Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          55eHlnyg9+EHHdQO8si8WTNiE6PIy65cTT6Ax5Hi0hw=
Subject key identifier:   79:64:35:FF:9A:FD:C0:00:DF:5F:D3:11:73:21:8F:39:5C:66:B3:9A
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       4667C683A922CAB3DC713EAEE2AC8B1CA07CDCC4
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:30 +0000
ROA not before:           Fri 02 May 2025 23:09:30 +0000
ROA not after:            Fri 01 May 2026 23:14:30 +0000
asID:                     270764
IP address blocks:        2804:7110:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 04:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:67:c6:83:a9:22:ca:b3:dc:71:3e:ae:e2:ac:8b:1c:a0:7c:dc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:30 2025 GMT
            Not After : May  1 23:14:30 2026 GMT
        Subject: CN=796435FF9AFDC000DF5FD31173218F395C66B39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:ee:9d:c4:e0:f8:52:f3:e9:9f:76:59:c7:
                    da:2a:29:47:60:fe:37:3c:91:8c:d5:b7:89:e3:7c:
                    3d:f2:79:8e:51:be:43:97:8c:f1:38:25:72:49:68:
                    3a:30:d5:ba:f6:eb:2d:6b:23:3e:ec:ca:43:e8:78:
                    73:d9:7e:28:54:58:95:0b:89:d8:bc:d5:42:b6:d2:
                    12:8b:84:0f:e0:f6:e4:43:d0:dd:3e:16:89:3b:6e:
                    97:91:32:7d:c3:21:b5:f7:2c:40:8c:dc:87:dd:fb:
                    f1:16:04:8e:52:fc:15:45:0d:b5:c8:6d:d6:68:6b:
                    05:e5:39:7d:ac:61:b6:f7:09:44:00:e0:7b:55:bb:
                    90:ec:54:b4:03:bc:3c:a3:d1:07:8a:25:af:2e:9f:
                    e9:28:24:42:24:fe:a4:6c:5d:56:59:70:2a:57:f3:
                    27:f6:92:a4:bf:69:45:cb:75:95:65:cc:09:4c:9e:
                    93:3f:35:37:37:ad:ca:ae:c1:47:62:2e:c3:24:c2:
                    ad:3e:8d:38:fe:a1:24:5e:45:27:cc:e2:e2:51:4a:
                    df:4f:97:e4:5d:96:01:5a:d0:fc:c9:fe:c2:da:99:
                    32:b3:02:b3:a4:7f:e6:50:3a:24:72:e4:8a:83:0f:
                    42:fb:a8:44:e4:b9:81:30:70:1b:1b:71:9e:ae:f1:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:35:FF:9A:FD:C0:00:DF:5F:D3:11:73:21:8F:39:5C:66:B3:9A
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a363030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:28:f7:a7:64:32:74:b8:10:01:6b:9b:01:0a:77:9b:77:
         6b:02:a7:83:c5:36:3b:fc:0c:1f:7e:96:60:c8:14:09:3e:5f:
         01:50:6c:dc:80:99:ef:8c:4c:a1:8b:13:7c:7c:aa:1e:cd:00:
         4e:6d:1d:0f:a3:7f:d1:9e:74:21:67:e3:ea:0b:ca:ad:2d:88:
         da:06:a5:7c:28:1d:8b:d6:61:0b:34:72:fc:26:af:03:28:55:
         bb:24:c6:36:00:1d:6f:88:1c:18:30:8b:89:86:74:0e:fd:80:
         d2:77:6a:08:c6:dd:01:a3:8a:3b:b1:88:c0:30:c1:2e:57:26:
         1f:3b:0e:61:95:3b:dd:e1:79:e6:87:ad:a5:3c:5b:09:c5:1d:
         7c:64:6b:a2:18:5b:88:8f:97:30:52:1c:dd:9c:b3:56:42:0a:
         7c:5f:d0:ce:5d:dd:82:77:ce:66:7e:26:77:08:f1:2b:d4:5d:
         fe:e8:b5:f2:45:47:a0:f7:07:2e:f9:ab:c1:3d:ec:5e:55:d4:
         54:07:f7:90:78:63:d1:45:c6:4c:28:81:4a:8c:ad:d1:62:12:
         c2:ed:71:43:00:87:3a:c6:37:00:55:5f:43:41:85:06:10:81:
         aa:5a:af:a2:2b:b2:ae:f5:84:88:29:97:18:06:2e:c1:bc:99:
         e5:7e:5d:bd
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURmfGg6kiyrPccT6u4qyLHKB83MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNTA1MDIyMzA5MzBaFw0yNjA1MDEyMzE0MzBaMDMxMTAvBgNV
BAMTKDc5NjQzNUZGOUFGREMwMDBERjVGRDMxMTczMjE4RjM5NUM2NkIzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5he6dxOD4UvPpn3ZZx9oqKUdg
/jc8kYzVt4njfD3yeY5RvkOXjPE4JXJJaDow1br26y1rIz7sykPoeHPZfihUWJUL
idi81UK20hKLhA/g9uRD0N0+Fok7bpeRMn3DIbX3LECM3Ifd+/EWBI5S/BVFDbXI
bdZoawXlOX2sYbb3CUQA4HtVu5DsVLQDvDyj0QeKJa8un+koJEIk/qRsXVZZcCpX
8yf2kqS/aUXLdZVlzAlMnpM/NTc3rcquwUdiLsMkwq0+jTj+oSReRSfM4uJRSt9P
l+RdlgFa0PzJ/sLamTKzArOkf+ZQOiRy5IqDD0L7qETkuYEwcBsbcZ6u8QVrAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUeWQ1/5r9wADfX9MRcyGPOVxms5owHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEcRBgADANBgkqhkiG9w0BAQsF
AAOCAQEALnUo96dkMnS4EAFrmwEKd5t3awKng8U2O/wMH36WYMgUCT5fAVBs3ICZ
74xMoYsTfHyqHs0ATm0dD6N/0Z50IWfj6gvKrS2I2galfCgdi9ZhCzRy/CavAyhV
uyTGNgAdb4gcGDCLiYZ0Dv2A0ndqCMbdAaOKO7GIwDDBLlcmHzsOYZU73eF55oet
pTxbCcUdfGRrohhbiI+XMFIc3ZyzVkIKfF/Qzl3dgnfOZn4mdwjxK9Rd/ui18kVH
oPcHLvmrwT3sXlXUVAf3kHhj0UXGTCiBSoyt0WISwu1xQwCHOsY3AFVfQ0GFBhCB
qlqvoiuyrvWEiCmXGAYuwbyZ5X5dvQ==
-----END CERTIFICATE-----
Generated at Sun May 11 22:20:41 2025 by rpki-client