Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          6FQ45Y1iziiLIVZlCOpebykCsK+vH+sizYaASdDwryM=
Subject key identifier:   4D:81:FA:8E:F1:1E:79:C3:ED:E0:16:9D:F2:55:DB:84:EF:9F:F9:BC
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       18D2417B4C8449800080D152AD23689A39EA977D
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:30 +0000
ROA not before:           Fri 02 May 2025 23:09:30 +0000
ROA not after:            Fri 01 May 2026 23:14:30 +0000
asID:                     270764
IP address blocks:        2804:7110:5100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d2:41:7b:4c:84:49:80:00:80:d1:52:ad:23:68:9a:39:ea:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:30 2025 GMT
            Not After : May  1 23:14:30 2026 GMT
        Subject: CN=4D81FA8EF11E79C3EDE0169DF255DB84EF9FF9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:1a:d8:88:c2:ef:23:9c:4b:53:3d:35:48:
                    23:d3:33:10:d9:2c:f6:d7:19:40:6f:dd:82:42:13:
                    22:51:cb:0f:69:84:25:1f:71:e7:3a:3b:bb:4c:dc:
                    0a:71:35:b8:53:47:ba:62:2d:30:43:4a:96:b6:57:
                    86:f2:f1:10:62:58:28:26:74:08:4e:46:fb:74:c9:
                    6c:14:c2:51:3d:e8:0d:e9:3e:0b:bb:72:94:cf:74:
                    8c:55:f9:6d:00:b5:1c:75:f2:7c:cc:59:28:14:93:
                    02:57:76:42:00:6c:f6:fc:a1:05:7b:6d:df:0b:c1:
                    61:32:f7:23:8d:b7:46:2f:fc:17:0f:92:9f:d9:72:
                    f4:40:b8:3e:0d:73:13:86:62:6d:2f:d8:10:92:d3:
                    aa:f3:d4:0f:f4:fb:d7:39:97:6c:ab:9e:c2:2e:3b:
                    4d:6e:26:db:a6:e3:47:3c:ad:c5:99:c1:b5:3c:68:
                    65:92:75:7c:b8:dc:24:79:16:26:c8:86:b1:83:39:
                    47:e7:ef:18:8e:cd:0e:49:1c:a4:73:01:4a:b1:2e:
                    ee:fa:87:58:7c:84:d2:20:b7:31:b6:ec:ff:fd:cf:
                    0e:be:7c:6e:10:e7:62:15:3c:28:ad:f6:69:80:0b:
                    0b:c1:f1:4f:f7:f4:e9:b6:ca:e7:69:d8:bf:e2:82:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:FA:8E:F1:1E:79:C3:ED:E0:16:9D:F2:55:DB:84:EF:9F:F9:BC
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a353130303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:d8:32:33:d8:9f:6b:50:13:49:17:01:ff:a8:76:ed:99:
         94:2a:b1:55:d9:90:db:bc:21:9a:36:55:f3:7d:ba:a2:17:73:
         7f:1c:42:a6:bb:cb:cc:1e:f5:57:b4:d4:09:83:8d:26:7d:44:
         4c:a7:6f:f8:3c:54:09:c5:97:27:41:96:45:3f:46:55:38:fe:
         5c:96:8d:b2:2f:2e:26:af:75:89:77:d3:5c:35:19:5c:09:16:
         22:41:4c:70:f2:dd:43:53:fe:06:3d:01:c2:34:05:b1:71:cd:
         cc:88:0e:e7:f4:42:d3:ea:ae:e0:cc:fd:7a:e0:4f:bd:db:93:
         9b:9a:08:ba:ca:73:2b:c7:56:81:c7:ce:86:7f:ca:36:fd:82:
         33:fb:8f:c9:d1:01:db:d9:a7:08:a6:b2:68:5f:8e:c3:e5:16:
         4d:69:66:eb:2a:e0:51:55:57:a6:9e:b1:e2:5f:29:e8:af:70:
         00:86:d3:a6:7f:0d:be:29:37:4f:a8:ea:19:1c:9d:47:30:55:
         e9:71:77:8e:73:48:ed:55:65:fe:8d:ac:94:da:94:08:1b:d5:
         bc:ab:f3:80:57:00:8f:23:17:4d:5a:65:e8:46:90:a7:fc:b7:
         d6:0a:0e:9e:89:d9:3a:9d:20:14:e6:ed:2c:a1:c3:ec:f9:a1:
         55:ea:93:49
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGNJBe0yESYAAgNFSrSNomjnql30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNTA1MDIyMzA5MzBaFw0yNjA1MDEyMzE0MzBaMDMxMTAvBgNV
BAMTKDREODFGQThFRjExRTc5QzNFREUwMTY5REYyNTVEQjg0RUY5RkY5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKhrYiMLvI5xLUz01SCPTMxDZ
LPbXGUBv3YJCEyJRyw9phCUfcec6O7tM3ApxNbhTR7piLTBDSpa2V4by8RBiWCgm
dAhORvt0yWwUwlE96A3pPgu7cpTPdIxV+W0AtRx18nzMWSgUkwJXdkIAbPb8oQV7
bd8LwWEy9yONt0Yv/BcPkp/ZcvRAuD4NcxOGYm0v2BCS06rz1A/0+9c5l2yrnsIu
O01uJtum40c8rcWZwbU8aGWSdXy43CR5FibIhrGDOUfn7xiOzQ5JHKRzAUqxLu76
h1h8hNIgtzG27P/9zw6+fG4Q52IVPCit9mmACwvB8U/39Om2yudp2L/igiR7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTYH6jvEeecPt4Bad8lXbhO+f+bwwHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcRBRMA0GCSqGSIb3DQEBCwUA
A4IBAQCiztgyM9ifa1ATSRcB/6h27ZmUKrFV2ZDbvCGaNlXzfbqiF3N/HEKmu8vM
HvVXtNQJg40mfURMp2/4PFQJxZcnQZZFP0ZVOP5clo2yLy4mr3WJd9NcNRlcCRYi
QUxw8t1DU/4GPQHCNAWxcc3MiA7n9ELT6q7gzP164E+925Obmgi6ynMrx1aBx86G
f8o2/YIz+4/J0QHb2acIprJoX47D5RZNaWbrKuBRVVemnrHiXynor3AAhtOmfw2+
KTdPqOoZHJ1HMFXpcXeOc0jtVWX+jayU2pQIG9W8q/OAVwCPIxdNWmXoRpCn/LfW
Cg6eidk6nSAU5u0socPs+aFV6pNJ
-----END CERTIFICATE-----
Generated at Sun May 11 19:12:32 2025 by rpki-client