxJqqOzi8fwCWWNGdmfVlbSUWyJWRqVB2UeowgzihwjbesM
vjCP1tP4ghn8VYzpSkuI5IE0Cs18S0qyeFb5LkQVFq//j35xpmJc/3kxNHtfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUY9jGkf8P9zlT3y0SEKHL0j3Gjt8wHwYDVR0j
BBgwFoAUfPZA1AqYvt6z+slVETh2wLBP7mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVKVDdqdW9VNldGN2s1TW9wTGFqNkczTHZSeUNWZDlGQ3R4RkE0TGFl
Q1YvMC83Q0Y2NDBENDBBOThCRURFQjNGQUM5NTUxMTM4NzZDMEIwNEZFRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjY0MEQ0MEE5OEJFREVC
M0ZBQzk1NTExMzg3NkMwQjA0RkVFNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVSlQ3anVvVTZXRjdrNU1vcExhajZHM0x2UnlDVmQ5RkN0eEZBNExhZUNWLzAv
MzIzODMwMzQzYTM1NjUzODM0M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzOTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEXoQAATANBgkqhkiG9w0BAQsFAAOCAQEA
h3r7qrZvYob//CGck+9LpZHUB9iDwLdyB2s6UcR0BfcjXHiawcFGI9yMHOTjQ0Ng
JY/+VNhV7o2QIwfOoz4oWh5nP87Ar9z114GhB3NMYsCvrlJsdoJuN9aPDUy7w7w4
PC4Ytqw1mxgrpHy04VlNewcOipJRhYGD9WPZ0kviezXR+0eo41SYvWttAutukbx7
zoCQxC26XVy01fp2EJruUEQp8WLKqBtcD+upSiD/aXfVadQbb8X4UeBQrQ4HQtAs
AUSy5CM8gUJjYUwvZg5CDrnBjzDRGwuHeXXcY64mq75/Qozlsf+WYfVBfEHWJMA8
BeOqTJoixLMsELxRiXARuw==
-----END CERTIFICATE-----
Generated at Mon May 12 20:48:59 2025 by rpki-client