Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/323830343a373430383a3a2f33322d313238203d3e20323730393534.roa
File:                     323830343a373430383a3a2f33322d313238203d3e20323730393534.roa (raw, json)
Hash identifier:          nZ/Zu3RiLF6uVSVY0XXdMM+rPb7D6KVeFcm8wpdUdfg=
Subject key identifier:   68:C8:2D:52:03:57:D3:01:C2:F9:7B:67:7F:E4:43:29:AE:D4:CB:29
Certificate issuer:       /CN=1FFC457CB13EA536D923B91EC0125BE121DBBCB7
Certificate serial:       3E036038803E9D27E31CF515A8F3271B6895DA98
Authority key identifier: 1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/323830343a373430383a3a2f33322d313238203d3e20323730393534.roa
Signing time:             Mon 28 Apr 2025 14:49:22 +0000
ROA not before:           Mon 28 Apr 2025 14:44:22 +0000
ROA not after:            Mon 27 Apr 2026 14:49:22 +0000
asID:                     270954
IP address blocks:        2804:7408::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.crl
                          rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 12:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:03:60:38:80:3e:9d:27:e3:1c:f5:15:a8:f3:27:1b:68:95:da:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFC457CB13EA536D923B91EC0125BE121DBBCB7
        Validity
            Not Before: Apr 28 14:44:22 2025 GMT
            Not After : Apr 27 14:49:22 2026 GMT
        Subject: CN=68C82D520357D301C2F97B677FE44329AED4CB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:d2:bf:71:3e:86:b4:eb:e9:b9:62:7c:2a:
                    57:e9:47:62:8b:9d:c6:c2:ec:08:b4:7d:19:9e:6c:
                    92:21:3c:ac:14:9d:d2:ae:21:c2:e1:31:78:4f:11:
                    2c:dd:91:c8:a8:e7:f9:f5:e0:3a:d5:a1:e4:da:d7:
                    a0:d6:f9:1d:9a:a4:34:3b:4f:9e:c3:02:35:70:71:
                    8e:87:80:e1:ba:c2:3b:fb:aa:f7:2b:f9:4e:b8:7a:
                    72:41:1d:66:fb:6a:40:35:8d:37:04:d1:0f:0f:8b:
                    a2:a9:53:46:d2:b7:c7:61:04:09:9e:e3:1c:dc:91:
                    55:c6:63:4f:72:b5:41:96:f8:ca:86:10:1c:07:95:
                    66:c7:9e:dd:14:02:2f:60:5b:9f:57:f7:c7:5b:dd:
                    1c:c6:c4:ac:c1:b1:42:08:4f:1f:fc:bb:bc:8f:35:
                    a0:c0:c6:61:da:06:31:58:d0:78:85:bf:a5:02:09:
                    42:05:cc:9d:2d:c1:d9:cd:3f:4e:c6:88:74:04:8b:
                    94:d0:2f:13:b8:3e:fb:b3:2b:7f:d1:04:bf:8c:50:
                    f4:07:5c:3b:62:de:ba:92:ee:f9:2a:68:6c:24:76:
                    22:88:75:0d:70:a9:0f:0a:80:d3:25:8e:29:8d:c6:
                    51:12:d3:55:47:57:0d:df:c6:fa:94:05:a4:e2:3a:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C8:2D:52:03:57:D3:01:C2:F9:7B:67:7F:E4:43:29:AE:D4:CB:29
            X509v3 Authority Key Identifier:
                keyid:1F:FC:45:7C:B1:3E:A5:36:D9:23:B9:1E:C0:12:5B:E1:21:DB:BC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC457CB13EA536D923B91EC0125BE121DBBCB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/323830343a373430383a3a2f33322d313238203d3e20323730393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7408::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:af:56:7d:7f:61:c9:22:ee:4b:ad:c0:24:b7:9e:96:39:
         45:52:46:3b:b9:6d:8a:eb:d8:f1:13:eb:99:4a:4f:aa:d7:b5:
         a0:d7:c4:47:e0:6c:c8:ec:ad:a5:47:5b:ba:3e:c7:a8:62:2e:
         df:0c:83:b2:6a:e9:d0:01:00:c7:d5:38:ee:da:68:0e:e8:12:
         0f:35:3b:2b:d6:4f:58:9d:ae:24:d3:08:aa:1b:ec:db:dc:6f:
         28:1b:8c:cb:04:b3:96:a4:49:ec:34:b2:af:15:dc:02:e4:28:
         d0:6f:c7:43:d3:b0:b5:29:8b:09:fe:26:bb:71:91:f8:b1:5c:
         f9:f1:f5:e9:01:1a:3e:66:1b:91:30:ed:13:21:08:45:d2:ac:
         0e:00:e0:ad:7a:51:ab:fe:db:fc:22:c0:66:3f:30:1a:b2:88:
         a6:64:8f:dc:13:6e:35:00:70:0f:1d:64:e7:67:64:95:ab:1a:
         ee:ad:65:c4:aa:b3:d4:0e:f3:af:0d:bb:cd:4b:98:19:17:89:
         e4:d8:cf:42:4f:62:fe:1b:24:1f:9c:df:1a:75:5f:a1:45:37:
         72:79:af:61:b7:6c:ac:3d:06:be:6f:45:41:64:82:dd:d1:61:
         c8:59:91:07:2e:d3:d2:cd:16:1e:58:7c:11:da:54:a9:6c:19:
         fa:91:50:53
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPgNgOIA+nSfjHPUVqPMnG2iV2pgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGQzQ1N0NCMTNFQTUzNkQ5MjNCOTFFQzAxMjVCRTEy
MURCQkNCNzAeFw0yNTA0MjgxNDQ0MjJaFw0yNjA0MjcxNDQ5MjJaMDMxMTAvBgNV
BAMTKDY4QzgyRDUyMDM1N0QzMDFDMkY5N0I2NzdGRTQ0MzI5QUVENENCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHV9K/cT6GtOvpuWJ8KlfpR2KL
ncbC7Ai0fRmebJIhPKwUndKuIcLhMXhPESzdkcio5/n14DrVoeTa16DW+R2apDQ7
T57DAjVwcY6HgOG6wjv7qvcr+U64enJBHWb7akA1jTcE0Q8Pi6KpU0bSt8dhBAme
4xzckVXGY09ytUGW+MqGEBwHlWbHnt0UAi9gW59X98db3RzGxKzBsUIITx/8u7yP
NaDAxmHaBjFY0HiFv6UCCUIFzJ0twdnNP07GiHQEi5TQLxO4PvuzK3/RBL+MUPQH
XDti3rqS7vkqaGwkdiKIdQ1wqQ8KgNMljimNxlES01VHVw3fxvqUBaTiOpJnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUaMgtUgNX0wHC+Xtnf+RDKa7UyykwHwYDVR0j
BBgwFoAUH/xFfLE+pTbZI7kewBJb4SHbvLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmdFWTY3dlkydldqRWJLQ243TE1vc0oyTHU2d3pZcWVaMVRNa0Q2Mjhy
NUMvMC8xRkZDNDU3Q0IxM0VBNTM2RDkyM0I5MUVDMDEyNUJFMTIxREJCQ0I3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRkM0NTdDQjEzRUE1MzZE
OTIzQjkxRUMwMTI1QkUxMjFEQkJDQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JnRVk2N3ZZMnZXakViS0NuN0xNb3NKMkx1Nnd6WXFlWjFUTWtENjI4cjVDLzAv
MzIzODMwMzQzYTM3MzQzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzOTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHQIMA0GCSqGSIb3DQEBCwUAA4IBAQBhbK9W
fX9hySLuS63AJLeeljlFUkY7uW2K69jxE+uZSk+q17Wg18RH4GzI7K2lR1u6Pseo
Yi7fDIOyaunQAQDH1Tju2mgO6BIPNTsr1k9Yna4k0wiqG+zb3G8oG4zLBLOWpEns
NLKvFdwC5CjQb8dD07C1KYsJ/ia7cZH4sVz58fXpARo+ZhuRMO0TIQhF0qwOAOCt
elGr/tv8IsBmPzAasoimZI/cE241AHAPHWTnZ2SVqxrurWXEqrPUDvOvDbvNS5gZ
F4nk2M9CT2L+GyQfnN8adV+hRTdyea9ht2ysPQa+b0VBZILd0WHIWZEHLtPSzRYe
WHwR2lSpbBn6kVBT
-----END CERTIFICATE-----
Generated at Sun May 11 22:22:57 2025 by rpki-client