Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          UhRb+WtCkiO402i/r0HEKv+hsEGZNIZctAWJLtPdJIQ=
Subject key identifier:   7A:BE:8F:19:EF:5C:9A:23:90:7E:F4:17:14:E1:4A:AD:99:42:E4:FB
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       58FE0B50E685F90ABFC8EE7BF4E1BDBC971F88D6
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Thu 13 Mar 2025 18:14:25 +0000
ROA not before:           Thu 13 Mar 2025 18:09:25 +0000
ROA not after:            Thu 12 Mar 2026 18:14:25 +0000
asID:                     264915
IP address blocks:        2804:2fd8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fe:0b:50:e6:85:f9:0a:bf:c8:ee:7b:f4:e1:bd:bc:97:1f:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Mar 13 18:09:25 2025 GMT
            Not After : Mar 12 18:14:25 2026 GMT
        Subject: CN=7ABE8F19EF5C9A23907EF41714E14AAD9942E4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:93:d7:16:b7:ad:21:12:ab:c9:d3:31:88:
                    bd:cb:07:e2:28:8a:11:d3:7c:1d:6d:d0:7f:92:04:
                    4e:ed:3f:3f:28:54:21:83:5b:83:18:05:f0:59:b1:
                    4f:f6:74:33:65:b6:fd:25:8b:5f:31:71:fe:b0:4e:
                    f4:08:f9:5b:26:97:58:80:5f:e4:4d:41:78:a7:10:
                    2c:c2:7f:f0:c4:a9:5d:9f:5d:59:6b:fd:fa:4d:14:
                    bd:54:d3:76:83:15:f1:bc:8a:33:b7:33:ca:74:39:
                    4d:5b:4a:4a:7a:7e:35:47:1e:92:b7:9f:ff:7a:42:
                    9b:a7:cc:21:92:86:1f:39:17:1d:f3:df:fd:b9:3d:
                    54:98:3b:f1:03:c6:96:c4:4b:df:07:cb:f8:eb:8d:
                    72:cc:4d:76:bb:40:f8:c3:3e:8d:13:13:21:a9:a7:
                    bb:9b:40:55:a7:87:87:55:a7:ca:59:c4:60:58:c4:
                    d9:71:6b:e4:c8:e9:28:61:43:3e:a1:14:b4:af:3b:
                    c8:68:0a:1f:78:0f:09:e9:6e:ea:b4:78:2f:c8:00:
                    92:c2:cb:b4:98:39:27:cc:2b:2a:aa:02:04:45:c2:
                    fb:5f:94:f5:c5:b2:a3:22:d0:d7:68:33:e9:65:ea:
                    fd:4d:7f:cd:c7:0f:00:d1:94:d3:43:b6:bb:c0:e0:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:8F:19:EF:5C:9A:23:90:7E:F4:17:14:E1:4A:AD:99:42:E4:FB
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:f1:c7:e8:51:5c:0b:96:c2:b0:89:3d:fe:95:97:5f:77:4c:
         8e:c7:26:5e:3d:28:56:45:3a:81:5d:a0:93:9b:b4:05:79:75:
         07:dd:1a:b8:7e:cb:e3:2c:48:ba:66:16:70:8d:cf:76:65:a7:
         22:a3:c3:e3:8b:da:83:78:3b:8d:40:a4:48:dd:32:01:58:0f:
         e2:c1:de:14:bf:5f:79:26:e9:50:28:0e:23:41:64:0e:76:05:
         63:96:dd:9f:c2:c3:c6:3d:68:58:c5:14:9c:05:2e:56:87:10:
         5e:b5:1b:22:0c:33:20:19:9f:27:13:1e:9b:5a:9c:9f:13:49:
         0b:09:5a:46:64:52:d8:83:95:8b:21:ee:2b:fa:bf:ee:3d:4e:
         dc:c6:f1:7e:99:e0:09:81:4f:96:3c:8a:49:cb:e2:56:c6:77:
         61:62:db:c1:d1:50:9a:89:70:25:64:03:5c:30:af:75:a5:a1:
         66:31:d6:4b:43:7d:83:6a:52:81:8b:9b:33:5a:30:d3:61:65:
         bf:83:1b:d7:12:0b:37:c6:d4:e2:d9:a6:e5:d5:e5:e8:3b:bb:
         68:bc:81:90:45:30:c5:b6:56:d0:05:5c:f7:5c:b7:d5:27:1b:
         9e:ce:66:55:19:53:d9:76:fe:74:66:31:9b:54:fd:e0:57:38:
         e0:92:19:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWP4LUOaF+Qq/yO579OG9vJcfiNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyOEM1QTJFQTFFNTY0OTVBQTk2NkZCMTk4NEM3RjMw
NjRGREExRDAeFw0yNTAzMTMxODA5MjVaFw0yNjAzMTIxODE0MjVaMDMxMTAvBgNV
BAMTKDdBQkU4RjE5RUY1QzlBMjM5MDdFRjQxNzE0RTE0QUFEOTk0MkU0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd5PXFretIRKrydMxiL3LB+Io
ihHTfB1t0H+SBE7tPz8oVCGDW4MYBfBZsU/2dDNltv0li18xcf6wTvQI+Vsml1iA
X+RNQXinECzCf/DEqV2fXVlr/fpNFL1U03aDFfG8ijO3M8p0OU1bSkp6fjVHHpK3
n/96QpunzCGShh85Fx3z3/25PVSYO/EDxpbES98Hy/jrjXLMTXa7QPjDPo0TEyGp
p7ubQFWnh4dVp8pZxGBYxNlxa+TI6ShhQz6hFLSvO8hoCh94Dwnpbuq0eC/IAJLC
y7SYOSfMKyqqAgRFwvtflPXFsqMi0NdoM+ll6v1Nf83HDwDRlNNDtrvA4OoPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUer6PGe9cmiOQfvQXFOFKrZlC5PswHwYDVR0j
BBgwFoAU3CjFouoeVklaqWb7GYTH8wZP2h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC9EQzI4QzVBMkVBMUU1NjQ5NUFBOTY2RkIxOTg0QzdGMzA2NEZEQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMjhDNUEyRUExRTU2NDk1
QUE5NjZGQjE5ODRDN0YzMDY0RkRBMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDekVSNndBZ1J3dkVUTVprb3JicUx4TWpYUnljRk1ZTG1wZUdLdENLN2tjLzAv
MzIzODMwMzQzYTMyNjY2NDM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM0
MzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQv2AAwDQYJKoZIhvcNAQELBQADggEBALnxx+hR
XAuWwrCJPf6Vl193TI7HJl49KFZFOoFdoJObtAV5dQfdGrh+y+MsSLpmFnCNz3Zl
pyKjw+OL2oN4O41ApEjdMgFYD+LB3hS/X3km6VAoDiNBZA52BWOW3Z/Cw8Y9aFjF
FJwFLlaHEF61GyIMMyAZnycTHptanJ8TSQsJWkZkUtiDlYsh7iv6v+49TtzG8X6Z
4AmBT5Y8iknL4lbGd2Fi28HRUJqJcCVkA1wwr3WloWYx1ktDfYNqUoGLmzNaMNNh
Zb+DG9cSCzfG1OLZpuXV5eg7u2i8gZBFMMW2VtAFXPdct9UnG57OZlUZU9l2/nRm
MZtU/eBXOOCSGcM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:29:00 2025 by rpki-client