Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/323830343a366663303a3a2f33322d3438203d3e20323730363832.roa
File:                     323830343a366663303a3a2f33322d3438203d3e20323730363832.roa (raw, json)
Hash identifier:          OWJlw8up1s+eJoW8cvSNusGC+QtaJzc4DFaBuwj8muQ=
Subject key identifier:   A1:4E:94:C0:F9:87:92:33:25:C0:47:1A:DE:FD:B8:E5:D3:4E:AD:47
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       3F1597104D7B43D1E0B95C353A17934C8D497E34
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/323830343a366663303a3a2f33322d3438203d3e20323730363832.roa
Signing time:             Thu 06 Mar 2025 22:13:58 +0000
ROA not before:           Thu 06 Mar 2025 22:08:58 +0000
ROA not after:            Thu 05 Mar 2026 22:13:58 +0000
asID:                     270682
IP address blocks:        2804:6fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl
                          rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 09:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:97:10:4d:7b:43:d1:e0:b9:5c:35:3a:17:93:4c:8d:49:7e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Mar  6 22:08:58 2025 GMT
            Not After : Mar  5 22:13:58 2026 GMT
        Subject: CN=A14E94C0F987923325C0471ADEFDB8E5D34EAD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:7b:1c:48:4e:48:2e:01:39:ec:66:b8:4a:
                    55:3f:57:17:99:9b:1f:9b:e8:ec:22:89:4d:66:f6:
                    c2:60:38:12:0c:39:6d:74:4d:0f:60:19:ea:2f:a0:
                    c3:d8:ca:8c:59:27:7e:58:04:91:22:31:8b:ff:87:
                    41:ca:b7:86:11:ff:06:3e:c8:fc:76:2c:bb:36:04:
                    3a:6e:c3:1a:5f:71:d2:c9:24:3e:f0:4c:99:46:3a:
                    b2:1f:04:85:4e:a7:0a:0a:1f:e5:94:41:81:c1:b7:
                    19:f6:cd:d8:77:46:2c:be:b2:7b:93:20:a5:b9:57:
                    cd:0b:79:05:10:44:f1:cc:cf:bc:62:e3:d1:48:9d:
                    c6:25:95:77:f6:03:f2:5b:77:1f:7f:02:e1:57:56:
                    22:84:56:b6:91:d1:7f:75:51:b4:33:31:cf:bc:13:
                    2c:ec:dd:a0:fe:34:e9:85:64:11:af:35:98:59:27:
                    9c:e3:88:28:75:08:25:79:9d:04:d8:d4:9d:11:6a:
                    ea:f6:31:64:92:84:df:d7:6e:5a:1d:b4:70:6e:4f:
                    76:fd:0a:77:c8:3e:b9:9a:cb:d3:82:cb:bc:9f:d6:
                    c7:32:2a:dd:02:7d:23:ac:6f:ef:56:d5:2f:0d:f6:
                    3e:67:2d:eb:4e:e4:5c:e1:2f:61:bc:d5:2a:6d:43:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:94:C0:F9:87:92:33:25:C0:47:1A:DE:FD:B8:E5:D3:4E:AD:47
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/323830343a366663303a3a2f33322d3438203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:86:1d:9d:e7:5a:63:16:b6:69:f3:f6:bd:a8:ed:76:36:93:
         9a:20:f8:20:49:4a:0b:18:3e:49:71:e5:67:b1:d7:7d:07:fc:
         37:15:c5:62:18:3e:c3:1f:8c:1e:72:e9:10:a2:93:f1:80:dd:
         25:d9:a1:c3:cf:80:99:0d:3a:25:a6:c9:8a:cf:f1:d0:b3:58:
         32:8d:65:d7:6a:7d:11:d8:03:94:ad:70:f6:21:75:05:72:36:
         f3:aa:7a:8f:1f:c1:ab:8f:4d:92:97:d0:87:be:b0:f7:64:fe:
         27:a8:61:2b:76:aa:15:9d:d8:2d:4f:19:b2:f7:36:0d:36:af:
         dd:e9:55:95:24:f1:54:23:99:cc:b8:0d:b5:68:50:00:b0:70:
         e3:e2:20:4c:02:64:21:28:de:c4:a8:a1:f5:0d:b8:d5:7b:8e:
         a1:01:3d:a5:3c:5b:8e:ec:67:a1:32:cf:60:fc:da:94:b8:78:
         21:e1:53:0a:c6:ff:0b:91:e3:10:55:6d:a6:cd:a3:18:b9:f7:
         b9:9a:77:97:4a:40:0f:75:5b:db:81:9c:34:47:bc:e5:fc:ae:
         56:fb:57:bb:62:22:8d:1e:e6:a1:e9:f6:2d:d2:1a:f3:b5:70:
         31:91:20:f5:ee:7f:6e:b3:3f:20:0b:3e:5f:90:eb:fb:02:9d:
         9b:25:64:00
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPxWXEE17Q9HguVw1OheTTI1JfjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZDNkQ4N0MzMzI1NURFNzE4RUY5QTM4QTkyN0M0QzA5
QzVBMkEyNzAeFw0yNTAzMDYyMjA4NThaFw0yNjAzMDUyMjEzNThaMDMxMTAvBgNV
BAMTKEExNEU5NEMwRjk4NzkyMzMyNUMwNDcxQURFRkRCOEU1RDM0RUFENDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/HscSE5ILgE57Ga4SlU/VxeZ
mx+b6OwiiU1m9sJgOBIMOW10TQ9gGeovoMPYyoxZJ35YBJEiMYv/h0HKt4YR/wY+
yPx2LLs2BDpuwxpfcdLJJD7wTJlGOrIfBIVOpwoKH+WUQYHBtxn2zdh3Riy+snuT
IKW5V80LeQUQRPHMz7xi49FIncYllXf2A/Jbdx9/AuFXViKEVraR0X91UbQzMc+8
Eyzs3aD+NOmFZBGvNZhZJ5zjiCh1CCV5nQTY1J0Raur2MWSShN/XblodtHBuT3b9
CnfIPrmay9OCy7yf1scyKt0CfSOsb+9W1S8N9j5nLetO5FzhL2G81SptQ8f3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUoU6UwPmHkjMlwEca3v245dNOrUcwHwYDVR0j
BBgwFoAU/8bYfDMlXecY75o4qSfEwJxaKicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVvZWY4b05RclRDTERGTnZHdVRQWTlzcVh4SzlYWGJINEJtd0FrMTFl
N2IvMS9GRkM2RDg3QzMzMjU1REU3MThFRjlBMzhBOTI3QzRDMDlDNUEyQTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQzZEODdDMzMyNTVERTcx
OEVGOUEzOEE5MjdDNEMwOUM1QTJBMjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1b2VmOG9OUXJUQ0xERk52R3VUUFk5c3FYeEs5WFhiSDRCbXdBazExZTdiLzEv
MzIzODMwMzQzYTM2NjY2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARvwDANBgkqhkiG9w0BAQsFAAOCAQEAE4Ydneda
Yxa2afP2vajtdjaTmiD4IElKCxg+SXHlZ7HXfQf8NxXFYhg+wx+MHnLpEKKT8YDd
Jdmhw8+AmQ06JabJis/x0LNYMo1l12p9EdgDlK1w9iF1BXI286p6jx/Bq49NkpfQ
h76w92T+J6hhK3aqFZ3YLU8Zsvc2DTav3elVlSTxVCOZzLgNtWhQALBw4+IgTAJk
ISjexKih9Q241XuOoQE9pTxbjuxnoTLPYPzalLh4IeFTCsb/C5HjEFVtps2jGLn3
uZp3l0pAD3Vb24GcNEe85fyuVvtXu2IijR7moen2LdIa87VwMZEg9e5/brM/IAs+
X5Dr+wKdmyVkAA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:23:47 2025 by rpki-client