Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/323830343a346338303a3a2f33322d3332203d3e20323637333734.roa
File:                     323830343a346338303a3a2f33322d3332203d3e20323637333734.roa (raw, json)
Hash identifier:          f1V06JIIOv1+4Kf+cKvVfqnoXpRXfkqdPluV4G6i6gs=
Subject key identifier:   44:AB:45:EA:63:6F:02:1C:CC:29:CF:61:11:9C:90:5C:32:CC:D3:07
Certificate issuer:       /CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
Certificate serial:       4B46F09B09035EDCC9837AE9F94F8E0AB2529808
Authority key identifier: B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/323830343a346338303a3a2f33322d3332203d3e20323637333734.roa
Signing time:             Wed 07 May 2025 20:25:15 +0000
ROA not before:           Wed 07 May 2025 20:20:15 +0000
ROA not after:            Wed 06 May 2026 20:25:15 +0000
asID:                     267374
IP address blocks:        2804:4c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl
                          rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:46:f0:9b:09:03:5e:dc:c9:83:7a:e9:f9:4f:8e:0a:b2:52:98:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B191F3F408D040D446471CC8A3AEA811CB825DF0
        Validity
            Not Before: May  7 20:20:15 2025 GMT
            Not After : May  6 20:25:15 2026 GMT
        Subject: CN=44AB45EA636F021CCC29CF61119C905C32CCD307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:01:39:c4:20:15:35:b0:5d:b4:1a:a0:48:
                    21:b2:bc:b8:3b:16:66:37:56:25:0a:7a:42:91:cd:
                    9c:7c:04:ab:ae:5c:94:29:2f:a3:ae:3f:11:d7:4f:
                    39:ab:bd:00:c5:72:55:25:88:2d:7a:72:4b:51:35:
                    e4:f3:0a:86:9e:a0:9a:86:71:c4:3c:c6:ce:1a:a9:
                    f7:47:e8:1e:37:d3:9f:b4:20:6e:37:5f:ac:db:18:
                    4b:cc:c0:fd:56:25:16:3e:33:5c:db:29:c7:7a:5b:
                    fc:d2:1a:b5:aa:3c:11:56:40:56:71:2f:64:13:60:
                    a1:54:3a:02:7d:fb:2f:0c:0d:89:4c:9e:43:7a:d6:
                    2a:30:8c:06:f8:ce:0b:9a:b6:91:17:ac:05:11:2b:
                    ad:05:6e:31:cb:68:20:93:59:1b:60:e7:5a:75:6f:
                    88:d6:bb:29:c2:ba:e6:c8:4a:5a:98:17:b3:b5:95:
                    a4:bc:c0:7e:24:da:0b:71:72:7b:a8:41:63:fd:cf:
                    c6:9a:f5:cc:a0:3b:16:b9:af:38:81:d2:55:be:4b:
                    7a:45:75:1a:cc:93:ac:b3:8d:49:e0:a6:c3:27:71:
                    b6:79:16:74:be:cd:e6:a0:e8:53:6b:25:fe:14:19:
                    95:01:23:96:ba:a1:2d:51:61:1a:d9:da:b5:ba:e8:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AB:45:EA:63:6F:02:1C:CC:29:CF:61:11:9C:90:5C:32:CC:D3:07
            X509v3 Authority Key Identifier:
                keyid:B1:91:F3:F4:08:D0:40:D4:46:47:1C:C8:A3:AE:A8:11:CB:82:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/B191F3F408D040D446471CC8A3AEA811CB825DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B191F3F408D040D446471CC8A3AEA811CB825DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwaYAfDeXkDzEPYixwzw3HQtQQBxBgwoSwTAy9CG4jeH/2/323830343a346338303a3a2f33322d3332203d3e20323637333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:24:51:98:c3:d7:9d:a1:a8:2c:95:c4:cc:2f:d2:0a:6c:
         f6:8a:e5:f4:aa:7e:28:57:b7:c7:b3:78:78:04:b3:10:fa:d5:
         59:b5:63:98:f6:90:7a:f1:7d:31:72:55:26:64:af:15:94:38:
         0e:cf:5b:f2:93:30:47:f6:a5:0f:05:e2:98:6d:ca:27:9f:08:
         dd:b7:49:0a:f3:cb:b4:cd:f8:f1:b7:19:69:04:66:d1:dd:c7:
         4c:44:b9:e9:b1:f1:f7:0b:26:b6:17:fa:e4:43:b7:69:9f:bd:
         6d:e3:c3:a0:fe:54:99:69:f5:05:00:22:c3:63:db:60:fc:14:
         83:e9:8c:7d:b7:85:94:fe:9c:db:58:e6:eb:18:36:c9:52:48:
         41:c0:f6:39:13:3e:27:d8:91:c2:69:38:98:66:07:73:6a:64:
         c0:91:cb:69:85:65:59:22:57:ab:0c:c1:26:c1:21:f3:3e:63:
         ed:16:f1:3c:a6:fa:ea:17:fa:a6:b6:5f:1e:72:05:ce:ff:f4:
         ee:1a:4f:d8:9a:1d:29:df:1f:bb:9a:4f:be:01:cb:db:f7:8c:
         2c:4f:24:ef:72:f6:82:76:f9:db:53:23:7f:45:f0:75:a6:89:
         f0:57:21:f0:a7:8f:19:64:b3:90:c5:24:44:b7:76:71:60:35:
         b6:53:03:e3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUS0bwmwkDXtzJg3rp+U+OCrJSmAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE5MUYzRjQwOEQwNDBENDQ2NDcxQ0M4QTNBRUE4MTFD
QjgyNURGMDAeFw0yNTA1MDcyMDIwMTVaFw0yNjA1MDYyMDI1MTVaMDMxMTAvBgNV
BAMTKDQ0QUI0NUVBNjM2RjAyMUNDQzI5Q0Y2MTExOUM5MDVDMzJDQ0QzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtywE5xCAVNbBdtBqgSCGyvLg7
FmY3ViUKekKRzZx8BKuuXJQpL6OuPxHXTzmrvQDFclUliC16cktRNeTzCoaeoJqG
ccQ8xs4aqfdH6B4305+0IG43X6zbGEvMwP1WJRY+M1zbKcd6W/zSGrWqPBFWQFZx
L2QTYKFUOgJ9+y8MDYlMnkN61iowjAb4zguatpEXrAURK60FbjHLaCCTWRtg51p1
b4jWuynCuubISlqYF7O1laS8wH4k2gtxcnuoQWP9z8aa9cygOxa5rziB0lW+S3pF
dRrMk6yzjUngpsMncbZ5FnS+zeag6FNrJf4UGZUBI5a6oS1RYRrZ2rW66DGDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURKtF6mNvAhzMKc9hEZyQXDLM0wcwHwYDVR0j
BBgwFoAUsZHz9AjQQNRGRxzIo66oEcuCXfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXdhWUFmRGVYa0R6RVBZaXh3enczSFF0UVFCeEJnd29Td1RBeTlDRzRq
ZUgvMi9CMTkxRjNGNDA4RDA0MEQ0NDY0NzFDQzhBM0FFQTgxMUNCODI1REYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTFGM0Y0MDhEMDQwRDQ0
NjQ3MUNDOEEzQUVBODExQ0I4MjVERjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3YVlBZkRlWGtEekVQWWl4d3p3M0hRdFFRQnhCZ3dvU3dUQXk5Q0c0amVILzIv
MzIzODMwMzQzYTM0NjMzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMgDANBgkqhkiG9w0BAQsFAAOCAQEAN14kUZjD
152hqCyVxMwv0gps9orl9Kp+KFe3x7N4eASzEPrVWbVjmPaQevF9MXJVJmSvFZQ4
Ds9b8pMwR/alDwXimG3KJ58I3bdJCvPLtM348bcZaQRm0d3HTES56bHx9wsmthf6
5EO3aZ+9bePDoP5UmWn1BQAiw2PbYPwUg+mMfbeFlP6c21jm6xg2yVJIQcD2ORM+
J9iRwmk4mGYHc2pkwJHLaYVlWSJXqwzBJsEh8z5j7RbxPKb66hf6prZfHnIFzv/0
7hpP2JodKd8fu5pPvgHL2/eMLE8k73L2gnb521Mjf0XwdaaJ8Fch8KePGWSzkMUk
RLd2cWA1tlMD4w==
-----END CERTIFICATE-----
Generated at Tue May 13 09:17:27 2025 by rpki-client