Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa
File:                     323830343a373736343a3a2f33332d3333203d3e20323731313735.roa (raw, json)
Hash identifier:          m5+Ll/Y3WUide/G9BBXv/8qNORbwim57AKLaj+dzMdI=
Subject key identifier:   DF:E3:37:A3:68:14:62:0D:74:2D:02:F5:9D:36:80:84:A6:99:A3:3E
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       358980B025966A953C72079BCFAB58822123E6E2
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa
Signing time:             Fri 25 Apr 2025 11:13:58 +0000
ROA not before:           Fri 25 Apr 2025 11:08:58 +0000
ROA not after:            Fri 24 Apr 2026 11:13:58 +0000
asID:                     271175
IP address blocks:        2804:7764::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 17:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:89:80:b0:25:96:6a:95:3c:72:07:9b:cf:ab:58:82:21:23:e6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Apr 25 11:08:58 2025 GMT
            Not After : Apr 24 11:13:58 2026 GMT
        Subject: CN=DFE337A36814620D742D02F59D368084A699A33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:38:35:39:38:51:7b:4a:1f:26:86:b3:93:
                    4b:6f:97:76:77:89:69:27:d8:3b:41:1f:3b:f7:57:
                    5a:15:f5:e4:81:15:77:b7:ae:e3:b2:4d:b4:20:fa:
                    71:35:ad:df:d0:e2:ef:67:4d:13:7c:d3:85:76:ae:
                    13:9d:85:27:f6:1a:3e:64:ae:cf:b2:d0:5d:6b:27:
                    38:fb:d7:2c:58:3c:f2:8f:e7:b4:e2:d2:c2:70:e9:
                    2f:83:ef:b0:f3:71:fb:9b:78:b9:31:89:f0:2e:91:
                    16:72:c3:e3:52:f1:cc:db:46:bc:5f:fc:5f:92:eb:
                    0b:ff:69:55:8e:79:a0:ef:7c:d5:82:de:f6:97:12:
                    80:ca:a2:80:e7:75:5e:55:ae:61:27:30:f7:45:13:
                    42:9c:d8:08:50:e3:b5:3b:d8:4a:b6:67:bc:f3:bc:
                    63:20:e6:67:0d:fc:55:dd:66:09:d3:1a:e7:e8:eb:
                    ac:6c:40:8b:58:b1:4d:90:0b:ca:a1:c5:a8:db:a3:
                    7c:1d:53:42:70:86:46:8d:dc:1d:73:0f:e8:c0:ec:
                    97:30:a8:ee:c1:3e:26:1a:74:75:3b:8e:e3:75:c2:
                    72:b7:2e:f5:d0:72:6b:0b:de:a5:0f:e2:5b:0e:be:
                    04:da:b5:1b:be:50:74:ae:5a:36:cb:55:37:5e:19:
                    32:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E3:37:A3:68:14:62:0D:74:2D:02:F5:9D:36:80:84:A6:99:A3:3E
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764::/33

    Signature Algorithm: sha256WithRSAEncryption
         1a:a2:74:15:9b:6b:27:bb:12:3f:90:df:d3:7b:09:54:86:26:
         eb:e6:4d:3b:7d:39:09:e8:f0:a2:2f:fd:23:2e:f5:f1:e3:58:
         75:be:0e:e5:9c:21:f9:68:a8:96:69:e4:be:86:2f:4a:f3:1a:
         07:cc:07:f2:07:a2:c7:d6:04:3a:31:40:dd:2b:33:f7:7a:6d:
         34:bb:da:38:91:a1:a2:24:eb:85:be:87:3f:51:72:b3:85:8b:
         ed:6f:9f:b0:8b:82:1b:59:5e:22:51:57:43:9e:af:2d:8d:12:
         00:cd:f7:10:1c:0a:1c:f2:53:4f:a1:c1:b4:c0:4d:f8:6b:1b:
         1b:54:74:87:a7:bd:56:67:23:15:63:96:86:0c:28:c6:e9:86:
         57:58:d4:69:25:d4:be:bd:4c:91:a4:09:aa:a8:13:fc:62:e2:
         02:50:ee:d9:ef:a4:e0:ce:b1:0a:46:bc:16:2c:d9:d3:31:ac:
         54:80:24:6c:19:e0:1a:3f:e2:d2:b6:27:4b:a5:3a:6a:5a:23:
         6e:fe:c7:85:52:4b:bc:f0:79:52:b8:a9:a3:c6:5b:0f:d8:32:
         17:7c:3e:92:88:e8:78:36:3b:9b:aa:a8:5e:b6:a2:71:84:c1:
         eb:34:38:eb:46:e1:af:e8:30:4e:76:a6:f3:c3:51:98:dd:a9:
         51:7f:6b:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNYmAsCWWapU8cgebz6tYgiEj5uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEMkIzMTk0MDYyN0I4REEwRTE0MDVCRkQyODEzREI5
NzcxMUUwQTAeFw0yNTA0MjUxMTA4NThaFw0yNjA0MjQxMTEzNThaMDMxMTAvBgNV
BAMTKERGRTMzN0EzNjgxNDYyMEQ3NDJEMDJGNTlEMzY4MDg0QTY5OUEzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVTg1OThRe0ofJoazk0tvl3Z3
iWkn2DtBHzv3V1oV9eSBFXe3ruOyTbQg+nE1rd/Q4u9nTRN804V2rhOdhSf2Gj5k
rs+y0F1rJzj71yxYPPKP57Ti0sJw6S+D77DzcfubeLkxifAukRZyw+NS8czbRrxf
/F+S6wv/aVWOeaDvfNWC3vaXEoDKooDndV5VrmEnMPdFE0Kc2AhQ47U72Eq2Z7zz
vGMg5mcN/FXdZgnTGufo66xsQItYsU2QC8qhxajbo3wdU0JwhkaN3B1zD+jA7Jcw
qO7BPiYadHU7juN1wnK3LvXQcmsL3qUP4lsOvgTatRu+UHSuWjbLVTdeGTLVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3+M3o2gUYg10LQL1nTaAhKaZoz4wHwYDVR0j
BBgwFoAURtKzGUBie42g4UBb/SgT25dxHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMC80NkQyQjMxOTQwNjI3QjhEQTBFMTQwNUJGRDI4MTNEQjk3NzExRTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2RDJCMzE5NDA2MjdCOERB
MEUxNDA1QkZEMjgxM0RCOTc3MTFFMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzAv
MzIzODMwMzQzYTM3MzczNjM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR3ZAAwDQYJKoZIhvcNAQELBQADggEBABqidBWb
aye7Ej+Q39N7CVSGJuvmTTt9OQno8KIv/SMu9fHjWHW+DuWcIfloqJZp5L6GL0rz
GgfMB/IHosfWBDoxQN0rM/d6bTS72jiRoaIk64W+hz9RcrOFi+1vn7CLghtZXiJR
V0Oery2NEgDN9xAcChzyU0+hwbTATfhrGxtUdIenvVZnIxVjloYMKMbphldY1Gkl
1L69TJGkCaqoE/xi4gJQ7tnvpODOsQpGvBYs2dMxrFSAJGwZ4Bo/4tK2J0ulOmpa
I27+x4VSS7zweVK4qaPGWw/YMhd8PpKI6Hg2O5uqqF62onGEwes0OOtG4a/oME52
pvPDUZjdqVF/a5M=
-----END CERTIFICATE-----
Generated at Thu May 15 03:37:34 2025 by rpki-client