Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa
File:                     323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa (raw, json)
Hash identifier:          n1q7nSukNd1AmS3nfievucgho82BJ3RRTri2YhxrnXw=
Subject key identifier:   90:82:13:93:93:55:96:7A:8E:8F:7A:30:4F:05:9F:80:E3:24:E9:16
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       2FD527EE009235922CD74A54E9086D977E9C9DCA
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa
Signing time:             Fri 02 May 2025 13:58:03 +0000
ROA not before:           Fri 02 May 2025 13:53:03 +0000
ROA not after:            Fri 01 May 2026 13:58:03 +0000
asID:                     263641
IP address blocks:        2804:1094:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 15:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d5:27:ee:00:92:35:92:2c:d7:4a:54:e9:08:6d:97:7e:9c:9d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: May  2 13:53:03 2025 GMT
            Not After : May  1 13:58:03 2026 GMT
        Subject: CN=908213939355967A8E8F7A304F059F80E324E916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:b7:a4:c3:a5:be:dc:5c:25:98:a8:6d:22:
                    33:27:72:90:9d:8a:a1:ae:a2:8d:59:a0:3a:ea:37:
                    1a:1b:60:81:08:37:ec:28:35:d2:d0:76:c0:6a:8b:
                    66:ee:c1:08:4c:31:7e:e0:7a:35:e1:b8:da:d0:e6:
                    e1:24:6a:a5:fc:b8:8b:18:69:cb:1f:be:68:9d:cc:
                    cb:a0:44:0f:5c:88:7b:35:db:7e:19:6e:25:30:74:
                    16:f1:8e:6c:58:c6:ad:fc:e0:bd:28:55:d3:f2:f8:
                    91:ed:6f:bb:2d:79:f6:16:05:c8:96:e6:98:66:5f:
                    6a:4b:c5:1e:36:61:65:1e:ca:99:7c:99:06:b8:25:
                    63:c4:e0:b1:8d:46:a0:69:77:2e:84:44:45:40:b9:
                    67:cb:68:20:9d:5c:ca:f6:51:2b:02:69:71:12:f9:
                    ae:fa:15:33:25:3a:27:e2:36:69:07:b4:18:38:bc:
                    a9:6e:b0:73:35:0d:a7:2b:aa:32:47:66:39:97:8a:
                    f1:b1:64:c1:e5:94:51:fc:57:8b:7a:eb:97:92:df:
                    18:c3:67:0b:03:4c:95:ce:bd:30:3f:6f:a8:fd:de:
                    eb:b6:a2:47:43:54:83:29:d8:82:a6:e6:15:07:f0:
                    f0:03:e2:f6:25:d1:7b:5f:01:5d:ed:c8:c8:b7:0e:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:13:93:93:55:96:7A:8E:8F:7A:30:4F:05:9F:80:E3:24:E9:16
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a643030303a3a2f33362d3336203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:ca:20:5c:31:e3:53:9a:3b:8b:cf:0b:75:7b:08:d5:ae:
         a1:1c:c5:1f:3c:21:ad:0e:c2:58:06:c7:eb:53:14:87:3d:ff:
         9f:be:15:39:f8:86:86:32:9f:38:ff:78:df:6c:57:43:c2:95:
         78:d8:f9:dc:52:c6:4a:07:85:da:78:0d:ca:4b:64:18:37:e0:
         b6:45:88:26:9e:78:5b:47:6e:13:f6:b7:ef:5a:ff:e3:9d:ab:
         4c:6d:5f:ab:ef:00:24:44:cc:0f:0e:9c:26:61:cf:69:08:fe:
         e1:cf:ed:6d:f9:90:75:d0:86:1a:04:50:55:7b:dd:39:16:eb:
         00:54:51:86:01:e6:e9:eb:90:df:b2:ab:39:47:10:6c:bb:3e:
         1a:52:bf:b3:3f:ef:32:b0:cb:29:17:de:75:59:3d:fa:7f:61:
         7b:3d:90:29:69:90:f8:30:af:f3:05:00:cb:fb:cb:31:e6:fc:
         2d:9e:12:5b:f9:f0:4f:97:3e:9d:d7:6b:4e:78:4d:df:2f:6a:
         f4:15:fe:09:1f:b0:e4:0a:b4:eb:a1:05:35:f3:63:4b:f4:6b:
         b8:f2:b5:ba:18:98:e9:5e:24:b5:11:86:c7:78:9c:04:88:db:
         b4:ab:b5:48:90:81:a4:26:6c:a2:e6:ad:05:05:e9:34:68:d3:
         38:a8:ef:ba
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL9Un7gCSNZIs10pU6Qhtl36cncowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMjRERDAxQUY1RkIxNDI2OTU5NDQ3Nzg2MzZDNzVE
MjI3NjI4QjAeFw0yNTA1MDIxMzUzMDNaFw0yNjA1MDExMzU4MDNaMDMxMTAvBgNV
BAMTKDkwODIxMzkzOTM1NTk2N0E4RThGN0EzMDRGMDU5RjgwRTMyNEU5MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUrekw6W+3FwlmKhtIjMncpCd
iqGuoo1ZoDrqNxobYIEIN+woNdLQdsBqi2buwQhMMX7gejXhuNrQ5uEkaqX8uIsY
acsfvmidzMugRA9ciHs1234ZbiUwdBbxjmxYxq384L0oVdPy+JHtb7stefYWBciW
5phmX2pLxR42YWUeypl8mQa4JWPE4LGNRqBpdy6EREVAuWfLaCCdXMr2USsCaXES
+a76FTMlOifiNmkHtBg4vKlusHM1DacrqjJHZjmXivGxZMHllFH8V4t665eS3xjD
ZwsDTJXOvTA/b6j93uu2okdDVIMp2IKm5hUH8PAD4vYl0XtfAV3tyMi3Dt7HAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkIITk5NVlnqOj3owTwWfgOMk6RYwHwYDVR0j
BBgwFoAUeRJN0Br1+xQmlZRHeGNsddInYoswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMS83OTEyNEREMDFBRjVGQjE0MjY5NTk0NDc3ODYzNkM3NUQyMjc2MjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MTI0REQwMUFGNUZCMTQy
Njk1OTQ0Nzc4NjM2Qzc1RDIyNzYyOEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzEv
MzIzODMwMzQzYTMxMzAzOTM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEJTQMA0GCSqGSIb3DQEBCwUA
A4IBAQC/osogXDHjU5o7i88LdXsI1a6hHMUfPCGtDsJYBsfrUxSHPf+fvhU5+IaG
Mp84/3jfbFdDwpV42PncUsZKB4XaeA3KS2QYN+C2RYgmnnhbR24T9rfvWv/jnatM
bV+r7wAkRMwPDpwmYc9pCP7hz+1t+ZB10IYaBFBVe905FusAVFGGAebp65Dfsqs5
RxBsuz4aUr+zP+8ysMspF951WT36f2F7PZApaZD4MK/zBQDL+8sx5vwtnhJb+fBP
lz6d12tOeE3fL2r0Ff4JH7DkCrTroQU182NL9Gu48rW6GJjpXiS1EYbHeJwEiNu0
q7VIkIGkJmyi5q0FBek0aNM4qO+6
-----END CERTIFICATE-----
Generated at Fri May 2 15:43:02 2025 by rpki-client