Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3334203d3e20323632393838.roa
File:                     323830343a313035383a3a2f33322d3334203d3e20323632393838.roa (raw, json)
Hash identifier:          CRnto7RTFzXaAl4AXOmy8pqA0ObDMA/Th8BNgFjGSjY=
Subject key identifier:   A8:A5:2A:2A:7F:B4:3B:BE:94:84:48:92:83:25:14:B1:D9:E7:7F:A0
Certificate issuer:       /CN=5255109203DC7857C5B8A53D1760B88B72814DED
Certificate serial:       36E515B8590018FDD774C6BD8891A1F2910A86B4
Authority key identifier: 52:55:10:92:03:DC:78:57:C5:B8:A5:3D:17:60:B8:8B:72:81:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5255109203DC7857C5B8A53D1760B88B72814DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3334203d3e20323632393838.roa
Signing time:             Tue 22 Oct 2024 21:04:03 +0000
ROA not before:           Tue 22 Oct 2024 20:59:03 +0000
ROA not after:            Tue 21 Oct 2025 21:04:03 +0000
asID:                     262988
IP address blocks:        2804:1058::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/5255109203DC7857C5B8A53D1760B88B72814DED.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/5255109203DC7857C5B8A53D1760B88B72814DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5255109203DC7857C5B8A53D1760B88B72814DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e5:15:b8:59:00:18:fd:d7:74:c6:bd:88:91:a1:f2:91:0a:86:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5255109203DC7857C5B8A53D1760B88B72814DED
        Validity
            Not Before: Oct 22 20:59:03 2024 GMT
            Not After : Oct 21 21:04:03 2025 GMT
        Subject: CN=A8A52A2A7FB43BBE94844892832514B1D9E77FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:3f:0d:a2:6d:64:91:8e:4c:a0:0e:72:ea:
                    b2:60:3e:a3:bf:d6:d6:60:d1:fe:b0:ff:be:e8:c2:
                    df:49:02:07:c0:c2:b6:18:18:33:d7:86:18:c4:0f:
                    c7:ae:1b:36:78:37:f6:99:3f:0f:b8:b3:20:b3:38:
                    a3:37:ba:48:61:3a:f2:f7:79:63:ba:ce:33:db:e6:
                    9f:3b:f4:fa:0d:bf:54:03:1d:c2:57:ac:ce:ec:b4:
                    26:b9:d3:b8:cc:55:3a:28:71:3b:45:6d:42:23:80:
                    56:b2:e2:db:ba:42:80:8d:6a:a0:ab:0a:90:90:a1:
                    cf:39:75:cc:78:5e:46:3a:1d:85:31:60:1b:9f:ff:
                    27:79:23:25:db:9e:de:a9:4c:d3:4e:87:0b:0d:0f:
                    b9:23:b4:f7:f2:b5:de:e0:3d:29:a7:ec:3f:5a:ec:
                    1a:01:2d:1d:79:b7:fc:d9:8c:33:6b:06:fa:02:00:
                    74:a1:49:08:c4:9b:39:76:c2:8c:e6:47:d1:93:06:
                    a2:8c:af:d1:76:95:76:8c:05:13:0e:3c:d1:cb:16:
                    a5:86:88:05:77:66:81:b8:bb:71:bd:c4:61:c7:98:
                    ab:2d:e5:68:87:fd:48:96:86:e9:56:d9:27:37:d8:
                    5e:5d:0a:7b:80:cd:98:f2:fc:82:59:2e:d6:3d:10:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:2A:2A:7F:B4:3B:BE:94:84:48:92:83:25:14:B1:D9:E7:7F:A0
            X509v3 Authority Key Identifier:
                keyid:52:55:10:92:03:DC:78:57:C5:B8:A5:3D:17:60:B8:8B:72:81:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/5255109203DC7857C5B8A53D1760B88B72814DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5255109203DC7857C5B8A53D1760B88B72814DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3334203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1058::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:67:a1:d4:5b:c8:d7:96:23:4f:58:a3:04:eb:8d:cd:a2:5f:
         b6:b2:3d:8b:0e:6d:16:91:4e:71:79:bc:51:6b:d9:21:da:5c:
         ef:31:64:e0:d4:c1:ef:dd:fb:51:0e:18:4e:29:ff:2e:d1:56:
         07:31:41:45:8f:17:9c:74:3d:0d:7d:fd:56:6f:a0:84:78:cf:
         11:63:4f:8e:b4:f8:ac:69:85:a5:a3:8c:6f:89:f9:8c:f6:20:
         fa:28:55:71:44:e9:2e:7c:72:21:6a:10:24:3d:4f:15:15:b6:
         6c:30:3c:3f:f3:bb:68:87:ba:a3:d3:af:92:2e:5c:0d:ba:5f:
         ce:57:e9:cc:69:f4:5d:e7:cd:88:4e:d7:0b:64:e2:a0:f7:9d:
         79:28:ae:8e:3a:54:70:a0:9d:9c:57:bf:d9:f9:01:bf:dc:ca:
         d7:8c:4a:49:85:29:41:03:d5:ea:2e:5f:f1:27:25:c0:8f:de:
         92:e8:1c:0e:cd:1c:43:a0:8a:df:be:38:5b:80:0f:e4:e3:da:
         be:3e:12:4b:7f:0a:e7:1e:b8:3a:55:8b:87:11:36:b1:88:56:
         68:52:5f:e3:13:62:1a:be:ee:4f:4e:d1:0b:a1:34:01:8f:7f:
         91:27:a6:a8:ba:4a:c2:24:3b:8a:bf:8d:36:4b:0b:fa:bd:53:
         a9:61:39:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNuUVuFkAGP3XdMa9iJGh8pEKhrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1NTEwOTIwM0RDNzg1N0M1QjhBNTNEMTc2MEI4OEI3
MjgxNERFRDAeFw0yNDEwMjIyMDU5MDNaFw0yNTEwMjEyMTA0MDNaMDMxMTAvBgNV
BAMTKEE4QTUyQTJBN0ZCNDNCQkU5NDg0NDg5MjgzMjUxNEIxRDlFNzdGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Hj8Nom1kkY5MoA5y6rJgPqO/
1tZg0f6w/77owt9JAgfAwrYYGDPXhhjED8euGzZ4N/aZPw+4syCzOKM3ukhhOvL3
eWO6zjPb5p879PoNv1QDHcJXrM7stCa507jMVToocTtFbUIjgFay4tu6QoCNaqCr
CpCQoc85dcx4XkY6HYUxYBuf/yd5IyXbnt6pTNNOhwsND7kjtPfytd7gPSmn7D9a
7BoBLR15t/zZjDNrBvoCAHShSQjEmzl2wozmR9GTBqKMr9F2lXaMBRMOPNHLFqWG
iAV3ZoG4u3G9xGHHmKst5WiH/UiWhulW2Sc32F5dCnuAzZjy/IJZLtY9EOh1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqKUqKn+0O76UhEiSgyUUsdnnf6AwHwYDVR0j
BBgwFoAUUlUQkgPceFfFuKU9F2C4i3KBTe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC81MjU1MTA5MjAzREM3ODU3QzVCOEE1M0QxNzYwQjg4QjcyODE0REVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNTUxMDkyMDNEQzc4NTdD
NUI4QTUzRDE3NjBCODhCNzI4MTRERUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzIzODMwMzQzYTMxMzAzNTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMy
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQWDANBgkqhkiG9w0BAQsFAAOCAQEAAmeh1FvI
15YjT1ijBOuNzaJftrI9iw5tFpFOcXm8UWvZIdpc7zFk4NTB7937UQ4YTin/LtFW
BzFBRY8XnHQ9DX39Vm+ghHjPEWNPjrT4rGmFpaOMb4n5jPYg+ihVcUTpLnxyIWoQ
JD1PFRW2bDA8P/O7aIe6o9Ovki5cDbpfzlfpzGn0XefNiE7XC2TioPedeSiujjpU
cKCdnFe/2fkBv9zK14xKSYUpQQPV6i5f8SclwI/ekugcDs0cQ6CK3744W4AP5OPa
vj4SS38K5x64OlWLhxE2sYhWaFJf4xNiGr7uT07RC6E0AY9/kSemqLpKwiQ7ir+N
NksL+r1TqWE5Yw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:11 2024 by rpki-client on console-ams.rpki-client.org