Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
File:                     323830343a353230383a3a2f33322d3332203d3e203238353934.roa (raw, json)
Hash identifier:          fEVdaKELzzomSUFpwXb48uXIQQPT2DSNYFwQN+gkHRM=
Subject key identifier:   C9:43:42:F9:77:70:61:E5:5B:A8:83:A5:C0:55:A7:F0:96:8D:5B:9F
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       4D493926B8FF01F6F86D6531C31910A436D9F3C8
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a3a2f33322d3332203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:18 +0000
ROA not before:           Thu 06 Mar 2025 01:34:18 +0000
ROA not after:            Thu 05 Mar 2026 01:39:18 +0000
asID:                     28594
IP address blocks:        2804:5208::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:49:39:26:b8:ff:01:f6:f8:6d:65:31:c3:19:10:a4:36:d9:f3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:18 2025 GMT
            Not After : Mar  5 01:39:18 2026 GMT
        Subject: CN=C94342F9777061E55BA883A5C055A7F0968D5B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:07:1e:8a:4a:9b:4b:74:aa:8d:ae:1f:e0:
                    32:e0:74:89:63:29:f7:fe:62:cd:71:50:1f:15:a3:
                    1a:8c:33:c3:c1:9b:aa:67:15:c7:1b:e1:41:18:58:
                    d5:b7:17:0e:7f:c6:e7:82:3e:08:51:fb:bf:6e:c4:
                    2c:0a:bf:52:2d:0c:9e:ae:f5:55:1a:59:d0:57:ed:
                    e5:c7:ed:0b:ba:c9:e6:4d:d1:15:9a:00:2b:f3:68:
                    1f:b7:c5:c9:af:b7:f8:d4:e9:80:f6:fe:ae:97:a8:
                    89:43:41:37:5a:18:e7:da:a6:f2:18:45:e6:ed:1d:
                    ce:f9:bf:c4:b3:67:d1:10:b8:a5:94:54:54:87:21:
                    bd:20:70:56:37:cf:2b:64:f9:2b:2d:15:8b:c3:10:
                    63:36:b8:67:d1:6e:d3:3b:bd:72:f9:ef:70:55:ca:
                    82:1f:8a:64:24:82:a6:5d:f9:54:fb:0c:99:2c:11:
                    26:6d:fc:0c:7c:84:29:e8:80:45:55:af:74:59:fb:
                    9a:90:2b:2e:96:47:79:20:4e:10:70:55:80:5c:bb:
                    fe:34:da:6d:27:7c:ce:3a:17:45:ad:bc:c8:a7:fb:
                    a2:fc:4a:82:ba:69:e2:c9:f0:16:7e:fe:4f:57:c7:
                    2d:22:f4:eb:8f:d8:ca:e4:81:c0:3f:b8:5c:0e:47:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:42:F9:77:70:61:E5:5B:A8:83:A5:C0:55:A7:F0:96:8D:5B:9F
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a3a2f33322d3332203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:6d:46:52:67:61:68:1e:cb:0a:0d:15:67:34:dd:67:8c:
         33:e2:0d:7c:2b:44:6e:4f:fc:22:02:08:67:cb:d2:44:70:80:
         70:ff:27:3c:fa:76:54:d7:29:41:da:1d:b1:7e:b2:de:94:0d:
         7d:d8:ef:e5:24:79:6a:4f:48:65:03:a0:24:94:cb:60:48:dd:
         be:d7:d6:66:a6:ca:ff:a0:fa:c4:90:66:60:db:31:ce:b6:49:
         37:f4:4b:40:67:e0:83:6c:85:39:0e:ae:f9:6b:46:16:6e:86:
         36:ae:d8:03:dd:f9:ea:47:67:13:81:06:1a:30:8f:e7:55:2e:
         87:41:b6:94:4d:8e:74:a8:cd:5a:f6:c0:0a:4c:58:14:17:b3:
         ba:c0:d3:14:8c:8e:98:9e:02:31:50:2f:d1:73:67:60:db:70:
         2d:ee:87:87:3c:be:9a:47:98:f8:55:91:71:12:e4:bf:f7:96:
         98:f5:d0:ea:09:ba:63:a3:a2:2e:4b:c6:39:6f:06:d1:1a:b3:
         f3:e2:7f:d3:ee:17:44:7d:a9:eb:b2:b4:cc:79:71:91:3a:48:
         f2:82:19:50:eb:43:d2:a8:49:29:10:d1:01:7e:f1:2a:81:6e:
         34:15:a0:ae:3c:41:a8:54:fe:61:16:18:8d:1d:03:24:3f:e2:
         8c:8b:41:52
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTUk5Jrj/Afb4bWUxwxkQpDbZ88gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MThaFw0yNjAzMDUwMTM5MThaMDMxMTAvBgNV
BAMTKEM5NDM0MkY5Nzc3MDYxRTU1QkE4ODNBNUMwNTVBN0YwOTY4RDVCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiQceikqbS3Sqja4f4DLgdIlj
Kff+Ys1xUB8VoxqMM8PBm6pnFccb4UEYWNW3Fw5/xueCPghR+79uxCwKv1ItDJ6u
9VUaWdBX7eXH7Qu6yeZN0RWaACvzaB+3xcmvt/jU6YD2/q6XqIlDQTdaGOfapvIY
RebtHc75v8SzZ9EQuKWUVFSHIb0gcFY3zytk+SstFYvDEGM2uGfRbtM7vXL573BV
yoIfimQkgqZd+VT7DJksESZt/Ax8hCnogEVVr3RZ+5qQKy6WR3kgThBwVYBcu/40
2m0nfM46F0WtvMin+6L8SoK6aeLJ8BZ+/k9Xxy0i9OuP2MrkgcA/uFwOR36bAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyUNC+XdwYeVbqIOlwFWn8JaNW58wHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzODMwMzQzYTM1MzIzMDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODM1
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEUggwDQYJKoZIhvcNAQELBQADggEBAAv3bUZSZ2Fo
HssKDRVnNN1njDPiDXwrRG5P/CICCGfL0kRwgHD/Jzz6dlTXKUHaHbF+st6UDX3Y
7+UkeWpPSGUDoCSUy2BI3b7X1mamyv+g+sSQZmDbMc62STf0S0Bn4INshTkOrvlr
RhZuhjau2APd+epHZxOBBhowj+dVLodBtpRNjnSozVr2wApMWBQXs7rA0xSMjpie
AjFQL9FzZ2DbcC3uh4c8vppHmPhVkXES5L/3lpj10OoJumOjoi5LxjlvBtEas/Pi
f9PuF0R9qeuytMx5cZE6SPKCGVDrQ9KoSSkQ0QF+8SqBbjQVoK48QahU/mEWGI0d
AyQ/4oyLQVI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:37 2025 by rpki-client