Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa
File:                     323830343a373134303a3a2f33322d3438203d3e20323730373737.roa (raw, json)
Hash identifier:          ioJt2MRoD0ibJ604qh68qCYBnTDIpVYCFqvpZbN4tcs=
Subject key identifier:   28:84:FC:D9:C4:9B:CF:44:8A:29:C2:3E:CF:FE:F5:B8:62:0D:D4:F1
Certificate issuer:       /CN=202D680D4DF230713D515261F90FC214E69FBA3E
Certificate serial:       01F3504DEC9647135DCF1F3A0BA53E048041DFC4
Authority key identifier: 20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa
Signing time:             Tue 06 May 2025 20:12:02 +0000
ROA not before:           Tue 06 May 2025 20:07:02 +0000
ROA not after:            Tue 05 May 2026 20:12:02 +0000
asID:                     270777
IP address blocks:        2804:7140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f3:50:4d:ec:96:47:13:5d:cf:1f:3a:0b:a5:3e:04:80:41:df:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202D680D4DF230713D515261F90FC214E69FBA3E
        Validity
            Not Before: May  6 20:07:02 2025 GMT
            Not After : May  5 20:12:02 2026 GMT
        Subject: CN=2884FCD9C49BCF448A29C23ECFFEF5B8620DD4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:34:fe:d4:5b:8d:d1:40:23:39:20:2e:5c:
                    d6:68:97:f9:40:37:4c:36:1c:ee:de:ca:1a:7a:2a:
                    75:e3:e3:a5:3b:7c:96:0c:b5:d6:d1:d3:b7:cb:0d:
                    77:fb:2e:f0:76:7d:1e:f6:74:39:16:73:17:3b:fd:
                    3a:10:b9:b5:79:bd:08:72:93:86:c1:10:c5:15:70:
                    99:7b:84:b5:71:6c:ab:64:43:f0:01:09:3f:06:f9:
                    1c:76:7e:1e:b6:76:11:46:a6:ae:a7:6a:f1:d9:ad:
                    1d:2e:30:4c:bf:0a:c4:8a:7e:44:a2:2b:81:8b:00:
                    52:54:47:f3:72:11:ec:d2:57:9c:a3:87:0c:f5:41:
                    9a:30:e7:f7:f8:bb:c6:c4:40:c0:26:3e:ad:58:25:
                    82:aa:9e:08:7c:07:29:b6:54:2a:52:34:df:17:34:
                    42:98:07:54:9e:48:0d:f2:a4:49:0e:70:b5:68:73:
                    22:c9:5a:bc:15:d8:c4:e6:89:2a:b9:f2:7a:d0:70:
                    8a:c7:75:34:dc:7a:82:43:98:75:30:aa:ef:59:e0:
                    04:4c:83:1f:f9:e8:86:8e:2c:34:33:b3:ae:3b:f5:
                    01:1f:3e:01:e5:3c:80:f3:13:7a:22:76:36:6c:8e:
                    c5:2f:03:8b:85:9f:dd:a3:a9:28:d4:44:23:68:36:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:FC:D9:C4:9B:CF:44:8A:29:C2:3E:CF:FE:F5:B8:62:0D:D4:F1
            X509v3 Authority Key Identifier:
                keyid:20:2D:68:0D:4D:F2:30:71:3D:51:52:61:F9:0F:C2:14:E6:9F:BA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/202D680D4DF230713D515261F90FC214E69FBA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202D680D4DF230713D515261F90FC214E69FBA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7140::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:6e:10:44:32:a6:65:b9:bb:1c:ca:b7:a4:8d:43:55:ac:
         e3:b7:c7:82:84:63:64:58:d3:b5:1f:a9:fd:8b:ea:72:15:b8:
         bb:9d:8a:fd:97:bd:d6:d0:69:60:7e:af:e9:d0:68:f3:a0:3a:
         56:4b:fa:66:34:59:da:94:a1:d8:bc:77:5a:de:3f:e3:b6:eb:
         56:91:de:9b:32:44:dd:4d:32:0b:55:b5:67:38:31:86:82:ed:
         ed:c8:5a:3c:4e:f6:d0:65:8b:76:2b:36:d8:e8:f2:d4:80:e4:
         8e:f7:90:76:96:3b:13:57:5e:4f:33:29:e2:68:10:e8:13:ae:
         d3:40:70:a3:38:1f:e4:01:28:85:f8:bc:e1:ed:8f:60:20:dc:
         ca:ab:85:a0:b6:c4:61:8d:f2:b2:46:b0:dc:37:09:86:56:f8:
         2c:b2:24:39:35:18:80:e8:61:de:05:81:c6:0b:57:fb:56:ca:
         89:93:ed:41:96:36:a1:b8:4f:05:d9:5d:c0:c1:26:1f:d9:8a:
         4d:bf:55:49:2d:ca:32:57:36:d9:88:23:7f:c4:48:4f:0f:68:
         9b:ab:51:aa:86:94:0e:8a:2c:2a:01:75:d2:10:a2:e5:14:94:
         7d:d5:e1:77:3e:b2:e2:28:2b:87:03:cb:6b:7f:36:47:4a:34:
         83:f5:ab:c9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAfNQTeyWRxNdzx86C6U+BIBB38QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRDY4MEQ0REYyMzA3MTNENTE1MjYxRjkwRkMyMTRF
NjlGQkEzRTAeFw0yNTA1MDYyMDA3MDJaFw0yNjA1MDUyMDEyMDJaMDMxMTAvBgNV
BAMTKDI4ODRGQ0Q5QzQ5QkNGNDQ4QTI5QzIzRUNGRkVGNUI4NjIwREQ0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPTT+1FuN0UAjOSAuXNZol/lA
N0w2HO7eyhp6KnXj46U7fJYMtdbR07fLDXf7LvB2fR72dDkWcxc7/ToQubV5vQhy
k4bBEMUVcJl7hLVxbKtkQ/ABCT8G+Rx2fh62dhFGpq6navHZrR0uMEy/CsSKfkSi
K4GLAFJUR/NyEezSV5yjhwz1QZow5/f4u8bEQMAmPq1YJYKqngh8Bym2VCpSNN8X
NEKYB1SeSA3ypEkOcLVocyLJWrwV2MTmiSq58nrQcIrHdTTceoJDmHUwqu9Z4ARM
gx/56IaOLDQzs6479QEfPgHlPIDzE3oidjZsjsUvA4uFn92jqSjURCNoNoSDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUKIT82cSbz0SKKcI+z/71uGIN1PEwHwYDVR0j
BBgwFoAUIC1oDU3yMHE9UVJh+Q/CFOafuj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzU1SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpi
WGsvMC8yMDJENjgwRDRERjIzMDcxM0Q1MTUyNjFGOTBGQzIxNEU2OUZCQTNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwMkQ2ODBENERGMjMwNzEz
RDUxNTI2MUY5MEZDMjE0RTY5RkJBM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAv
MzIzODMwMzQzYTM3MzEzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxQDANBgkqhkiG9w0BAQsFAAOCAQEAVTpuEEQy
pmW5uxzKt6SNQ1Ws47fHgoRjZFjTtR+p/YvqchW4u52K/Ze91tBpYH6v6dBo86A6
Vkv6ZjRZ2pSh2Lx3Wt4/47brVpHemzJE3U0yC1W1ZzgxhoLt7chaPE720GWLdis2
2Ojy1IDkjveQdpY7E1deTzMp4mgQ6BOu00Bwozgf5AEohfi84e2PYCDcyquFoLbE
YY3yskaw3DcJhlb4LLIkOTUYgOhh3gWBxgtX+1bKiZPtQZY2obhPBdldwMEmH9mK
Tb9VSS3KMlc22Ygjf8RITw9om6tRqoaUDoosKgF10hCi5RSUfdXhdz6y4igrhwPL
a382R0o0g/WryQ==
-----END CERTIFICATE-----
Generated at Tue May 13 12:40:38 2025 by rpki-client