Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/323830343a346532343a3a2f33322d313238203d3e20323638323432.roa
File:                     323830343a346532343a3a2f33322d313238203d3e20323638323432.roa (raw, json)
Hash identifier:          iriErFrF/Fh1gGJ2dIXmDd94jeYSIY57aNo8TMul1vM=
Subject key identifier:   72:78:6F:AE:96:F4:86:7D:78:21:B8:38:C6:1B:AB:34:25:B7:9C:9A
Certificate issuer:       /CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
Certificate serial:       396D841A130B119F423390B279162404EB136BDB
Authority key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/323830343a346532343a3a2f33322d313238203d3e20323638323432.roa
Signing time:             Fri 02 May 2025 02:03:57 +0000
ROA not before:           Fri 02 May 2025 01:58:57 +0000
ROA not after:            Fri 01 May 2026 02:03:57 +0000
asID:                     268242
IP address blocks:        2804:4e24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl
                          rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:84:1a:13:0b:11:9f:42:33:90:b2:79:16:24:04:eb:13:6b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
        Validity
            Not Before: May  2 01:58:57 2025 GMT
            Not After : May  1 02:03:57 2026 GMT
        Subject: CN=72786FAE96F4867D7821B838C61BAB3425B79C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:fb:2a:70:91:3e:ca:ff:10:be:eb:13:5e:
                    72:d2:4c:dd:97:59:15:e3:34:ef:7b:c9:70:4c:7a:
                    b4:6a:ab:35:3c:ed:bb:e9:d4:f0:27:de:2f:f2:76:
                    d8:b4:01:fb:72:76:d7:b5:a4:d6:ac:d2:aa:2e:ae:
                    7a:9c:51:2c:87:3e:77:9b:b6:97:ee:c6:f3:4e:cc:
                    d3:12:b2:a1:38:d7:1d:ef:8e:2e:b7:d2:5b:2f:1a:
                    f4:fa:b6:0d:9a:53:5c:7c:3b:36:75:5e:8d:b3:00:
                    a6:e2:67:61:e4:47:be:94:37:b4:f9:cc:19:e3:88:
                    e5:96:ea:29:fe:f9:5e:54:f7:64:09:6d:57:49:ab:
                    73:19:d4:95:44:4f:e5:c2:e1:43:b8:b2:c5:0f:79:
                    8d:23:95:ab:9c:93:92:4c:c7:4e:e4:c2:3b:7b:a7:
                    cd:86:e9:57:6d:7b:28:23:36:65:7d:ca:dd:98:23:
                    3b:45:4d:dc:f1:ba:4b:8f:da:49:8d:52:d1:33:85:
                    c4:17:ad:aa:5d:c9:fe:d9:fe:ff:9d:93:19:bc:07:
                    95:ad:d3:a2:7e:4c:9d:1e:ac:5b:41:99:a5:34:06:
                    92:42:33:61:1b:10:23:6c:5c:a4:3b:3a:11:f5:9f:
                    02:9e:c0:7a:d0:3f:1a:65:66:0b:ab:f5:8a:41:ba:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:78:6F:AE:96:F4:86:7D:78:21:B8:38:C6:1B:AB:34:25:B7:9C:9A
            X509v3 Authority Key Identifier:
                keyid:71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/323830343a346532343a3a2f33322d313238203d3e20323638323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:d9:90:64:28:f1:b8:70:db:bf:65:d5:62:3c:00:35:d7:3f:
         b2:6b:4f:d5:a1:5a:06:c8:88:95:f6:b7:65:75:22:63:79:6e:
         a2:a1:b4:94:d1:94:b5:01:52:83:41:09:02:cf:e8:9e:ae:30:
         47:01:17:ce:08:79:90:69:8d:dc:5c:6f:3a:98:d5:c5:b0:07:
         18:e9:3d:8b:27:96:fe:d3:a4:cc:60:c6:60:d8:6e:db:9c:9a:
         7f:e8:7e:d9:f4:9e:92:a1:84:a5:7c:2e:1d:3f:74:57:83:29:
         fe:2b:e3:ab:2e:d9:f6:ed:ff:e5:12:29:46:5a:e9:1e:04:ba:
         02:3d:7c:5b:3d:9b:37:68:16:58:69:ed:78:4a:74:63:77:94:
         c5:37:cd:24:c7:c0:d7:48:35:e0:91:e7:f1:3c:2d:bf:db:a7:
         95:c2:40:c6:84:27:ef:00:58:34:f1:f2:ed:0b:28:6c:c2:18:
         50:7e:5d:f1:80:a6:6d:23:60:0a:1f:86:e3:e7:be:0b:d3:2f:
         8a:47:3c:2f:d7:ef:8c:88:07:bc:21:c0:85:5e:d2:0d:7b:a5:
         17:fd:0e:22:97:c3:25:5d:ef:3a:49:17:c6:c3:31:41:d0:8b:
         c3:e8:91:68:73:68:59:7c:dd:69:bf:59:b9:91:40:3f:27:72:
         59:7b:ea:31
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOW2EGhMLEZ9CM5CyeRYkBOsTa9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFENjAzMkRCRUIzNTc1MkQwMjIzREMzOTFBREVEQUQw
QUUzQkM1RDAeFw0yNTA1MDIwMTU4NTdaFw0yNjA1MDEwMjAzNTdaMDMxMTAvBgNV
BAMTKDcyNzg2RkFFOTZGNDg2N0Q3ODIxQjgzOEM2MUJBQjM0MjVCNzlDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IvsqcJE+yv8QvusTXnLSTN2X
WRXjNO97yXBMerRqqzU87bvp1PAn3i/ydti0Aftydte1pNas0qournqcUSyHPneb
tpfuxvNOzNMSsqE41x3vji630lsvGvT6tg2aU1x8OzZ1Xo2zAKbiZ2HkR76UN7T5
zBnjiOWW6in++V5U92QJbVdJq3MZ1JVET+XC4UO4ssUPeY0jlauck5JMx07kwjt7
p82G6VdteygjNmV9yt2YIztFTdzxukuP2kmNUtEzhcQXrapdyf7Z/v+dkxm8B5Wt
06J+TJ0erFtBmaU0BpJCM2EbECNsXKQ7OhH1nwKewHrQPxplZgur9YpBugWXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUcnhvrpb0hn14Ibg4xhurNCW3nJowHwYDVR0j
BBgwFoAUcdYDLb6zV1LQIj3Dka3trQrjvF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWQ0azhKTVRTa1NOWHV5R1RzWTNIc21iZXhVdVZ0U0hqRVM1N29GaGNF
V00vMC83MUQ2MDMyREJFQjM1NzUyRDAyMjNEQzM5MUFERURBRDBBRTNCQzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDYwMzJEQkVCMzU3NTJE
MDIyM0RDMzkxQURFREFEMEFFM0JDNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkNGs4Sk1UU2tTTlh1eUdUc1kzSHNtYmV4VXVWdFNIakVTNTdvRmhjRVdNLzAv
MzIzODMwMzQzYTM0NjUzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBE4kMA0GCSqGSIb3DQEBCwUAA4IBAQDl2ZBk
KPG4cNu/ZdViPAA11z+ya0/VoVoGyIiV9rdldSJjeW6iobSU0ZS1AVKDQQkCz+ie
rjBHARfOCHmQaY3cXG86mNXFsAcY6T2LJ5b+06TMYMZg2G7bnJp/6H7Z9J6SoYSl
fC4dP3RXgyn+K+OrLtn27f/lEilGWukeBLoCPXxbPZs3aBZYae14SnRjd5TFN80k
x8DXSDXgkefxPC2/26eVwkDGhCfvAFg08fLtCyhswhhQfl3xgKZtI2AKH4bj574L
0y+KRzwv1++MiAe8IcCFXtINe6UX/Q4il8MlXe86SRfGwzFB0IvD6JFoc2hZfN1p
v1m5kUA/J3JZe+ox
-----END CERTIFICATE-----
Generated at Mon May 12 19:00:20 2025 by rpki-client