Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
File:                     323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (raw, json)
Hash identifier:          yN3Jmgz1tdnO5EaDyytr5NGHkDLdPhYxhO1PBR0ZlWM=
Subject key identifier:   6C:8F:4E:1C:49:0C:B7:CB:60:FE:D0:94:91:7A:EB:13:28:45:85:EC
Certificate issuer:       /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
Certificate serial:       7CC78D08BE4FAE1567AF996E3DB2CC3EB8206F63
Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa
Signing time:             Mon 15 Jul 2024 19:21:56 +0000
ROA not before:           Mon 15 Jul 2024 19:16:56 +0000
ROA not after:            Mon 14 Jul 2025 19:21:56 +0000
asID:                     262505
IP address blocks:        2804:544::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl
                          rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c7:8d:08:be:4f:ae:15:67:af:99:6e:3d:b2:cc:3e:b8:20:6f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
        Validity
            Not Before: Jul 15 19:16:56 2024 GMT
            Not After : Jul 14 19:21:56 2025 GMT
        Subject: CN=6C8F4E1C490CB7CB60FED094917AEB13284585EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:5c:c4:78:8d:4b:2a:25:f5:f9:0e:6f:5e:
                    81:bf:a2:d6:17:70:f1:7f:1b:21:52:93:3f:4d:42:
                    44:42:3a:b0:a9:b9:97:0a:1d:ec:1e:77:3f:50:1d:
                    2b:6b:50:e5:a1:8b:6e:1c:1e:37:c5:e7:55:01:9c:
                    55:ee:97:30:32:24:50:d6:43:c4:d3:1c:6a:7a:be:
                    8e:a3:53:83:b5:d7:d9:f9:cf:14:77:08:6b:2b:20:
                    a1:1f:c1:d1:34:a4:a7:c1:20:fe:ae:1e:b6:5b:0a:
                    ea:30:57:ec:4d:66:7f:53:bc:62:46:68:dd:e2:c3:
                    00:41:b4:20:f9:2f:42:a3:66:31:99:17:e4:d7:ea:
                    a7:33:9c:58:f3:50:f1:73:25:70:c8:06:e1:9b:74:
                    57:64:b2:03:5a:ae:52:d7:c0:b4:51:79:8a:a8:a5:
                    13:34:4b:64:73:86:95:b3:40:a6:6e:dc:f4:37:7d:
                    c2:c5:ac:34:69:37:1b:05:56:25:95:bf:f3:a4:57:
                    d6:c3:63:ae:df:e8:e3:ee:cb:67:b1:47:f9:71:17:
                    ac:29:cc:b5:ff:b5:4c:97:ed:7a:7d:6c:8e:50:93:
                    26:39:18:bb:2c:8c:83:47:b4:4b:d9:a9:da:66:8f:
                    60:dd:14:3a:44:42:cb:92:4e:86:06:32:3c:bb:bd:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:4E:1C:49:0C:B7:CB:60:FE:D0:94:91:7A:EB:13:28:45:85:EC
            X509v3 Authority Key Identifier:
                keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/323830343a3534343a3a2f33322d3438203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:544::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:19:99:08:c1:f2:26:4f:47:d3:e3:bf:09:a0:f3:32:a7:66:
         88:31:95:73:2d:0c:2e:e5:43:38:3e:a4:fd:2c:38:dc:b5:46:
         a4:08:ab:64:8f:01:7f:09:73:36:e0:25:c5:99:0c:bb:6d:b6:
         cd:13:80:b2:5a:e2:80:ed:e3:c2:14:54:3f:67:7e:26:78:39:
         f3:e4:8f:4a:5b:be:46:2e:49:0d:e7:8d:ce:12:a5:ea:a0:15:
         f0:b1:36:1e:68:34:15:c5:8b:c9:92:b1:52:4e:b2:ec:ee:92:
         ea:ba:0c:c6:c4:c8:4f:8b:f0:0c:6f:ff:af:8b:ae:f0:81:57:
         48:4d:1d:07:5d:fd:2d:0f:ef:91:60:76:53:00:ac:21:8f:87:
         cc:94:60:3c:24:72:db:26:03:09:71:8b:9e:4f:70:16:6e:78:
         dc:11:4d:1c:5d:46:b5:46:c4:7e:46:08:a2:84:93:61:49:d9:
         83:66:04:dd:69:01:08:42:4e:ef:c1:28:6a:d9:28:6f:e9:a8:
         68:a1:99:52:59:0c:4c:60:e4:6a:53:39:be:d5:d9:86:e1:d6:
         42:b3:62:9f:b7:63:39:19:aa:b2:ea:15:a9:b9:41:31:68:71:
         27:42:9d:aa:6b:b4:2e:e2:34:49:f2:d3:10:d5:e2:65:32:46:
         42:d6:b9:b3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfMeNCL5PrhVnr5luPbLMPrggb2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzMkFDODFBNjBERUNCRDU1NzkyQTI1OTRDNDBBNUQ3
NzQyNTU5RTAeFw0yNDA3MTUxOTE2NTZaFw0yNTA3MTQxOTIxNTZaMDMxMTAvBgNV
BAMTKDZDOEY0RTFDNDkwQ0I3Q0I2MEZFRDA5NDkxN0FFQjEzMjg0NTg1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0lzEeI1LKiX1+Q5vXoG/otYX
cPF/GyFSkz9NQkRCOrCpuZcKHewedz9QHStrUOWhi24cHjfF51UBnFXulzAyJFDW
Q8TTHGp6vo6jU4O119n5zxR3CGsrIKEfwdE0pKfBIP6uHrZbCuowV+xNZn9TvGJG
aN3iwwBBtCD5L0KjZjGZF+TX6qcznFjzUPFzJXDIBuGbdFdksgNarlLXwLRReYqo
pRM0S2RzhpWzQKZu3PQ3fcLFrDRpNxsFViWVv/OkV9bDY67f6OPuy2exR/lxF6wp
zLX/tUyX7Xp9bI5QkyY5GLssjINHtEvZqdpmj2DdFDpEQsuSToYGMjy7vS7PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUbI9OHEkMt8tg/tCUkXrrEyhFhewwHwYDVR0j
BBgwFoAULjKsgaYN7L1VeSollMQKXXdCVZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp
NUMvMC8yRTMyQUM4MUE2MERFQ0JENTU3OTJBMjU5NEM0MEE1RDc3NDI1NTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMzJBQzgxQTYwREVDQkQ1
NTc5MkEyNTk0QzQwQTVENzc0MjU1OUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWSnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzAv
MzIzODMwMzQzYTM1MzQzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM1
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBUQwDQYJKoZIhvcNAQELBQADggEBAEMZmQjB8iZP
R9Pjvwmg8zKnZogxlXMtDC7lQzg+pP0sONy1RqQIq2SPAX8JczbgJcWZDLttts0T
gLJa4oDt48IUVD9nfiZ4OfPkj0pbvkYuSQ3njc4SpeqgFfCxNh5oNBXFi8mSsVJO
suzukuq6DMbEyE+L8Axv/6+LrvCBV0hNHQdd/S0P75FgdlMArCGPh8yUYDwkctsm
Awlxi55PcBZueNwRTRxdRrVGxH5GCKKEk2FJ2YNmBN1pAQhCTu/BKGrZKG/pqGih
mVJZDExg5GpTOb7V2Ybh1kKzYp+3YzkZqrLqFam5QTFocSdCnaprtC7iNEny0xDV
4mUyRkLWubM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:39 2025 by rpki-client