Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          dDLLr/0FcygDJApVdTVU5OYpvfGtXZl1/EN28s5i69E=
Subject key identifier:   68:BF:2C:69:E3:CF:70:CD:8B:DA:93:1D:A3:16:C2:85:8A:D3:2F:78
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       36AFC8966F6C25EAA31372DF1CDA2A1552B02F4E
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:09 +0000
ROA not before:           Mon 05 May 2025 12:23:09 +0000
ROA not after:            Mon 04 May 2026 12:28:09 +0000
asID:                     268746
IP address blocks:        2804:5a10::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 17:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:c8:96:6f:6c:25:ea:a3:13:72:df:1c:da:2a:15:52:b0:2f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:09 2025 GMT
            Not After : May  4 12:28:09 2026 GMT
        Subject: CN=68BF2C69E3CF70CD8BDA931DA316C2858AD32F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:aa:c3:63:25:34:97:38:cb:d1:fd:01:fd:
                    69:f4:e6:4d:2e:86:d2:c0:a3:b6:e9:d5:cb:cd:e2:
                    5d:e9:4c:fb:7f:57:54:e7:13:40:d8:3b:25:57:1a:
                    00:5e:93:2b:ed:1c:e5:b6:0f:83:02:bf:c6:e4:67:
                    84:ca:0e:03:ba:7c:17:61:a9:92:28:23:59:f0:ff:
                    7f:ee:34:a3:7e:72:c5:8d:62:d6:6f:41:a6:64:a1:
                    41:2e:c4:32:c7:f5:ef:95:c5:a9:41:eb:8f:0f:93:
                    d6:b1:ee:94:7d:f0:24:60:02:64:b3:9a:a0:64:6a:
                    aa:b4:29:03:d3:2a:8c:90:17:2f:ac:5f:0a:97:c8:
                    83:fd:e7:0d:35:e8:cf:0a:59:12:73:78:aa:1b:47:
                    44:89:07:83:ce:c0:62:74:6a:d1:a6:c2:c5:1e:be:
                    9a:11:eb:df:29:27:cd:a5:17:c9:11:97:14:be:9d:
                    33:a5:a6:fb:b4:5a:36:70:ea:37:ec:56:36:a2:49:
                    6e:fa:af:5d:1e:0e:18:d9:26:32:44:3e:d9:32:26:
                    39:99:2a:06:95:ee:2c:a8:27:36:a8:76:14:fb:42:
                    1b:d6:e2:f2:b9:3f:04:d7:54:d3:bf:08:06:de:9d:
                    e1:c1:10:b0:86:3b:aa:ad:8f:3b:5e:90:1f:05:f7:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:2C:69:E3:CF:70:CD:8B:DA:93:1D:A3:16:C2:85:8A:D3:2F:78
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:7b:31:ad:70:b0:c8:40:3e:46:6d:b0:64:56:10:09:a3:
         bf:a1:51:6f:81:86:2b:b5:c5:69:d5:ce:bf:34:00:8b:b7:0c:
         26:ac:d8:c2:27:96:b3:47:7d:51:0d:60:39:93:f1:20:25:13:
         6b:02:78:40:84:59:f4:43:82:74:2d:26:23:45:44:7e:3d:6f:
         25:7d:15:07:48:82:ed:e8:f1:18:5d:8f:88:08:e4:ed:3e:f7:
         c0:fb:59:aa:77:25:39:ca:78:e6:04:be:dd:9f:ff:67:49:2f:
         d7:ec:be:e4:2a:13:a9:d6:8d:e5:ec:ca:b5:6f:eb:b1:00:77:
         49:14:c7:86:92:4e:a6:5a:e4:6d:56:ea:ab:59:0d:e3:9d:99:
         db:e3:0c:90:ca:3b:42:1c:6b:68:ef:fc:7e:0e:61:a7:a6:12:
         15:0a:95:21:5f:bc:7f:ea:3a:9c:a2:c2:70:17:ab:8e:f5:68:
         59:77:3d:dc:6e:0c:a9:4d:37:aa:b1:30:3d:e9:be:70:18:91:
         f5:18:32:cd:25:06:86:f8:aa:65:8d:84:24:1d:30:35:78:47:
         68:38:b8:ff:e4:f0:9e:ef:d3:16:3a:12:07:cf:f0:a1:c5:82:
         1a:4d:f8:d0:73:92:be:08:e4:a1:8a:da:46:39:a7:e4:01:4f:
         e9:85:f0:c7
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNq/Ilm9sJeqjE3LfHNoqFVKwL04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VD
NDExQzNEQjAeFw0yNTA1MDUxMjIzMDlaFw0yNjA1MDQxMjI4MDlaMDMxMTAvBgNV
BAMTKDY4QkYyQzY5RTNDRjcwQ0Q4QkRBOTMxREEzMTZDMjg1OEFEMzJGNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qarDYyU0lzjL0f0B/Wn05k0u
htLAo7bp1cvN4l3pTPt/V1TnE0DYOyVXGgBekyvtHOW2D4MCv8bkZ4TKDgO6fBdh
qZIoI1nw/3/uNKN+csWNYtZvQaZkoUEuxDLH9e+VxalB648Pk9ax7pR98CRgAmSz
mqBkaqq0KQPTKoyQFy+sXwqXyIP95w016M8KWRJzeKobR0SJB4POwGJ0atGmwsUe
vpoR698pJ82lF8kRlxS+nTOlpvu0WjZw6jfsVjaiSW76r10eDhjZJjJEPtkyJjmZ
KgaV7iyoJzaodhT7QhvW4vK5PwTXVNO/CAbeneHBELCGO6qtjztekB8F9wQFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUaL8saePPcM2L2pMdoxbChYrTL3gwHwYDVR0j
BBgwFoAUmcfVEqP22BBo7x3n+pksPsQRw9swDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VDNDExQzNEQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OUM3RDUxMkEzRjZEODEwNjhF
RjFERTdGQTk5MkMzRUM0MTFDM0RCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4Mzcz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYGKARaEAAwDQYJKoZIhvcNAQELBQADggEBAHizezGtcLDI
QD5GbbBkVhAJo7+hUW+Bhiu1xWnVzr80AIu3DCas2MInlrNHfVENYDmT8SAlE2sC
eECEWfRDgnQtJiNFRH49byV9FQdIgu3o8Rhdj4gI5O0+98D7Wap3JTnKeOYEvt2f
/2dJL9fsvuQqE6nWjeXsyrVv67EAd0kUx4aSTqZa5G1W6qtZDeOdmdvjDJDKO0Ic
a2jv/H4OYaemEhUKlSFfvH/qOpyiwnAXq471aFl3PdxuDKlNN6qxMD3pvnAYkfUY
Ms0lBob4qmWNhCQdMDV4R2g4uP/k8J7v0xY6EgfP8KHFghpN+NBzkr4I5KGK2kY5
p+QBT+mF8Mc=
-----END CERTIFICATE-----
Generated at Sun May 11 09:18:32 2025 by rpki-client