Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa
File:                     323830343a6665303a3a2f33322d3438203d3e20323633303439.roa (raw, json)
Hash identifier:          HdqvJDCIOcE0R+zhYhPBEPlivEJ9vJ8NGeCN/Ax2sks=
Subject key identifier:   F3:20:19:D3:00:19:56:02:D3:B4:AA:76:D6:C2:D2:00:20:DB:9B:48
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       1D6379898C2387DC2753480CD1B16C96FFFC43A3
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa
Signing time:             Wed 16 Apr 2025 19:47:40 +0000
ROA not before:           Wed 16 Apr 2025 19:42:40 +0000
ROA not after:            Wed 15 Apr 2026 19:47:40 +0000
asID:                     263049
IP address blocks:        2804:fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:63:79:89:8c:23:87:dc:27:53:48:0c:d1:b1:6c:96:ff:fc:43:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Apr 16 19:42:40 2025 GMT
            Not After : Apr 15 19:47:40 2026 GMT
        Subject: CN=F32019D300195602D3B4AA76D6C2D20020DB9B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f2:4a:1f:f4:47:d7:76:78:8f:a8:87:94:8f:
                    f7:c8:7d:fc:fe:6c:2f:c7:16:38:15:df:af:4d:ce:
                    51:4e:10:17:f3:cb:75:db:0c:2d:8d:af:69:85:e5:
                    08:48:c7:a2:84:a7:71:fc:74:12:c6:90:15:c8:63:
                    69:08:32:bb:89:ee:56:8f:c3:83:d1:ce:2b:07:79:
                    e3:cb:82:a3:89:38:2e:1c:f3:95:54:c6:f3:36:c3:
                    9d:7e:ae:92:02:b4:7f:c3:b4:00:b4:db:99:c7:86:
                    c0:48:81:f4:df:81:1e:d3:2c:6f:72:9e:78:77:75:
                    8c:6f:0a:80:0c:94:b6:c8:2a:37:fc:c9:b6:2e:21:
                    80:a1:7b:5a:2d:61:3e:28:d4:dd:a5:39:df:b8:4c:
                    e4:ac:c5:6b:c2:ba:3e:08:fa:cb:0b:89:da:2f:86:
                    35:87:9c:3c:b6:01:ba:5d:ea:41:93:26:61:17:90:
                    e2:78:28:45:d5:1c:d5:1a:df:54:e0:f3:30:0b:9c:
                    e6:4c:50:08:34:6c:44:3a:d1:87:13:3a:00:b1:54:
                    e4:f3:5f:56:19:38:de:c8:46:9c:22:b7:5c:b7:ae:
                    4e:fa:8c:15:9a:a1:b7:0e:44:7a:d2:49:06:74:c3:
                    05:51:ef:27:d4:9f:37:4e:76:d9:c5:b9:d1:7e:c0:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:20:19:D3:00:19:56:02:D3:B4:AA:76:D6:C2:D2:00:20:DB:9B:48
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a3a2f33322d3438203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:e8:72:3c:3a:ba:13:f2:7d:95:44:59:9f:5b:a0:67:be:
         1f:c3:ea:31:cd:ec:5d:7f:12:30:cb:f7:75:78:27:b9:c8:6a:
         d7:d9:a1:7d:de:12:9e:b0:ff:ac:d3:3d:62:e1:bb:e2:34:49:
         d7:34:a5:1e:bf:0d:bb:1e:8d:a4:dc:c8:cf:55:0d:fa:5b:48:
         7d:9f:d9:73:54:c8:4b:28:a0:54:f9:c1:97:f2:a8:f1:a2:34:
         8a:79:00:e2:58:38:9d:fa:5e:36:c6:5b:4e:51:94:b2:48:5e:
         fd:e7:5c:ad:34:89:6e:8a:dc:40:26:f5:28:a1:31:ed:81:1f:
         71:c3:81:7f:8d:a5:a2:8a:7e:66:a9:63:14:59:34:56:00:68:
         9f:23:0c:94:5f:8e:9d:c2:61:a1:ec:7e:6a:3a:e2:b0:e1:ae:
         49:4a:54:03:84:3e:08:af:d8:b9:17:c5:38:2f:b2:fe:c4:bc:
         ff:ba:39:42:99:f8:ac:b0:92:46:ba:58:de:71:fc:59:d1:1b:
         d4:d0:61:5a:c9:35:3c:58:bc:9f:4e:f6:fe:7f:02:1d:31:60:
         b9:a0:ba:1f:b1:b0:a4:c8:65:d6:bd:7d:02:92:9c:c3:67:5d:
         99:76:48:26:9d:8e:44:7c:1f:9a:6e:22:54:da:2e:63:8a:b3:
         cf:ec:62:8d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHWN5iYwjh9wnU0gM0bFslv/8Q6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzNTJENzREMzc3OEYyNDIyQ0UwRTk2RkM1MzA3MUUx
ODkzNTQwNTAeFw0yNTA0MTYxOTQyNDBaFw0yNjA0MTUxOTQ3NDBaMDMxMTAvBgNV
BAMTKEYzMjAxOUQzMDAxOTU2MDJEM0I0QUE3NkQ2QzJEMjAwMjBEQjlCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD88kof9EfXdniPqIeUj/fIffz+
bC/HFjgV369NzlFOEBfzy3XbDC2Nr2mF5QhIx6KEp3H8dBLGkBXIY2kIMruJ7laP
w4PRzisHeePLgqOJOC4c85VUxvM2w51+rpICtH/DtAC025nHhsBIgfTfgR7TLG9y
nnh3dYxvCoAMlLbIKjf8ybYuIYChe1otYT4o1N2lOd+4TOSsxWvCuj4I+ssLidov
hjWHnDy2Abpd6kGTJmEXkOJ4KEXVHNUa31Tg8zALnOZMUAg0bEQ60YcTOgCxVOTz
X1YZON7IRpwit1y3rk76jBWaobcORHrSSQZ0wwVR7yfUnzdOdtnFudF+wG39AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8yAZ0wAZVgLTtKp21sLSACDbm0gwHwYDVR0j
BBgwFoAUUTUtdNN3jyQizg6W/FMHHhiTVAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMS81MTM1MkQ3NEQzNzc4RjI0MjJDRTBFOTZGQzUzMDcxRTE4OTM1NDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMzUyRDc0RDM3NzhGMjQy
MkNFMEU5NkZDNTMwNzFFMTg5MzU0MDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzEv
MzIzODMwMzQzYTY2NjUzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzMw
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED+AwDQYJKoZIhvcNAQELBQADggEBAG+76HI8OroT
8n2VRFmfW6Bnvh/D6jHN7F1/EjDL93V4J7nIatfZoX3eEp6w/6zTPWLhu+I0Sdc0
pR6/DbsejaTcyM9VDfpbSH2f2XNUyEsooFT5wZfyqPGiNIp5AOJYOJ36XjbGW05R
lLJIXv3nXK00iW6K3EAm9SihMe2BH3HDgX+NpaKKfmapYxRZNFYAaJ8jDJRfjp3C
YaHsfmo64rDhrklKVAOEPgiv2LkXxTgvsv7EvP+6OUKZ+Kywkka6WN5x/FnRG9TQ
YVrJNTxYvJ9O9v5/Ah0xYLmguh+xsKTIZda9fQKSnMNnXZl2SCadjkR8H5puIlTa
LmOKs8/sYo0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:01 2025 by rpki-client