Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          URqmEkYWNxzHc1NjmYdxxTfE5WNZzsMxnkAbA0PxIio=
Subject key identifier:   58:4D:AC:19:B3:44:9C:9C:E3:9A:00:CB:B6:46:98:DA:2A:72:AB:6F
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       5026FE7AB81AED6FA397B8EC7C1EE92B3FF76033
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:19 +0000
ROA not before:           Thu 06 Mar 2025 01:34:19 +0000
ROA not after:            Thu 05 Mar 2026 01:39:19 +0000
asID:                     28594
IP address blocks:        2804:5208:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:26:fe:7a:b8:1a:ed:6f:a3:97:b8:ec:7c:1e:e9:2b:3f:f7:60:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:19 2025 GMT
            Not After : Mar  5 01:39:19 2026 GMT
        Subject: CN=584DAC19B3449C9CE39A00CBB64698DA2A72AB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:be:2e:4a:46:43:bf:7c:40:a9:6d:e1:b4:
                    8d:a2:70:b1:df:2b:61:cb:c1:92:11:ea:f0:89:71:
                    cf:f7:49:85:e7:d5:47:26:1c:95:0a:97:20:4f:35:
                    e4:b3:be:51:91:c0:d2:ee:32:61:6f:59:fd:90:cd:
                    a8:32:ea:96:55:89:d2:f2:11:a6:09:d7:47:61:22:
                    41:ce:07:59:8d:61:91:7e:11:aa:a5:05:2e:c3:5b:
                    2a:2c:92:40:6d:82:7e:ab:a0:4c:db:10:25:5b:29:
                    3b:ca:d5:79:4a:8f:45:69:d0:c3:bf:5b:95:40:01:
                    f6:71:44:44:9a:a8:a3:6a:ae:88:2d:e0:d8:75:b0:
                    f4:5c:75:4c:f6:d5:51:7e:f8:a0:dc:e3:b2:7a:8d:
                    34:cd:3b:d3:13:ce:ed:92:e0:d9:7c:d4:c5:48:4c:
                    f2:cd:1a:68:a1:be:6e:d5:81:28:8f:9f:d3:2f:11:
                    81:4d:44:a7:52:6d:c5:63:33:7c:d8:11:ae:d2:68:
                    f2:05:c8:5b:78:95:69:19:d2:16:1a:a2:19:f7:ee:
                    18:8e:3f:d7:88:0a:bf:0b:96:4a:8b:93:1c:f5:a5:
                    37:32:0e:bd:84:71:8f:c2:78:e3:74:08:4d:9d:aa:
                    0c:5a:5f:44:89:d9:9e:ce:79:f0:ff:43:e2:de:87:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:AC:19:B3:44:9C:9C:E3:9A:00:CB:B6:46:98:DA:2A:72:AB:6F
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:b8:b3:bd:d6:d8:4a:f0:39:6c:e8:f7:ba:ed:e8:27:fe:
         db:0a:fd:f8:40:77:20:1a:ea:17:d4:3c:8e:f4:96:ff:a8:82:
         82:9d:74:7c:dc:6a:fe:bd:cd:d7:4c:67:d4:d3:d7:08:d1:3f:
         3e:a7:d6:c1:1d:38:d9:2b:d0:1f:44:66:90:c7:d1:a1:23:cb:
         17:5f:12:6f:9d:ae:2f:5c:11:13:1e:01:3f:5e:3c:fa:eb:7c:
         b6:8c:56:8c:47:da:03:a1:f6:d7:25:9a:94:34:b7:22:a3:af:
         99:c7:3a:de:62:33:19:9d:77:ad:1e:31:6b:d7:1e:a5:da:ca:
         45:8d:43:eb:1f:b4:8b:46:0f:38:2c:90:1e:a8:40:05:19:d7:
         50:d3:e0:89:d6:1f:db:14:66:01:f3:7b:0d:53:dd:f0:40:2d:
         73:2f:e0:d2:48:ce:db:33:46:3a:f7:49:8f:0c:26:29:74:db:
         3b:e0:89:ab:14:f4:cd:79:2f:86:b0:0e:97:ff:01:e9:cd:c1:
         f0:d4:82:c4:69:80:27:cb:93:93:c1:b4:36:5b:c9:3b:c3:86:
         02:d0:58:bb:19:5a:70:33:1c:8e:c7:01:a5:4c:60:37:9d:f9:
         45:6d:79:25:02:a9:a9:ca:71:cc:96:ca:23:88:2e:6c:4f:9b:
         14:e9:f1:7f
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUUCb+erga7W+jl7jsfB7pKz/3YDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MTlaFw0yNjAzMDUwMTM5MTlaMDMxMTAvBgNV
BAMTKDU4NERBQzE5QjM0NDlDOUNFMzlBMDBDQkI2NDY5OERBMkE3MkFCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Vb4uSkZDv3xAqW3htI2icLHf
K2HLwZIR6vCJcc/3SYXn1UcmHJUKlyBPNeSzvlGRwNLuMmFvWf2Qzagy6pZVidLy
EaYJ10dhIkHOB1mNYZF+EaqlBS7DWyoskkBtgn6roEzbECVbKTvK1XlKj0Vp0MO/
W5VAAfZxRESaqKNqrogt4Nh1sPRcdUz21VF++KDc47J6jTTNO9MTzu2S4Nl81MVI
TPLNGmihvm7VgSiPn9MvEYFNRKdSbcVjM3zYEa7SaPIFyFt4lWkZ0hYaohn37hiO
P9eICr8LlkqLkxz1pTcyDr2EcY/CeON0CE2dqgxaX0SJ2Z7OefD/Q+Lehw6bAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUWE2sGbNEnJzjmgDLtkaY2ipyq28wHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzODMwMzQzYTM1MzIzMDM4M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBFIIAAEwDQYJKoZIhvcNAQELBQADggEBAKsM
uLO91thK8Dls6Pe67egn/tsK/fhAdyAa6hfUPI70lv+ogoKddHzcav69zddMZ9TT
1wjRPz6n1sEdONkr0B9EZpDH0aEjyxdfEm+dri9cERMeAT9ePPrrfLaMVoxH2gOh
9tclmpQ0tyKjr5nHOt5iMxmdd60eMWvXHqXaykWNQ+sftItGDzgskB6oQAUZ11DT
4InWH9sUZgHzew1T3fBALXMv4NJIztszRjr3SY8MJil02zvgiasU9M15L4awDpf/
AenNwfDUgsRpgCfLk5PBtDZbyTvDhgLQWLsZWnAzHI7HAaVMYDed+UVteSUCqanK
ccyWyiOILmxPmxTp8X8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:09 2025 by rpki-client