Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/323830343a3661633a3a2f33322d3333203d3e20323632363031.roa
File:                     323830343a3661633a3a2f33322d3333203d3e20323632363031.roa (raw, json)
Hash identifier:          bVJ51Xgk4Od1w28rYgBH1+HLLM5myBZZHXOSJEw0m8o=
Subject key identifier:   9F:7E:75:EA:75:53:E0:20:E1:88:B0:01:BB:DC:A8:65:5C:7E:2B:C3
Certificate issuer:       /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
Certificate serial:       10B1A8E5E3D03D5C20151F7123AA36C061324550
Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/323830343a3661633a3a2f33322d3333203d3e20323632363031.roa
Signing time:             Tue 06 May 2025 20:22:11 +0000
ROA not before:           Tue 06 May 2025 20:17:11 +0000
ROA not after:            Tue 05 May 2026 20:22:11 +0000
asID:                     262601
IP address blocks:        2804:6ac::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl
                          rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 22:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:a8:e5:e3:d0:3d:5c:20:15:1f:71:23:aa:36:c0:61:32:45:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
        Validity
            Not Before: May  6 20:17:11 2025 GMT
            Not After : May  5 20:22:11 2026 GMT
        Subject: CN=9F7E75EA7553E020E188B001BBDCA8655C7E2BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:ea:e6:93:b1:35:33:96:ee:7d:eb:22:2b:
                    1a:2c:59:86:3f:09:52:ce:57:e9:f7:83:a4:a2:e6:
                    79:03:fb:23:5c:14:f1:5c:79:74:41:7e:d2:e3:91:
                    7f:10:90:86:46:69:ef:bf:bf:d8:c6:cd:3e:44:aa:
                    0d:37:70:90:0c:4d:41:33:de:0f:6e:b9:5f:df:f2:
                    75:6c:b8:f2:17:c3:a4:4a:32:f5:87:9a:38:31:49:
                    a0:18:92:e1:01:e8:11:aa:de:59:f1:bb:58:7b:81:
                    f3:c2:d7:fc:99:c3:53:ba:5d:58:f5:3e:e5:a2:81:
                    0a:eb:63:8c:56:e4:e8:46:58:5f:d9:7d:50:2f:8e:
                    ed:41:ac:84:00:fe:07:47:8e:09:03:ad:de:08:bc:
                    92:12:0c:44:a1:77:f0:1a:49:46:4e:5c:cd:25:2a:
                    a1:10:47:71:1b:3f:de:65:03:9c:66:97:19:0c:8d:
                    d8:df:c3:4d:bc:27:e5:cd:dd:ad:59:3b:d4:e1:56:
                    e6:a2:ef:90:f4:b2:99:31:1e:30:4d:f6:9f:f2:fc:
                    c1:2c:50:25:9e:a2:a2:e3:89:5b:e8:43:e2:c8:a9:
                    d8:54:61:a6:9c:32:67:05:c6:bd:58:22:c5:a0:c8:
                    c6:c2:92:0d:3d:cf:09:26:71:ca:84:96:c4:e0:46:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7E:75:EA:75:53:E0:20:E1:88:B0:01:BB:DC:A8:65:5C:7E:2B:C3
            X509v3 Authority Key Identifier:
                keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/323830343a3661633a3a2f33322d3333203d3e20323632363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:36:b9:1d:7d:8e:8d:40:4d:fc:2f:0f:79:36:b3:99:89:80:
         fe:12:1b:aa:73:8a:e9:34:fc:33:8d:d8:48:ec:11:4c:37:0c:
         d2:42:6a:ac:21:53:f6:a3:54:07:49:d9:72:17:4c:bd:a5:73:
         0f:05:93:e7:5c:f4:2e:86:dd:e1:74:b3:7b:95:bd:17:9a:ff:
         78:e9:6a:e2:75:52:f8:73:4a:57:de:5e:2c:89:dd:20:b2:93:
         78:f6:fc:ad:9c:e1:5d:df:2f:6f:d5:fb:0a:95:ff:29:b0:f9:
         dd:37:9c:62:5f:3d:7e:af:07:a8:72:4a:8a:9d:95:a2:8c:31:
         64:c4:5b:7f:55:fd:10:ab:91:e5:cf:23:fa:41:d5:30:f4:c2:
         f8:ba:b9:be:c4:cc:67:b0:38:48:56:4b:f6:9d:84:a1:f4:f0:
         f4:08:cd:7d:73:d1:e4:e7:28:5c:68:08:02:bc:81:8c:26:d8:
         92:a1:86:bf:96:53:09:0e:6c:0a:9d:98:bf:7c:4d:27:a1:ef:
         1c:bd:ac:b4:c0:b8:94:50:83:9e:47:e0:70:ae:69:06:12:0b:
         52:9d:76:23:1c:ab:46:7a:0b:e7:a1:ba:c7:d3:12:b9:d9:0e:
         e4:35:b4:aa:f6:1b:1e:2e:46:c6:aa:f1:9c:a7:3c:07:31:9f:
         56:22:49:be
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUELGo5ePQPVwgFR9xI6o2wGEyRVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZBNURFOTY4MjIwRDY2QTkxNjRDQTNBQTI0Njc3RUY5
QzEyN0VFODAeFw0yNTA1MDYyMDE3MTFaFw0yNjA1MDUyMDIyMTFaMDMxMTAvBgNV
BAMTKDlGN0U3NUVBNzU1M0UwMjBFMTg4QjAwMUJCRENBODY1NUM3RTJCQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIV+rmk7E1M5bufesiKxosWYY/
CVLOV+n3g6Si5nkD+yNcFPFceXRBftLjkX8QkIZGae+/v9jGzT5Eqg03cJAMTUEz
3g9uuV/f8nVsuPIXw6RKMvWHmjgxSaAYkuEB6BGq3lnxu1h7gfPC1/yZw1O6XVj1
PuWigQrrY4xW5OhGWF/ZfVAvju1BrIQA/gdHjgkDrd4IvJISDEShd/AaSUZOXM0l
KqEQR3EbP95lA5xmlxkMjdjfw028J+XN3a1ZO9ThVuai75D0spkxHjBN9p/y/MEs
UCWeoqLjiVvoQ+LIqdhUYaacMmcFxr1YIsWgyMbCkg09zwkmccqElsTgRt57AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUn3516nVT4CDhiLABu9yoZVx+K8MwHwYDVR0j
BBgwFoAUj6XeloIg1mqRZMo6okZ375wSfugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4
TnAvMS84RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQTVERTk2ODIyMEQ2NkE5
MTY0Q0EzQUEyNDY3N0VGOUMxMjdFRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDV0hpb2c4MTJXaEZRdFpEb2lzUTQ5bzJudW1ySnBIbjFWQmlOek5qOE5wLzEv
MzIzODMwMzQzYTM2NjE2MzNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzYzMjM2
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBqwwDQYJKoZIhvcNAQELBQADggEBAGE2uR19jo1A
TfwvD3k2s5mJgP4SG6pziuk0/DON2EjsEUw3DNJCaqwhU/ajVAdJ2XIXTL2lcw8F
k+dc9C6G3eF0s3uVvRea/3jpauJ1UvhzSlfeXiyJ3SCyk3j2/K2c4V3fL2/V+wqV
/ymw+d03nGJfPX6vB6hySoqdlaKMMWTEW39V/RCrkeXPI/pB1TD0wvi6ub7EzGew
OEhWS/adhKH08PQIzX1z0eTnKFxoCAK8gYwm2JKhhr+WUwkObAqdmL98TSeh7xy9
rLTAuJRQg55H4HCuaQYSC1KddiMcq0Z6C+ehusfTErnZDuQ1tKr2Gx4uRsaq8Zyn
PAcxn1YiSb4=
-----END CERTIFICATE-----
Generated at Thu May 15 10:25:14 2025 by rpki-client