Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa
File:                     323830343a383530343a3a2f33322d313238203d3e20323732353532.roa (raw, json)
Hash identifier:          y034ECcjQFGdspljriDfv9wlYPrIPhMhCAwRfjMiIyw=
Subject key identifier:   AD:0B:FC:FA:C9:DE:03:3B:6A:A9:24:44:F3:37:DD:D2:5D:27:D9:82
Certificate issuer:       /CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
Certificate serial:       676922A979E8941224EB540710F5CBF63743CDC6
Authority key identifier: F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa
Signing time:             Thu 01 May 2025 02:59:05 +0000
ROA not before:           Thu 01 May 2025 02:54:05 +0000
ROA not after:            Thu 30 Apr 2026 02:59:05 +0000
asID:                     272552
IP address blocks:        2804:8504::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl
                          rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:69:22:a9:79:e8:94:12:24:eb:54:07:10:f5:cb:f6:37:43:cd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
        Validity
            Not Before: May  1 02:54:05 2025 GMT
            Not After : Apr 30 02:59:05 2026 GMT
        Subject: CN=AD0BFCFAC9DE033B6AA92444F337DDD25D27D982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:aa:62:71:a8:1a:e5:69:8e:79:3e:d2:8c:
                    06:35:fc:75:61:86:ca:97:02:81:4a:96:91:3c:02:
                    30:90:02:f4:aa:82:af:2c:97:83:ff:86:69:e1:da:
                    ca:1b:7e:de:fb:a0:1d:6e:57:61:07:47:fa:8d:b6:
                    c4:e2:60:64:28:ee:90:29:52:c1:fb:a5:0e:ae:cf:
                    1b:f5:8b:ef:ad:7d:b1:d8:49:26:e8:52:e7:5d:62:
                    2d:a8:1c:5f:01:13:4e:ab:dc:74:b3:8c:ef:33:e7:
                    b9:56:4e:ad:ea:e6:71:22:c5:f0:8c:cb:e8:dc:31:
                    b4:eb:be:22:fe:c5:bf:12:2e:be:9e:b3:ee:73:1e:
                    aa:9d:a6:50:45:cb:bd:ea:f3:12:6e:c3:15:bd:10:
                    b7:81:ca:8a:c5:cc:a5:6e:f6:fe:a7:68:61:95:53:
                    0f:59:1c:84:2f:b7:02:a6:43:1e:ec:aa:71:ee:ee:
                    c0:83:2c:48:3c:5e:2d:86:f8:0f:72:30:fc:8f:4b:
                    44:3b:f9:8a:22:70:e1:58:e2:06:4d:c5:9e:60:b2:
                    4b:f2:8d:95:c5:1e:50:52:b8:77:41:b2:d0:6d:85:
                    8b:42:ee:bd:71:5d:47:a6:d0:06:24:b7:68:2f:08:
                    02:c4:78:be:18:f0:94:cc:1e:4f:ef:f4:df:96:3d:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0B:FC:FA:C9:DE:03:3B:6A:A9:24:44:F3:37:DD:D2:5D:27:D9:82
            X509v3 Authority Key Identifier:
                keyid:F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/323830343a383530343a3a2f33322d313238203d3e20323732353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8504::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:46:5b:55:4c:f6:74:bc:78:1c:96:ee:7f:ac:5c:3e:c9:
         dc:40:ee:16:41:de:d2:40:fd:af:0f:c7:94:3a:e6:88:cf:08:
         4c:d5:51:54:d0:d1:74:b4:f3:b9:83:d2:41:76:b2:7d:6d:4f:
         b4:61:68:08:11:15:64:4b:d7:46:12:68:96:91:70:2d:b6:65:
         2a:ee:08:b0:ee:91:15:1d:b9:26:fb:a4:ef:79:59:b3:5c:e3:
         5b:80:d2:80:1d:6c:24:ab:50:67:a2:ff:ee:55:db:f5:5e:1c:
         94:0a:e8:d4:76:e6:5a:1e:31:5f:70:ca:66:00:09:dc:e2:8d:
         1a:f7:40:54:38:a0:da:22:7f:9f:8a:8a:ac:e9:5d:c8:da:ee:
         bb:85:f9:3a:e5:8f:9f:35:53:a1:ce:91:67:81:a8:35:15:79:
         8d:21:6f:24:ee:a0:90:f9:49:f6:5b:f6:85:af:c1:93:bc:7a:
         2d:59:a4:fe:69:12:16:91:a2:98:fb:3c:89:1b:14:b4:f7:63:
         b2:85:f6:62:b0:7e:1a:91:d6:50:fa:bc:75:9f:c8:45:da:fa:
         e2:12:18:58:1e:1c:75:ed:c1:8c:82:d9:fd:4d:22:e7:d2:ad:
         bb:ac:e7:c5:c2:02:52:a0:fe:00:46:ce:23:85:ba:d2:07:fd:
         47:03:e5:e9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZ2kiqXnolBIk61QHEPXL9jdDzcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDMzdEQjQzNUMzREQwRDI5MTlCMjUyNUZERjY4OERD
Q0I1MzNGRTAeFw0yNTA1MDEwMjU0MDVaFw0yNjA0MzAwMjU5MDVaMDMxMTAvBgNV
BAMTKEFEMEJGQ0ZBQzlERTAzM0I2QUE5MjQ0NEYzMzdEREQyNUQyN0Q5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EKpicaga5WmOeT7SjAY1/HVh
hsqXAoFKlpE8AjCQAvSqgq8sl4P/hmnh2sobft77oB1uV2EHR/qNtsTiYGQo7pAp
UsH7pQ6uzxv1i++tfbHYSSboUuddYi2oHF8BE06r3HSzjO8z57lWTq3q5nEixfCM
y+jcMbTrviL+xb8SLr6es+5zHqqdplBFy73q8xJuwxW9ELeByorFzKVu9v6naGGV
Uw9ZHIQvtwKmQx7sqnHu7sCDLEg8Xi2G+A9yMPyPS0Q7+YoicOFY4gZNxZ5gskvy
jZXFHlBSuHdBstBthYtC7r1xXUem0AYkt2gvCALEeL4Y8JTMHk/v9N+WPTVlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUrQv8+sneAztqqSRE8zfd0l0n2YIwHwYDVR0j
BBgwFoAU88N9tDXD3Q0pGbJSX99ojcy1M/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZOUXE5VnI5NXZ4QUpqRWtZdUtHUEZ4NExCbm81OWd3dVJIMkJlSExV
OFEvMC9GM0MzN0RCNDM1QzNERDBEMjkxOUIyNTI1RkRGNjg4RENDQjUzM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQzM3REI0MzVDM0REMEQy
OTE5QjI1MjVGREY2ODhEQ0NCNTMzRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmTlFxOVZyOTV2eEFKakVrWXVLR1BGeDRMQm5vNTlnd3VSSDJCZUhMVThRLzAv
MzIzODMwMzQzYTM4MzUzMDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIUEMA0GCSqGSIb3DQEBCwUAA4IBAQB+G0Zb
VUz2dLx4HJbuf6xcPsncQO4WQd7SQP2vD8eUOuaIzwhM1VFU0NF0tPO5g9JBdrJ9
bU+0YWgIERVkS9dGEmiWkXAttmUq7giw7pEVHbkm+6TveVmzXONbgNKAHWwkq1Bn
ov/uVdv1XhyUCujUduZaHjFfcMpmAAnc4o0a90BUOKDaIn+fioqs6V3I2u67hfk6
5Y+fNVOhzpFngag1FXmNIW8k7qCQ+Un2W/aFr8GTvHotWaT+aRIWkaKY+zyJGxS0
92OyhfZisH4akdZQ+rx1n8hF2vriEhhYHhx17cGMgtn9TSLn0q27rOfFwgJSoP4A
Rs4jhbrSB/1HA+Xp
-----END CERTIFICATE-----
Generated at Tue May 13 17:52:18 2025 by rpki-client