Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa
File:                     323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (raw, json)
Hash identifier:          gm33hy7PVx4pt79hAwr1MSkvUr+W0fBAGRIORciWQ/U=
Subject key identifier:   56:12:E4:44:36:A1:B2:BC:04:33:2E:02:2E:96:D9:C9:D2:3E:53:57
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       6DF233BAEC7078D737C5BA1B7BE8CFC5AC481E31
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa
Signing time:             Thu 06 Mar 2025 02:00:15 +0000
ROA not before:           Thu 06 Mar 2025 01:55:15 +0000
ROA not after:            Thu 05 Mar 2026 02:00:15 +0000
asID:                     262531
IP address blocks:        2804:5a4::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f2:33:ba:ec:70:78:d7:37:c5:ba:1b:7b:e8:cf:c5:ac:48:1e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Mar  6 01:55:15 2025 GMT
            Not After : Mar  5 02:00:15 2026 GMT
        Subject: CN=5612E44436A1B2BC04332E022E96D9C9D23E5357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:ae:21:4a:26:fd:1b:a8:2d:ef:5a:6b:e3:
                    de:f0:a1:c0:74:84:2d:29:90:a6:29:37:14:fc:1d:
                    9d:96:7d:30:9b:36:2b:be:b0:26:8f:0b:53:fd:e4:
                    c7:c5:f2:cf:96:cc:5b:a1:c2:86:e5:a6:2a:3c:bc:
                    01:63:dc:06:02:31:fe:8d:a4:53:b1:9e:39:de:19:
                    62:46:0d:d9:99:d5:ac:e7:6a:58:eb:c8:13:01:4b:
                    10:14:fb:8f:b3:af:99:a6:a6:de:e2:88:42:d1:3f:
                    97:e4:1d:07:74:22:51:be:e4:ee:96:3e:e6:5e:99:
                    db:43:e7:82:60:28:ce:76:c1:50:52:0b:a6:13:40:
                    91:43:ce:76:22:71:99:fa:86:1c:1c:9d:63:c6:3d:
                    5c:3e:91:90:dd:bc:46:c8:81:0c:91:51:96:d5:99:
                    cd:71:ce:18:d3:5c:12:f1:5a:f8:68:de:84:3e:a3:
                    0b:99:ec:58:d9:1c:7e:8a:9b:32:30:c4:e6:4d:f2:
                    4d:f4:f5:87:7d:0b:ec:7e:0f:0a:14:10:35:2b:e2:
                    14:c4:49:16:35:2a:59:fa:9f:d7:be:33:86:97:96:
                    55:9a:15:93:5a:70:f1:75:c1:68:53:5e:77:00:78:
                    6e:59:92:34:cb:00:fa:2e:be:82:e5:4b:cd:34:a0:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:12:E4:44:36:A1:B2:BC:04:33:2E:02:2E:96:D9:C9:D2:3E:53:57
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:b4:dc:66:0e:e3:58:7c:74:ea:26:c2:bf:c0:e5:e4:60:
         34:1c:6b:d9:24:ab:81:f4:66:12:08:2e:dc:50:5e:ea:02:ed:
         a2:68:47:8d:d2:89:47:a4:62:1f:23:91:80:04:49:2a:9b:20:
         6d:ec:c2:07:03:82:4e:1c:11:b3:0f:1d:6d:49:ff:eb:5a:3e:
         c0:b9:45:12:03:69:a5:2b:19:58:cf:e6:b5:a9:98:9a:c2:5f:
         72:2c:c0:49:6f:1b:2a:1b:9e:ee:c8:de:cc:0c:8d:f4:e7:89:
         39:8f:32:98:c9:f5:ae:3c:b1:71:2c:88:01:50:d1:75:37:f4:
         90:68:cf:25:b9:4e:4f:25:f5:88:8d:2a:a2:48:75:e2:f5:f7:
         e2:69:63:28:52:58:bc:b9:f9:12:6b:6c:34:2a:8b:bd:6b:71:
         90:98:61:bd:ae:e7:e8:9a:4c:f3:4f:56:31:9d:59:13:a4:ae:
         0f:d5:f0:65:fc:84:2c:ff:d9:75:9c:c7:89:8c:50:59:98:e1:
         6a:16:54:f7:c8:7b:f0:aa:da:cd:c3:57:f4:4b:01:84:84:54:
         6d:5b:a3:0e:b1:6f:20:19:4c:95:59:df:92:49:ab:cb:09:37:
         13:c4:7c:cc:cc:29:0d:ee:4d:2a:16:71:a5:24:ca:ec:ae:0b:
         02:71:4a:57
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbfIzuuxweNc3xbobe+jPxaxIHjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE0QTg2MDkzNTRDMkUzQzE3MjU4OTNENTIxRDM1Q0M1
RkM0QUZEQjAeFw0yNTAzMDYwMTU1MTVaFw0yNjAzMDUwMjAwMTVaMDMxMTAvBgNV
BAMTKDU2MTJFNDQ0MzZBMUIyQkMwNDMzMkUwMjJFOTZEOUM5RDIzRTUzNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWs64hSib9G6gt71pr497wocB0
hC0pkKYpNxT8HZ2WfTCbNiu+sCaPC1P95MfF8s+WzFuhwoblpio8vAFj3AYCMf6N
pFOxnjneGWJGDdmZ1aznaljryBMBSxAU+4+zr5mmpt7iiELRP5fkHQd0IlG+5O6W
PuZemdtD54JgKM52wVBSC6YTQJFDznYicZn6hhwcnWPGPVw+kZDdvEbIgQyRUZbV
mc1xzhjTXBLxWvho3oQ+owuZ7FjZHH6KmzIwxOZN8k309Yd9C+x+DwoUEDUr4hTE
SRY1Kln6n9e+M4aXllWaFZNacPF1wWhTXncAeG5ZkjTLAPouvoLlS800oKBlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVhLkRDahsrwEMy4CLpbZydI+U1cwHwYDVR0j
BBgwFoAUMUqGCTVMLjwXJYk9Uh01zF/Er9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxY
S20vMS8zMTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEE4NjA5MzU0QzJFM0Mx
NzI1ODkzRDUyMUQzNUNDNUZDNEFGREIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR1TUpRcGhmWGRhOEY4TW00cks2VHNvemdqZDhMZ1huNkFjMzdzWmJMWEttLzEv
MzIzODMwMzQzYTM1NjEzNDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzMjM1
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBaQwDQYJKoZIhvcNAQELBQADggEBAC97tNxmDuNY
fHTqJsK/wOXkYDQca9kkq4H0ZhIILtxQXuoC7aJoR43SiUekYh8jkYAESSqbIG3s
wgcDgk4cEbMPHW1J/+taPsC5RRIDaaUrGVjP5rWpmJrCX3IswElvGyobnu7I3swM
jfTniTmPMpjJ9a48sXEsiAFQ0XU39JBozyW5Tk8l9YiNKqJIdeL19+JpYyhSWLy5
+RJrbDQqi71rcZCYYb2u5+iaTPNPVjGdWROkrg/V8GX8hCz/2XWcx4mMUFmY4WoW
VPfIe/Cq2s3DV/RLAYSEVG1bow6xbyAZTJVZ35JJq8sJNxPEfMzMKQ3uTSoWcaUk
yuyuCwJxSlc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:15:18 2025 by rpki-client