Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          stN81AxZa8//7/oKbk5lTLVktBa+kLGfELWhA5Sv6Gw=
Subject key identifier:   B2:09:29:AF:3B:2F:FD:25:69:8E:F7:3F:84:12:49:2A:B5:C0:BA:70
Certificate issuer:       /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial:       7CD1F2FC29ECCFCF9A3ABB2E800BEEF13A91078A
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Fri 18 Apr 2025 17:29:12 +0000
ROA not before:           Fri 18 Apr 2025 17:24:12 +0000
ROA not after:            Fri 17 Apr 2026 17:29:12 +0000
asID:                     273728
IP address blocks:        2804:8b5c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 14:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:f2:fc:29:ec:cf:cf:9a:3a:bb:2e:80:0b:ee:f1:3a:91:07:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
        Validity
            Not Before: Apr 18 17:24:12 2025 GMT
            Not After : Apr 17 17:29:12 2026 GMT
        Subject: CN=B20929AF3B2FFD25698EF73F8412492AB5C0BA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:3d:07:1e:d8:26:5e:8f:c2:6f:39:0a:03:
                    4b:21:59:62:3c:aa:94:f6:63:2d:d7:ce:50:92:a2:
                    ab:5f:5b:45:17:46:75:21:b1:81:6e:8b:18:ba:2d:
                    06:00:36:4e:79:85:57:9c:84:4a:1b:f3:b0:f4:b7:
                    c0:3e:6e:1e:6e:1f:18:8c:f5:90:25:42:d4:7a:38:
                    0e:84:a2:cb:19:3d:f2:49:c5:ff:66:34:54:99:60:
                    b1:f0:34:b4:27:8a:81:28:ad:ed:ca:4d:a5:43:4a:
                    99:d6:ba:98:79:c6:c2:cb:fb:1b:57:cf:b1:25:32:
                    6c:de:c3:6c:ec:81:26:40:b5:7e:73:08:f8:06:9f:
                    ce:61:b0:37:6c:08:fb:03:c7:b6:cb:c2:59:74:7a:
                    0c:5a:2a:e9:22:ed:80:56:63:dd:8a:c7:05:e6:30:
                    60:c3:b7:ec:62:19:39:33:7b:c4:54:14:52:6c:56:
                    93:a8:40:fe:5d:6e:1f:b4:78:c3:48:9f:ed:3c:5c:
                    33:3c:b5:ad:df:60:9b:dd:75:df:27:59:43:ce:61:
                    8a:c4:e9:44:f2:df:75:66:83:b3:ae:07:85:b5:6b:
                    08:65:6d:00:82:d3:2d:a0:47:ac:02:4f:1d:50:0e:
                    87:d7:d6:f7:f8:21:62:8e:d2:a4:0f:a9:6e:e4:7f:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:09:29:AF:3B:2F:FD:25:69:8E:F7:3F:84:12:49:2A:B5:C0:BA:70
            X509v3 Authority Key Identifier:
                keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         91:72:df:7b:91:9a:02:87:0b:f0:c7:cf:0c:db:f8:94:f6:64:
         21:4d:e8:cc:83:c2:16:95:25:8d:61:7c:56:8b:c4:e3:2f:7a:
         69:f7:1e:f7:88:b7:63:12:1f:e8:0c:a7:7a:a3:37:9d:f7:c3:
         a9:16:1c:8c:d1:42:4f:19:4f:6f:20:9c:ce:a8:9c:db:8e:8f:
         16:6d:39:7c:2b:4f:d2:9b:de:bc:06:24:d3:ce:78:08:c6:26:
         09:1b:53:cc:cd:fa:7c:24:a7:ba:94:ce:5a:5d:8a:e3:89:b7:
         0d:7f:2e:9b:5e:4f:8c:d4:27:f9:81:63:3e:58:6d:d6:e4:ed:
         ec:35:8e:68:ff:2f:9c:07:6d:1f:8f:13:c9:2e:b5:98:3b:1d:
         a0:57:34:2c:02:20:b7:eb:e5:87:06:18:f0:8a:07:5d:8a:eb:
         fc:e6:ff:97:88:96:3c:8e:54:af:17:5b:84:46:ac:b4:de:c1:
         63:7c:4d:58:f6:85:53:44:00:91:f1:9a:61:91:b9:e6:22:cb:
         58:fd:68:6d:54:6b:b9:b2:d6:d7:41:6f:6f:b8:13:40:81:0b:
         ac:b2:6a:83:37:8f:9e:49:bf:73:a6:74:e5:1a:86:31:e5:0a:
         5c:37:bc:df:05:66:dd:3b:f9:33:0e:49:1d:52:78:4e:6b:3c:
         f4:4b:87:6d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfNHy/Cnsz8+aOrsugAvu8TqRB4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlGRkFGODhGOUUzMzUyQzVENjZENDE5NjI2NEZDMEY3
QjkxMUIyNzAeFw0yNTA0MTgxNzI0MTJaFw0yNjA0MTcxNzI5MTJaMDMxMTAvBgNV
BAMTKEIyMDkyOUFGM0IyRkZEMjU2OThFRjczRjg0MTI0OTJBQjVDMEJBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlMT0HHtgmXo/CbzkKA0shWWI8
qpT2Yy3XzlCSoqtfW0UXRnUhsYFuixi6LQYANk55hVechEob87D0t8A+bh5uHxiM
9ZAlQtR6OA6EossZPfJJxf9mNFSZYLHwNLQnioEore3KTaVDSpnWuph5xsLL+xtX
z7ElMmzew2zsgSZAtX5zCPgGn85hsDdsCPsDx7bLwll0egxaKuki7YBWY92KxwXm
MGDDt+xiGTkze8RUFFJsVpOoQP5dbh+0eMNIn+08XDM8ta3fYJvddd8nWUPOYYrE
6UTy33Vmg7OuB4W1awhlbQCC0y2gR6wCTx1QDofX1vf4IWKO0qQPqW7kf8e7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsgkprzsv/SVpjvc/hBJJKrXAunAwHwYDVR0j
BBgwFoAUSf+viPnjNSxdZtQZYmT8D3uRGycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMy80OUZGQUY4OEY5RTMzNTJDNUQ2NkQ0MTk2MjY0RkMwRjdCOTExQjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5RkZBRjg4RjlFMzM1MkM1
RDY2RDQxOTYyNjRGQzBGN0I5MTFCMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzMv
MzIzODMwMzQzYTM4NjIzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRct97kZoChwvwx88M2/iU9mQhTejMg8IWlSWNYXxWi8TjL3pp9x73iLdj
Eh/oDKd6ozed98OpFhyM0UJPGU9vIJzOqJzbjo8WbTl8K0/Sm968BiTTzngIxiYJ
G1PMzfp8JKe6lM5aXYrjibcNfy6bXk+M1Cf5gWM+WG3W5O3sNY5o/y+cB20fjxPJ
LrWYOx2gVzQsAiC36+WHBhjwigddiuv85v+XiJY8jlSvF1uERqy03sFjfE1Y9oVT
RACR8ZphkbnmIstY/WhtVGu5stbXQW9vuBNAgQussmqDN4+eSb9zpnTlGoYx5Qpc
N7zfBWbdO/kzDkkdUnhOazz0S4dt
-----END CERTIFICATE-----
Generated at Mon May 5 16:17:07 2025 by rpki-client