Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
File:                     323830343a333664343a3a2f33322d3332203d3e20323636333735.roa (raw, json)
Hash identifier:          RJp7zT/UqIbbAFgo5FRw/V3hYQ5+VD1clDwIdTKRwG8=
Subject key identifier:   5D:C0:9A:89:4F:C9:3C:F5:4F:B5:B2:82:0F:D1:BA:84:93:A9:42:DE
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       45DD0993A8F754C381F01049A35EAA9D3C353F4A
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:40 +0000
ROA not before:           Wed 30 Apr 2025 18:48:40 +0000
ROA not after:            Wed 29 Apr 2026 18:53:40 +0000
asID:                     266375
IP address blocks:        2804:36d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dd:09:93:a8:f7:54:c3:81:f0:10:49:a3:5e:aa:9d:3c:35:3f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:40 2025 GMT
            Not After : Apr 29 18:53:40 2026 GMT
        Subject: CN=5DC09A894FC93CF54FB5B2820FD1BA8493A942DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:39:f1:7b:9d:db:11:cf:b2:e2:e9:ef:1b:
                    61:f8:45:31:1b:66:ab:c4:0b:74:19:f7:03:b8:c8:
                    54:49:94:46:d8:71:05:c9:91:12:85:58:72:59:47:
                    ed:8f:2c:3d:f7:82:39:27:33:04:3a:70:06:b5:6c:
                    0c:d6:a2:25:c1:2f:87:42:ca:bd:0f:26:60:f1:b5:
                    d3:d6:5f:4c:c0:27:34:8a:69:a8:d2:65:c9:01:a6:
                    ff:42:c5:a6:d6:39:3a:b7:09:f4:6f:56:d1:b5:a2:
                    54:af:de:35:de:81:8c:5b:99:5c:0f:cd:d2:e2:9d:
                    ee:ed:08:5d:c7:66:f6:c6:bd:d8:92:34:02:c5:7e:
                    6c:ef:e7:fc:2f:91:26:cd:d0:3e:77:6a:12:83:a3:
                    10:a7:ef:1b:12:61:85:7a:36:14:e8:82:38:f9:04:
                    36:e5:9b:05:53:8c:40:aa:fb:bb:99:fe:1d:e0:ad:
                    06:6d:67:90:fd:b4:da:2e:bb:09:5d:29:3a:b8:4b:
                    1e:c5:12:61:1d:ba:b3:e9:ec:90:e1:36:2a:6b:c7:
                    b6:fa:c2:08:bf:13:bd:73:ad:9f:ac:cb:2d:06:cf:
                    e6:ec:17:d1:2e:6e:8b:a3:8e:a8:be:1d:cc:dc:7d:
                    18:6f:66:b6:d2:21:ae:45:c0:7b:a8:5b:a3:47:8d:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C0:9A:89:4F:C9:3C:F5:4F:B5:B2:82:0F:D1:BA:84:93:A9:42:DE
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a3a2f33322d3332203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:94:23:d4:62:1b:4f:3d:92:ed:a0:31:58:d9:a1:88:25:9f:
         f1:f4:16:d4:ea:93:42:14:dc:5b:cd:21:32:31:f5:9f:d3:0a:
         2b:82:f7:56:df:4b:6d:5f:ce:f2:1a:42:0c:48:83:3f:1e:d9:
         14:72:02:9c:c9:6c:4b:34:09:8d:37:a5:46:5e:cf:1d:fb:5e:
         86:6e:93:e4:fc:3b:ea:32:15:22:bd:9d:57:33:47:f6:1d:cb:
         30:0f:b5:89:6c:2e:e8:ea:e1:7e:7d:7e:71:a8:9f:5f:c6:c3:
         60:97:19:e5:ef:89:20:85:7a:c9:b2:68:82:d5:a5:9e:d1:a5:
         f0:ad:9e:4b:7d:32:2d:0c:f5:d0:af:4c:87:6c:5f:82:22:30:
         bc:8f:39:1e:99:fb:37:50:74:9c:d9:e9:e8:6d:68:34:15:bc:
         f0:f3:b8:e9:f7:53:86:06:b6:5a:da:2a:19:f1:2d:f7:f7:16:
         aa:5d:59:e8:80:06:c7:4a:5d:11:df:eb:61:bb:17:6a:91:f5:
         4c:f7:7d:04:b7:ea:c3:a7:b2:bf:e5:80:18:7b:df:f3:cf:c1:
         1e:4a:88:11:5e:2a:4c:b3:f4:3c:59:0e:0f:4a:57:b7:89:ee:
         c3:83:b9:a5:db:cb:0d:f5:44:5a:c9:9b:7c:d2:d0:69:74:b0:
         74:5d:30:2c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURd0Jk6j3VMOB8BBJo16qnTw1P0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFNDgzM0JGN0M2QjAyNjhCRjRDM0YxRTIwQzBEQjRF
NDg5N0M3NTAeFw0yNTA0MzAxODQ4NDBaFw0yNjA0MjkxODUzNDBaMDMxMTAvBgNV
BAMTKDVEQzA5QTg5NEZDOTNDRjU0RkI1QjI4MjBGRDFCQTg0OTNBOTQyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHznxe53bEc+y4unvG2H4RTEb
ZqvEC3QZ9wO4yFRJlEbYcQXJkRKFWHJZR+2PLD33gjknMwQ6cAa1bAzWoiXBL4dC
yr0PJmDxtdPWX0zAJzSKaajSZckBpv9CxabWOTq3CfRvVtG1olSv3jXegYxbmVwP
zdLine7tCF3HZvbGvdiSNALFfmzv5/wvkSbN0D53ahKDoxCn7xsSYYV6NhTogjj5
BDblmwVTjECq+7uZ/h3grQZtZ5D9tNouuwldKTq4Sx7FEmEdurPp7JDhNiprx7b6
wgi/E71zrZ+syy0Gz+bsF9Euboujjqi+HczcfRhvZrbSIa5FwHuoW6NHjV7LAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXcCaiU/JPPVPtbKCD9G6hJOpQt4wHwYDVR0j
BBgwFoAUTOSDO/fGsCaL9MPx4gwNtOSJfHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMC80Q0U0ODMzQkY3QzZCMDI2OEJGNEMzRjFFMjBDMERCNEU0ODk3Qzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTQ4MzNCRjdDNkIwMjY4
QkY0QzNGMUUyMEMwREI0RTQ4OTdDNzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzAv
MzIzODMwMzQzYTMzMzY2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ21DANBgkqhkiG9w0BAQsFAAOCAQEACZQj1GIb
Tz2S7aAxWNmhiCWf8fQW1OqTQhTcW80hMjH1n9MKK4L3Vt9LbV/O8hpCDEiDPx7Z
FHICnMlsSzQJjTelRl7PHftehm6T5Pw76jIVIr2dVzNH9h3LMA+1iWwu6Orhfn1+
caifX8bDYJcZ5e+JIIV6ybJogtWlntGl8K2eS30yLQz10K9Mh2xfgiIwvI85Hpn7
N1B0nNnp6G1oNBW88PO46fdThga2WtoqGfEt9/cWql1Z6IAGx0pdEd/rYbsXapH1
TPd9BLfqw6eyv+WAGHvf88/BHkqIEV4qTLP0PFkOD0pXt4nuw4O5pdvLDfVEWsmb
fNLQaXSwdF0wLA==
-----END CERTIFICATE-----
Generated at Sat May 10 07:24:02 2025 by rpki-client