Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
File:                     323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa (raw, json)
Hash identifier:          gRQrkqlu1Pc6+vv5g2xJtCS7Hp6SWhg+wlZy0Ja/kJQ=
Subject key identifier:   D7:29:8E:7F:C1:7D:8B:C3:E0:DB:3F:D4:9D:10:13:3A:2D:53:62:84
Certificate issuer:       /CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
Certificate serial:       3CC56C8F723918839F81A53039BC08A25C21A289
Authority key identifier: FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
Signing time:             Tue 08 Apr 2025 16:44:52 +0000
ROA not before:           Tue 08 Apr 2025 16:39:52 +0000
ROA not after:            Tue 07 Apr 2026 16:44:52 +0000
asID:                     271137
IP address blocks:        2804:76d4:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 20:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:6c:8f:72:39:18:83:9f:81:a5:30:39:bc:08:a2:5c:21:a2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
        Validity
            Not Before: Apr  8 16:39:52 2025 GMT
            Not After : Apr  7 16:44:52 2026 GMT
        Subject: CN=D7298E7FC17D8BC3E0DB3FD49D10133A2D536284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:34:eb:d5:98:70:f9:5d:43:95:32:49:52:
                    3d:ef:a0:29:f9:a2:4c:93:6e:5d:24:d0:9a:76:d9:
                    8a:29:8d:d1:ed:a3:de:92:d1:68:9e:0d:bd:df:2b:
                    0e:cf:24:6b:48:44:3b:8d:57:4a:be:8b:fa:f3:3f:
                    64:1a:b6:6e:74:49:7e:4a:90:93:d5:14:b0:32:e6:
                    06:7b:99:66:e7:8a:b7:30:62:05:0d:03:52:bd:4c:
                    a9:97:aa:71:79:ca:9a:30:41:a3:ab:1b:65:cc:c4:
                    6e:b3:92:5b:ab:d0:f4:0a:be:a9:aa:e1:30:af:f0:
                    49:f7:eb:88:c5:65:01:c7:40:e4:4e:a3:ca:20:7c:
                    f5:42:75:26:fa:44:80:84:56:e8:ee:9c:21:f7:70:
                    5f:e3:d2:ae:61:c3:91:52:39:82:65:e5:5a:96:cb:
                    32:1f:0e:be:7c:3f:1a:f2:66:93:79:6c:10:3c:f9:
                    9d:c0:61:76:b5:14:de:f2:75:7a:b1:68:bd:7b:57:
                    9b:9d:b8:80:fa:50:8a:ad:66:3a:53:f3:e8:a1:44:
                    80:88:e4:0f:05:46:86:66:e3:0e:2a:3a:bf:cc:33:
                    4c:62:72:25:72:1a:01:05:0c:0b:c8:bb:bc:b3:45:
                    c5:b8:64:ca:f3:2e:88:2e:7a:7e:50:27:3e:1c:dd:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:29:8E:7F:C1:7D:8B:C3:E0:DB:3F:D4:9D:10:13:3A:2D:53:62:84
            X509v3 Authority Key Identifier:
                keyid:FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d4:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:e3:8a:89:4b:f0:3c:f9:98:f8:cb:fa:05:99:8a:c9:2f:
         1c:97:5c:9e:1e:91:cc:da:e5:28:e9:e7:9d:97:85:90:ff:b0:
         18:4b:c3:c5:73:27:f0:31:89:79:f7:db:02:1c:2e:70:73:7b:
         82:6e:af:cd:68:54:fb:08:d8:ad:97:82:f5:13:8c:d5:11:b0:
         c4:b5:03:a1:d0:9d:0a:48:b1:08:f9:70:d0:ff:dd:db:68:0d:
         8a:52:e7:06:65:cc:50:ca:38:3f:62:f9:63:58:64:be:19:74:
         d2:73:8b:13:b7:5d:a7:c8:99:f2:c5:c4:b2:84:67:a8:c3:d1:
         ca:24:85:8e:4b:06:42:0f:c5:1c:7f:65:0e:fa:58:93:a5:78:
         b7:7f:21:e4:ed:d8:5a:dd:90:0c:6c:6e:0a:04:b0:ff:4b:49:
         aa:22:21:8e:33:b8:7b:e7:72:03:63:75:42:4c:e4:47:ba:f6:
         be:a7:dc:b9:7d:3e:8b:b8:5c:dc:4a:d8:ac:4e:35:ae:ab:77:
         4d:67:98:1b:e3:97:1e:30:c7:40:15:ce:bc:31:93:50:d4:6a:
         a2:42:d1:85:b4:7e:8d:a0:ec:fc:25:45:66:82:f4:e9:7b:54:
         42:d0:b5:c9:23:43:f2:b9:9d:b4:3d:13:67:14:4d:36:74:ba:
         d0:a3:66:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPMVsj3I5GIOfgaUwObwIolwhookwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM4MDU0QzEzRTMzRDM0QTJBQ0QzNDE3QUVDNkVGMDMw
Q0Y1MkM2OTAeFw0yNTA0MDgxNjM5NTJaFw0yNjA0MDcxNjQ0NTJaMDMxMTAvBgNV
BAMTKEQ3Mjk4RTdGQzE3RDhCQzNFMERCM0ZENDlEMTAxMzNBMkQ1MzYyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnDTr1Zhw+V1DlTJJUj3voCn5
okyTbl0k0Jp22YopjdHto96S0WieDb3fKw7PJGtIRDuNV0q+i/rzP2Qatm50SX5K
kJPVFLAy5gZ7mWbnircwYgUNA1K9TKmXqnF5ypowQaOrG2XMxG6zklur0PQKvqmq
4TCv8En364jFZQHHQOROo8ogfPVCdSb6RICEVujunCH3cF/j0q5hw5FSOYJl5VqW
yzIfDr58PxryZpN5bBA8+Z3AYXa1FN7ydXqxaL17V5uduID6UIqtZjpT8+ihRICI
5A8FRoZm4w4qOr/MM0xiciVyGgEFDAvIu7yzRcW4ZMrzLoguen5QJz4c3V7dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1ymOf8F9i8Pg2z/UnRATOi1TYoQwHwYDVR0j
BBgwFoAU/IBUwT4z00oqzTQXrsbvAwz1LGkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EVkRvdVV0QURGTVQ1YUpBQXFCQzRVUVlaUVlZQUZMNkV3Q1pXS1dvYk1a
LzAvRkM4MDU0QzEzRTMzRDM0QTJBQ0QzNDE3QUVDNkVGMDMwQ0Y1MkM2OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQzgwNTRDMTNFMzNEMzRBMkFD
RDM0MTdBRUM2RUYwMzBDRjUyQzY5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
VkRvdVV0QURGTVQ1YUpBQXFCQzRVUVlaUVlZQUZMNkV3Q1pXS1dvYk1aLzAvMzIz
ODMwMzQzYTM3MzY2NDM0M2E2NjY2MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMyMzczMTMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdtT/ADANBgkqhkiG9w0BAQsFAAOC
AQEArz3jiolL8Dz5mPjL+gWZiskvHJdcnh6RzNrlKOnnnZeFkP+wGEvDxXMn8DGJ
effbAhwucHN7gm6vzWhU+wjYrZeC9ROM1RGwxLUDodCdCkixCPlw0P/d22gNilLn
BmXMUMo4P2L5Y1hkvhl00nOLE7ddp8iZ8sXEsoRnqMPRyiSFjksGQg/FHH9lDvpY
k6V4t38h5O3YWt2QDGxuCgSw/0tJqiIhjjO4e+dyA2N1QkzkR7r2vqfcuX0+i7hc
3ErYrE41rqt3TWeYG+OXHjDHQBXOvDGTUNRqokLRhbR+jaDs/CVFZoL06XtUQtC1
ySND8rmdtD0TZxRNNnS60KNm3w==
-----END CERTIFICATE-----
Generated at Fri May 2 10:44:23 2025 by rpki-client