Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33342d3334203d3e20323635343531.roa
File:                     323830343a333435343a3a2f33342d3334203d3e20323635343531.roa (raw, json)
Hash identifier:          vVicVyJ6XxDP9yXPhRx/0gTlog/EQwb+7a5XPp6aA0Q=
Subject key identifier:   B6:72:E6:18:76:E1:64:98:E9:88:9C:9E:F8:73:8E:9A:DE:ED:4F:FD
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       58BDCEBE3AAEA8913A0AE57FFDD9D42E730EF594
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33342d3334203d3e20323635343531.roa
Signing time:             Wed 03 Jul 2024 13:49:15 +0000
ROA not before:           Wed 03 Jul 2024 13:44:15 +0000
ROA not after:            Wed 02 Jul 2025 13:49:15 +0000
asID:                     265451
IP address blocks:        2804:3454::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bd:ce:be:3a:ae:a8:91:3a:0a:e5:7f:fd:d9:d4:2e:73:0e:f5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Jul  3 13:44:15 2024 GMT
            Not After : Jul  2 13:49:15 2025 GMT
        Subject: CN=B672E61876E16498E9889C9EF8738E9ADEED4FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:4a:ab:16:9a:63:e6:cf:8f:aa:15:ef:54:
                    22:32:b9:6b:e9:cd:30:00:c4:72:2c:17:43:1a:98:
                    b1:4c:69:f1:25:e1:9a:12:0f:b7:cc:1c:69:6a:af:
                    ae:02:35:e1:8d:11:db:41:89:a3:70:86:5f:9c:22:
                    0d:43:f6:c7:b7:53:53:45:1e:a6:77:12:d2:e0:bd:
                    5b:1f:d0:4f:38:4f:65:d1:e9:69:3c:35:91:24:21:
                    b2:d8:37:2b:40:3f:0a:a8:0d:2d:46:fd:c3:40:04:
                    97:55:01:4d:79:32:be:f2:42:12:32:85:1f:0f:ab:
                    f3:39:4f:62:76:15:09:f1:fd:6b:2d:ba:9f:9f:1d:
                    54:59:2b:99:cb:6b:c8:ef:57:1a:13:16:f9:79:6a:
                    5b:99:fd:20:78:7f:bf:3c:11:f4:9b:e2:3c:1b:79:
                    41:27:88:38:66:25:32:8d:5a:b3:c6:25:fa:b9:67:
                    47:cc:93:6e:2f:3e:22:3a:76:48:42:21:f0:19:c2:
                    95:4f:fc:eb:cc:2b:fa:5f:f4:be:ea:62:55:86:ef:
                    f6:13:97:ee:a0:dc:99:f8:a0:31:59:b5:b7:f1:9a:
                    44:04:76:a9:d2:ab:61:90:4e:4e:41:6d:65:46:a2:
                    17:f8:3a:49:45:f0:2f:2b:f6:7a:a4:6a:c1:25:b9:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:72:E6:18:76:E1:64:98:E9:88:9C:9E:F8:73:8E:9A:DE:ED:4F:FD
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a3a2f33342d3334203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454::/34

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:86:3d:3d:23:ef:40:52:c2:db:f0:7b:a8:2f:59:e0:54:
         ff:e5:b3:d5:49:67:28:a1:a4:bf:e1:5d:2b:02:e2:30:df:02:
         fd:38:63:6f:5d:90:a3:9c:d7:b2:2f:10:83:ed:a8:79:a4:b6:
         d8:20:73:3a:de:9b:be:96:ca:61:d7:eb:0a:5e:98:c1:09:3b:
         9a:33:05:25:72:4a:4a:7b:63:8d:e8:aa:24:0e:29:98:c8:4f:
         e1:f8:fd:75:11:c9:f1:f5:02:b6:40:78:40:93:02:8c:f5:b8:
         71:c0:db:77:0c:42:14:38:8c:cb:a1:af:a6:bb:91:8a:09:ee:
         86:de:7f:3a:76:6f:d5:e3:c2:48:33:86:ca:33:6a:c4:7d:4e:
         7c:c7:27:3e:e5:e5:4a:69:0f:c1:62:57:1e:87:3b:10:0d:5a:
         e4:24:57:dc:31:43:42:df:97:5e:9e:43:ee:24:05:ec:69:aa:
         5c:6b:a1:c2:b8:65:64:cb:cc:cb:5e:fe:94:9b:78:46:18:ae:
         ba:da:1e:76:ca:75:c6:e9:9b:f9:09:4b:b8:fc:dc:e3:2f:0e:
         47:2b:93:75:46:91:83:1f:e7:e3:2f:1f:b2:9e:7d:2a:e5:dd:
         06:4a:0e:d7:c9:e8:bb:85:9b:62:fe:14:56:a6:bf:bc:e3:cf:
         58:34:c7:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWL3OvjquqJE6CuV//dnULnMO9ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4
RjY3MEQzMTAeFw0yNDA3MDMxMzQ0MTVaFw0yNTA3MDIxMzQ5MTVaMDMxMTAvBgNV
BAMTKEI2NzJFNjE4NzZFMTY0OThFOTg4OUM5RUY4NzM4RTlBREVFRDRGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4UqrFppj5s+PqhXvVCIyuWvp
zTAAxHIsF0MamLFMafEl4ZoSD7fMHGlqr64CNeGNEdtBiaNwhl+cIg1D9se3U1NF
HqZ3EtLgvVsf0E84T2XR6Wk8NZEkIbLYNytAPwqoDS1G/cNABJdVAU15Mr7yQhIy
hR8Pq/M5T2J2FQnx/Wstup+fHVRZK5nLa8jvVxoTFvl5aluZ/SB4f788EfSb4jwb
eUEniDhmJTKNWrPGJfq5Z0fMk24vPiI6dkhCIfAZwpVP/OvMK/pf9L7qYlWG7/YT
l+6g3Jn4oDFZtbfxmkQEdqnSq2GQTk5BbWVGohf4OklF8C8r9nqkasEluUhBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtnLmGHbhZJjpiJye+HOOmt7tT/0wHwYDVR0j
BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz
R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE
NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRrNFVpZ3FzdkNwVmVGNm9vUmJObXR2NjltWFZBVkF4TUZUQnJVaHRBM0d2LzAv
MzIzODMwMzQzYTMzMzQzNTM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQ0VAAwDQYJKoZIhvcNAQELBQADggEBABpjhj09
I+9AUsLb8HuoL1ngVP/ls9VJZyihpL/hXSsC4jDfAv04Y29dkKOc17IvEIPtqHmk
ttggczrem76WymHX6wpemMEJO5ozBSVySkp7Y43oqiQOKZjIT+H4/XURyfH1ArZA
eECTAoz1uHHA23cMQhQ4jMuhr6a7kYoJ7obefzp2b9XjwkgzhsozasR9TnzHJz7l
5UppD8FiVx6HOxANWuQkV9wxQ0Lfl16eQ+4kBexpqlxrocK4ZWTLzMte/pSbeEYY
rrraHnbKdcbpm/kJS7j83OMvDkcrk3VGkYMf5+MvH7KefSrl3QZKDtfJ6LuFm2L+
FFamv7zjz1g0x5Q=
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:58:01 2025 by rpki-client