Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
File:                     323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (raw, json)
Hash identifier:          QjRttNmqUPaK2KnTPeAU0bHlEH3tU0dixEi9W/TbZwQ=
Subject key identifier:   30:60:E5:41:A9:F1:B0:19:DD:CC:19:ED:EF:31:7C:B2:F9:18:4A:7B
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       0BA169A8CAEA982EF93711CC3901E9ADC23AF454
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa
Signing time:             Wed 15 May 2024 19:11:53 +0000
ROA not before:           Wed 15 May 2024 19:06:53 +0000
ROA not after:            Wed 14 May 2025 19:11:53 +0000
asID:                     265264
IP address blocks:        2804:2d28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a1:69:a8:ca:ea:98:2e:f9:37:11:cc:39:01:e9:ad:c2:3a:f4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: May 15 19:06:53 2024 GMT
            Not After : May 14 19:11:53 2025 GMT
        Subject: CN=3060E541A9F1B019DDCC19EDEF317CB2F9184A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:08:4b:c1:28:22:e4:5c:1d:78:76:ea:f1:
                    e8:b0:02:01:d4:a3:a5:f7:ee:0d:1c:22:6c:64:cd:
                    93:a0:2e:3c:07:c2:e0:47:d4:2a:46:4b:ec:1d:c1:
                    f9:86:73:d3:5f:9a:c1:0c:8c:16:bc:e0:5d:e1:f0:
                    4d:86:13:67:d3:c5:13:d6:ae:62:73:ba:17:3f:77:
                    c1:58:2f:60:92:57:0d:b0:a5:5d:83:f3:75:2f:dc:
                    36:9b:3e:1e:4f:f2:0a:87:70:5f:a7:90:c7:02:3f:
                    57:c4:44:6f:ed:bc:19:a6:a5:3d:e0:5c:bc:74:d1:
                    e6:0f:ba:77:96:0b:14:c9:71:f8:1a:eb:e9:34:27:
                    51:86:be:dd:1c:3f:4f:a7:b1:a1:56:12:3a:7c:db:
                    75:d6:31:c8:17:29:3a:75:c5:c7:fe:54:be:e9:95:
                    35:93:91:ec:fa:14:99:4d:1d:4b:99:59:29:a5:8f:
                    09:6b:ca:a6:52:4d:68:82:dc:a2:bc:3b:b7:e4:ab:
                    da:98:a4:de:38:2c:22:cd:0f:16:ab:cf:f7:74:68:
                    0f:46:28:9d:6e:6e:5e:ac:7f:de:cc:f3:31:bd:69:
                    52:99:35:9d:82:68:a3:12:dc:1e:f7:d9:d6:ca:b4:
                    52:21:52:2a:2b:c7:08:3e:ea:84:63:40:92:8a:d7:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:60:E5:41:A9:F1:B0:19:DD:CC:19:ED:EF:31:7C:B2:F9:18:4A:7B
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/323830343a326432383a3a2f33322d313238203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:d8:ed:af:01:dd:91:a6:eb:d6:71:40:7a:38:93:07:4e:
         6b:2c:eb:7e:30:05:7d:d0:3f:f4:80:3b:f4:9b:05:c6:e2:85:
         30:c1:18:88:11:38:e6:63:a8:68:31:c4:10:e0:ac:10:cc:94:
         bc:3d:a2:a7:8c:14:e7:06:3d:40:d8:3e:24:73:1d:2d:ac:90:
         b4:4a:a5:fb:5a:91:5c:11:c9:5d:d4:88:f5:68:42:46:a1:26:
         03:a6:8c:7e:a1:be:97:6c:e4:52:d1:b4:cd:35:72:a9:31:95:
         cf:58:9d:b4:e9:7b:17:a5:7f:b0:8e:41:76:68:0d:e1:f8:fb:
         54:84:49:48:a3:dd:81:b1:ae:00:1a:df:1e:dc:c5:da:de:11:
         07:0c:a4:21:86:06:8b:d4:f2:a3:10:56:02:4f:8d:cd:f3:f6:
         ca:f3:b1:58:1b:99:7d:5f:85:99:bd:25:98:67:b3:83:d1:cb:
         7f:f9:81:67:0f:64:b0:60:b2:95:25:ea:2a:84:8a:48:7d:77:
         a2:2d:60:f2:a1:da:5e:1c:c5:a0:b4:23:d0:b8:9c:bf:ab:75:
         4e:9e:3d:d5:b1:03:53:67:83:53:53:38:87:4a:9e:9e:c0:71:
         3f:73:18:6d:09:99:80:f1:0a:de:e3:4d:3a:37:bb:d9:50:7e:
         de:ea:bc:24
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUC6FpqMrqmC75NxHMOQHprcI69FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF
MDZBMjdFMjAeFw0yNDA1MTUxOTA2NTNaFw0yNTA1MTQxOTExNTNaMDMxMTAvBgNV
BAMTKDMwNjBFNTQxQTlGMUIwMTlERENDMTlFREVGMzE3Q0IyRjkxODRBN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZAhLwSgi5FwdeHbq8eiwAgHU
o6X37g0cImxkzZOgLjwHwuBH1CpGS+wdwfmGc9NfmsEMjBa84F3h8E2GE2fTxRPW
rmJzuhc/d8FYL2CSVw2wpV2D83Uv3DabPh5P8gqHcF+nkMcCP1fERG/tvBmmpT3g
XLx00eYPuneWCxTJcfga6+k0J1GGvt0cP0+nsaFWEjp823XWMcgXKTp1xcf+VL7p
lTWTkez6FJlNHUuZWSmljwlryqZSTWiC3KK8O7fkq9qYpN44LCLNDxarz/d0aA9G
KJ1ubl6sf97M8zG9aVKZNZ2CaKMS3B732dbKtFIhUiorxwg+6oRjQJKK10bTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUMGDlQanxsBndzBnt7zF8svkYSnswHwYDVR0j
BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl
UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0
NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcGVKRzlmZlQ1Q25oRGJobjdBZHV5dUxiRUE5QWhXVzV3aVBvSGFGZVBTLzAv
MzIzODMwMzQzYTMyNjQzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBC0oMA0GCSqGSIb3DQEBCwUAA4IBAQBufdjt
rwHdkabr1nFAejiTB05rLOt+MAV90D/0gDv0mwXG4oUwwRiIETjmY6hoMcQQ4KwQ
zJS8PaKnjBTnBj1A2D4kcx0trJC0SqX7WpFcEcld1Ij1aEJGoSYDpox+ob6XbORS
0bTNNXKpMZXPWJ206XsXpX+wjkF2aA3h+PtUhElIo92Bsa4AGt8e3MXa3hEHDKQh
hgaL1PKjEFYCT43N8/bK87FYG5l9X4WZvSWYZ7OD0ct/+YFnD2SwYLKVJeoqhIpI
fXeiLWDyodpeHMWgtCPQuJy/q3VOnj3VsQNTZ4NTUziHSp6ewHE/cxhtCZmA8Qre
4006N7vZUH7e6rwk
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:00 2025 by rpki-client