Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa
File:                     323830343a376564383a3a2f33322d3438203d3e203238323332.roa (raw, json)
Hash identifier:          2HfbfUuNtrJ+8nyxCx7GDwyZyP3MbfYEIT31d+5Kydw=
Subject key identifier:   44:8A:F3:A6:EF:53:F6:A8:4D:7C:97:69:BD:2F:56:7D:DC:C6:C0:63
Certificate issuer:       /CN=99C2A53A53B7161516985068CD39F465FE646938
Certificate serial:       20E6C0E4176E8C022AC5F2813AC40C1C87ABDA94
Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa
Signing time:             Mon 23 Dec 2024 16:38:22 +0000
ROA not before:           Mon 23 Dec 2024 16:33:22 +0000
ROA not after:            Mon 22 Dec 2025 16:38:22 +0000
asID:                     28232
IP address blocks:        2804:7ed8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl
                          rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:c0:e4:17:6e:8c:02:2a:c5:f2:81:3a:c4:0c:1c:87:ab:da:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938
        Validity
            Not Before: Dec 23 16:33:22 2024 GMT
            Not After : Dec 22 16:38:22 2025 GMT
        Subject: CN=448AF3A6EF53F6A84D7C9769BD2F567DDCC6C063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:b4:52:42:fd:9c:76:6b:ca:95:47:35:c6:
                    a2:20:c9:53:09:be:d9:ae:f3:34:3f:18:cb:f1:1e:
                    06:4a:31:13:fa:a9:bd:0f:88:fb:d6:a7:76:28:98:
                    46:b7:c0:f9:d6:7a:15:45:a4:4f:93:16:fb:e9:48:
                    f0:a6:4d:3c:ab:62:00:46:b4:8c:e8:62:32:d0:3f:
                    56:13:19:f5:fc:6c:cd:eb:b8:7d:14:a9:58:13:ae:
                    ee:3d:a4:87:c9:b4:88:78:d4:50:72:fa:9b:d8:d1:
                    5f:5b:f9:32:4b:20:ea:88:d2:ad:ae:8d:65:80:c2:
                    a5:af:a5:02:1f:f9:1a:56:de:16:0b:62:d3:59:2c:
                    7d:d0:5c:f5:db:33:56:23:8d:cb:e9:3f:5e:48:9d:
                    e2:76:c7:65:c7:28:bb:30:29:86:5d:ee:44:b7:77:
                    08:64:38:e6:6a:ee:9b:a0:ea:9e:dd:ce:ac:ad:c4:
                    b9:b7:c5:cd:34:b4:64:02:a7:41:e8:8d:e0:54:9e:
                    4a:e2:c7:98:58:f1:f3:2a:e7:a4:99:11:22:69:c0:
                    b7:97:87:42:92:df:75:5c:1b:e0:c8:10:52:e8:c4:
                    d0:5b:9b:39:85:76:8c:d3:2a:2d:e6:81:aa:1e:f4:
                    b5:23:e5:46:0e:8d:d4:5e:71:03:7b:0b:c5:16:1f:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:F3:A6:EF:53:F6:A8:4D:7C:97:69:BD:2F:56:7D:DC:C6:C0:63
            X509v3 Authority Key Identifier:
                keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/323830343a376564383a3a2f33322d3438203d3e203238323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:48:cb:5a:ca:a3:e3:84:d7:3c:71:98:e3:e7:83:d3:87:3c:
         a8:08:ab:eb:e6:43:6e:64:a0:5f:cd:ba:24:e2:8d:78:8a:b8:
         97:50:4d:04:06:81:fa:6e:e0:97:fd:74:07:7b:3c:68:2c:28:
         bd:cb:9e:6a:79:21:d5:c0:8b:fc:4d:50:5f:19:fc:cf:bb:3d:
         e2:6a:44:76:49:c5:11:c2:e6:24:f3:97:7a:a3:95:e6:57:e2:
         a5:c0:bf:3e:4a:b2:cf:15:9b:ab:05:d5:89:58:97:40:ed:1a:
         8e:5c:6e:7c:83:b5:f7:8e:a2:5a:85:a5:cb:bb:b6:ba:e6:84:
         e9:35:cf:f4:eb:4a:cb:f2:ce:3c:f8:cb:2e:f0:b3:58:ee:81:
         15:df:a9:82:94:d3:1a:e9:b7:40:05:95:ea:9f:6a:ee:76:8a:
         54:a9:a8:32:d4:94:0b:57:39:f5:3e:e2:61:04:1b:7b:05:02:
         03:d1:0e:3a:bf:5e:8c:54:58:67:19:f6:e7:1d:6a:2d:15:d2:
         f7:b9:01:97:8b:ad:77:62:81:5e:07:f1:e5:51:03:e9:f1:89:
         2f:0e:15:4d:4d:d4:19:dc:9c:15:43:63:c8:ef:9d:fe:d1:49:
         9f:b6:27:e9:1e:1e:3e:10:e3:7b:70:2d:d7:1c:c2:0d:de:57:
         89:06:9d:3f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIObA5BdujAIqxfKBOsQMHIer2pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG
RTY0NjkzODAeFw0yNDEyMjMxNjMzMjJaFw0yNTEyMjIxNjM4MjJaMDMxMTAvBgNV
BAMTKDQ0OEFGM0E2RUY1M0Y2QTg0RDdDOTc2OUJEMkY1NjdERENDNkMwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVULRSQv2cdmvKlUc1xqIgyVMJ
vtmu8zQ/GMvxHgZKMRP6qb0PiPvWp3YomEa3wPnWehVFpE+TFvvpSPCmTTyrYgBG
tIzoYjLQP1YTGfX8bM3ruH0UqVgTru49pIfJtIh41FBy+pvY0V9b+TJLIOqI0q2u
jWWAwqWvpQIf+RpW3hYLYtNZLH3QXPXbM1YjjcvpP15IneJ2x2XHKLswKYZd7kS3
dwhkOOZq7pug6p7dzqytxLm3xc00tGQCp0HojeBUnkrix5hY8fMq56SZESJpwLeX
h0KS33VcG+DIEFLoxNBbmzmFdozTKi3mgaoe9LUj5UYOjdRecQN7C8UWH32dAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQURIrzpu9T9qhNfJdpvS9WfdzGwGMwHwYDVR0j
BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn
elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx
Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdaZXhkc3hnRjQ5TEQ5Q200WGJjUlFndU5QNTdyUkVHMTVuSEIzTEh1Z3paLzAv
MzIzODMwMzQzYTM3NjU2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMy
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEftgwDQYJKoZIhvcNAQELBQADggEBADlIy1rKo+OE
1zxxmOPng9OHPKgIq+vmQ25koF/NuiTijXiKuJdQTQQGgfpu4Jf9dAd7PGgsKL3L
nmp5IdXAi/xNUF8Z/M+7PeJqRHZJxRHC5iTzl3qjleZX4qXAvz5Kss8Vm6sF1YlY
l0DtGo5cbnyDtfeOolqFpcu7trrmhOk1z/TrSsvyzjz4yy7ws1jugRXfqYKU0xrp
t0AFleqfau52ilSpqDLUlAtXOfU+4mEEG3sFAgPRDjq/XoxUWGcZ9ucdai0V0ve5
AZeLrXdigV4H8eVRA+nxiS8OFU1N1BncnBVDY8jvnf7RSZ+2J+keHj4Q43twLdcc
wg3eV4kGnT8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:52 2025 by rpki-client