Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
File:                     323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa (raw, json)
Hash identifier:          rakqIuuQ+fQPICPRrTDnV98R6tURbK5FHHU86pMLHc0=
Subject key identifier:   FE:33:59:61:0F:B1:DD:A3:3B:D0:EC:A5:6D:D5:55:DB:D9:AE:81:06
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       66B6968118AAF124DC7982EB4194ECE2E7851203
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa
Signing time:             Tue 06 May 2025 15:18:52 +0000
ROA not before:           Tue 06 May 2025 15:13:52 +0000
ROA not after:            Tue 05 May 2026 15:18:52 +0000
asID:                     61600
IP address blocks:        2801:80:37a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 19:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:96:81:18:aa:f1:24:dc:79:82:eb:41:94:ec:e2:e7:85:12:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: May  6 15:13:52 2025 GMT
            Not After : May  5 15:18:52 2026 GMT
        Subject: CN=FE3359610FB1DDA33BD0ECA56DD555DBD9AE8106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:6c:4e:0d:fd:7f:4a:66:4a:c8:7f:59:1e:
                    92:48:64:b1:c0:26:e4:6b:cc:55:25:d7:7a:fe:e5:
                    47:9d:e3:f3:2c:07:cc:e0:af:6e:af:3f:2a:09:ae:
                    6b:1f:1b:5a:40:21:04:88:78:fe:c3:60:4d:d0:24:
                    d2:ab:3b:fe:13:76:c4:56:ef:cc:4f:ad:ea:b1:13:
                    a6:5a:5d:47:ac:5f:c1:21:9a:cd:8f:15:fc:a3:3a:
                    2a:68:de:96:58:92:36:47:cb:1f:0c:86:22:bf:7d:
                    32:30:8f:c7:5d:82:10:d0:29:8f:a3:5f:79:8e:cb:
                    db:34:2b:89:a5:8e:4d:02:e5:2b:60:9e:30:d7:13:
                    22:8b:a7:66:4f:8e:04:06:bd:48:6c:d7:b6:23:a4:
                    96:80:80:81:9f:14:ac:50:69:c2:70:5b:64:f4:74:
                    8b:62:82:9c:33:77:29:8c:77:13:d2:3f:83:d0:85:
                    7d:98:f2:f8:84:65:ab:96:b8:1a:9c:e4:1f:aa:80:
                    dc:6a:b1:32:12:a7:82:e2:ff:3f:9f:e7:ef:64:46:
                    5f:5a:86:5c:73:ab:15:14:43:25:42:38:00:c3:b0:
                    9b:13:87:5f:89:99:d3:d0:33:64:e0:85:48:7b:aa:
                    73:19:b9:40:cb:51:d7:a7:34:da:ec:82:6e:d4:36:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:59:61:0F:B1:DD:A3:3B:D0:EC:A5:6D:D5:55:DB:D9:AE:81:06
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/323830313a38303a333761303a3a2f34382d3438203d3e203631363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:37a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:b3:37:92:6d:b7:9e:04:0e:19:24:a1:e8:c5:65:41:a3:27:
         9e:53:56:be:e0:ce:66:e1:a9:f4:26:15:8f:23:d1:27:45:da:
         9a:7c:0b:48:d0:d7:c7:20:30:4a:92:e4:b7:92:a0:56:af:c0:
         15:f0:7c:57:c3:3e:d4:55:ef:ad:60:9c:a7:c4:8c:9a:ea:d8:
         15:ea:fd:d5:2b:69:38:e1:a3:d0:a3:b2:e3:ad:7a:7a:d7:d2:
         dc:ec:57:fd:93:30:4a:49:fb:1d:a3:82:02:6f:a1:62:2a:40:
         10:51:ec:63:21:82:84:c5:fe:be:62:48:19:f5:ea:c2:ef:90:
         c9:56:b8:71:c8:07:0f:23:9b:2f:cd:1d:3d:6b:60:2a:02:27:
         d2:6a:49:05:11:44:dc:bf:87:c8:4f:b1:86:09:3f:ba:a6:88:
         13:04:93:35:eb:57:4d:0f:53:0d:6a:a1:b1:2f:78:5a:42:17:
         a4:ee:0f:86:94:36:de:24:82:9a:d8:5a:99:0c:e5:9d:ca:bb:
         10:0a:03:a1:14:7d:4d:34:39:42:58:e6:b7:a1:36:99:20:8a:
         02:68:2f:81:db:60:74:82:8c:15:af:78:e4:69:5d:15:d6:80:
         41:be:dc:06:ae:11:79:0d:2f:ac:af:0c:56:27:9c:49:76:f5:
         dc:1a:01:07
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUZraWgRiq8STceYLrQZTs4ueFEgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2ODdCREZEM0U4RUJBQ0U3RUUxRUE4NEY3RkMxQkIy
NzhCM0NDMzAeFw0yNTA1MDYxNTEzNTJaFw0yNjA1MDUxNTE4NTJaMDMxMTAvBgNV
BAMTKEZFMzM1OTYxMEZCMUREQTMzQkQwRUNBNTZERDU1NURCRDlBRTgxMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXGxODf1/SmZKyH9ZHpJIZLHA
JuRrzFUl13r+5Ued4/MsB8zgr26vPyoJrmsfG1pAIQSIeP7DYE3QJNKrO/4TdsRW
78xPreqxE6ZaXUesX8Ehms2PFfyjOipo3pZYkjZHyx8MhiK/fTIwj8ddghDQKY+j
X3mOy9s0K4mljk0C5StgnjDXEyKLp2ZPjgQGvUhs17YjpJaAgIGfFKxQacJwW2T0
dItigpwzdymMdxPSP4PQhX2Y8viEZauWuBqc5B+qgNxqsTISp4Li/z+f5+9kRl9a
hlxzqxUUQyVCOADDsJsTh1+JmdPQM2TghUh7qnMZuUDLUdenNNrsgm7UNj6HAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/jNZYQ+x3aM70OylbdVV29mugQYwHwYDVR0j
BBgwFoAUzmh739Po66zn7h6oT3/BuyeLPMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5jRzlzMmd1cFg4c0VMa25Yam9UMjYyOFhYVmFtRlJxZ21CYU5YRW1V
WVEvMC9DRTY4N0JERkQzRThFQkFDRTdFRTFFQTg0RjdGQzFCQjI3OEIzQ0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNjg3QkRGRDNFOEVCQUNF
N0VFMUVBODRGN0ZDMUJCMjc4QjNDQzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuY0c5czJndXBYOHNFTGtuWGpvVDI2MjhYWFZhbUZScWdtQmFOWEVtVVlRLzAv
MzIzODMwMzEzYTM4MzAzYTMzMzc2MTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzYzMTM2MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAIA3oDANBgkqhkiG9w0BAQsFAAOCAQEA
lLM3km23ngQOGSSh6MVlQaMnnlNWvuDOZuGp9CYVjyPRJ0XamnwLSNDXxyAwSpLk
t5KgVq/AFfB8V8M+1FXvrWCcp8SMmurYFer91StpOOGj0KOy4616etfS3OxX/ZMw
Skn7HaOCAm+hYipAEFHsYyGChMX+vmJIGfXqwu+QyVa4ccgHDyObL80dPWtgKgIn
0mpJBRFE3L+HyE+xhgk/uqaIEwSTNetXTQ9TDWqhsS94WkIXpO4PhpQ23iSCmtha
mQzlncq7EAoDoRR9TTQ5Qljmt6E2mSCKAmgvgdtgdIKMFa945GldFdaAQb7cBq4R
eQ0vrK8MViecSXb13BoBBw==
-----END CERTIFICATE-----
Generated at Wed May 7 04:11:50 2025 by rpki-client