Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3a2f33322d313238203d3e20323733363531.roa
File:                     323830343a386132383a3a2f33322d313238203d3e20323733363531.roa (raw, json)
Hash identifier:          t8aizyI9lYaDA6bnIdfnBC8syAVXcvpfv27Bh2mN7Mc=
Subject key identifier:   34:7B:24:3F:BD:EA:2A:CE:78:1D:D9:2F:E1:A1:98:38:6D:63:B4:94
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       79EEFA4AB4DA7B0BF79C03EF251DCF360753A05D
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3a2f33322d313238203d3e20323733363531.roa
Signing time:             Thu 22 May 2025 18:32:54 +0000
ROA not before:           Thu 22 May 2025 18:27:54 +0000
ROA not after:            Thu 21 May 2026 18:32:54 +0000
asID:                     273651
IP address blocks:        2804:8a28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 21:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ee:fa:4a:b4:da:7b:0b:f7:9c:03:ef:25:1d:cf:36:07:53:a0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: May 22 18:27:54 2025 GMT
            Not After : May 21 18:32:54 2026 GMT
        Subject: CN=347B243FBDEA2ACE781DD92FE1A198386D63B494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:68:ae:38:d2:fc:e7:2d:ed:a7:90:13:ec:
                    92:af:97:07:56:4a:88:5e:f1:d2:b5:9d:c4:9c:56:
                    c0:30:76:7f:b9:91:28:6f:21:7e:4d:c3:4d:e4:34:
                    47:59:c9:29:cf:85:94:4b:29:ec:f2:09:23:5f:0b:
                    4a:4f:36:50:1f:4b:47:4b:de:53:6e:b8:96:15:79:
                    21:08:ce:37:7a:71:9a:9c:dd:8b:c1:b9:99:13:51:
                    1c:bd:93:62:4f:d2:66:a2:0b:54:9f:b0:fd:fd:ed:
                    55:23:b8:f6:86:a1:b4:8e:2d:e0:25:bd:1a:2d:ee:
                    be:b9:69:d4:e9:81:bd:91:d1:09:98:63:7c:c9:dd:
                    93:69:a5:fe:f3:da:40:fd:56:26:91:ef:86:a5:79:
                    d8:4c:aa:87:d7:44:99:27:3f:08:88:e4:28:2e:8f:
                    cf:86:42:1e:3f:68:6a:a0:87:1a:92:ce:2b:69:9e:
                    ba:eb:d4:6a:0c:4a:da:85:74:17:93:cc:59:9f:ed:
                    f6:15:cc:af:d7:1c:1e:a1:30:ae:1a:43:03:54:21:
                    58:0b:84:d5:c5:15:d7:fe:db:eb:95:e4:45:86:6a:
                    35:9e:47:ff:07:d5:6c:53:d2:bf:3d:71:07:18:2a:
                    37:76:27:3c:c9:cb:e6:be:3d:88:64:ab:51:e2:ee:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:24:3F:BD:EA:2A:CE:78:1D:D9:2F:E1:A1:98:38:6D:63:B4:94
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/323830343a386132383a3a2f33322d313238203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:5d:ba:94:57:d4:da:16:e9:f8:a9:fa:66:a9:ef:7d:3e:e5:
         33:62:21:02:29:82:a5:9a:97:54:b7:60:61:d8:c4:70:4f:53:
         04:62:b3:8e:5f:ce:96:5d:d7:de:7f:e0:5e:8b:0e:53:87:f3:
         ad:4d:b7:01:25:ff:5d:21:f6:9f:87:e7:39:d8:7f:f5:ae:38:
         90:14:41:eb:7d:77:9f:0d:a0:33:c5:e4:50:44:01:19:cc:38:
         1a:d1:f8:41:47:9b:08:73:a5:db:e6:5e:d7:64:a9:c6:8b:4d:
         75:51:bd:3b:27:97:5f:0c:eb:76:7b:51:33:5d:a5:93:f7:34:
         f5:60:eb:72:46:24:56:13:4d:90:88:70:ba:71:c9:ce:66:a3:
         47:c7:72:71:78:32:04:d4:52:ad:22:06:5d:d9:e2:9a:0b:f8:
         33:97:df:37:bd:79:35:cd:c2:a9:1a:49:56:50:69:74:52:55:
         14:9e:c4:41:45:45:d0:df:83:26:21:ca:bc:56:fd:83:78:ba:
         53:1f:c9:45:e0:87:4f:2e:67:0d:e8:4a:29:f9:ab:0e:b9:97:
         30:4b:4d:f4:c5:77:24:3a:cb:b5:85:e5:52:f3:55:23:cc:8b:
         05:e1:cb:db:a3:36:85:67:ae:80:82:45:82:e3:f0:ab:70:b6:
         40:2f:a1:4d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUee76SrTaewv3nAPvJR3PNgdToF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwMzFCQTZGMEI2NzY5MjcwRjA2NzMzMUZGRkJDRTU1
RDY3OTJFOTAeFw0yNTA1MjIxODI3NTRaFw0yNjA1MjExODMyNTRaMDMxMTAvBgNV
BAMTKDM0N0IyNDNGQkRFQTJBQ0U3ODFERDkyRkUxQTE5ODM4NkQ2M0I0OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklGiuONL85y3tp5AT7JKvlwdW
Sohe8dK1ncScVsAwdn+5kShvIX5Nw03kNEdZySnPhZRLKezyCSNfC0pPNlAfS0dL
3lNuuJYVeSEIzjd6cZqc3YvBuZkTURy9k2JP0maiC1SfsP397VUjuPaGobSOLeAl
vRot7r65adTpgb2R0QmYY3zJ3ZNppf7z2kD9ViaR74aledhMqofXRJknPwiI5Cgu
j8+GQh4/aGqghxqSzitpnrrr1GoMStqFdBeTzFmf7fYVzK/XHB6hMK4aQwNUIVgL
hNXFFdf+2+uV5EWGajWeR/8H1WxT0r89cQcYKjd2JzzJy+a+PYhkq1Hi7vbDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUNHskP73qKs54Hdkv4aGYOG1jtJQwHwYDVR0j
BBgwFoAU/QMbpvC2dpJw8GczH/+85V1nkukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKZzluS1Y4VW9wb0hrUUczNXBKTlhBTEs0Vm9GV3ZBUFRYUHp0S2t3
YlAvMC9GRDAzMUJBNkYwQjY3NjkyNzBGMDY3MzMxRkZGQkNFNTVENjc5MkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMDMxQkE2RjBCNjc2OTI3
MEYwNjczMzFGRkZCQ0U1NUQ2NzkyRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHSmc5bktWOFVvcG9Ia1FHMzVwSk5YQUxLNFZvRld2QVBUWFB6dEtrd2JQLzAv
MzIzODMwMzQzYTM4NjEzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIooMA0GCSqGSIb3DQEBCwUAA4IBAQB7XbqU
V9TaFun4qfpmqe99PuUzYiECKYKlmpdUt2Bh2MRwT1MEYrOOX86WXdfef+Beiw5T
h/OtTbcBJf9dIfafh+c52H/1rjiQFEHrfXefDaAzxeRQRAEZzDga0fhBR5sIc6Xb
5l7XZKnGi011Ub07J5dfDOt2e1EzXaWT9zT1YOtyRiRWE02QiHC6ccnOZqNHx3Jx
eDIE1FKtIgZd2eKaC/gzl983vXk1zcKpGklWUGl0UlUUnsRBRUXQ34MmIcq8Vv2D
eLpTH8lF4IdPLmcN6Eop+asOuZcwS030xXckOsu1heVS81UjzIsF4cvbozaFZ66A
gkWC4/CrcLZAL6FN
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:12:17 2025 by rpki-client