Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa
File:                     323830343a313764383a3a2f33322d3438203d3e203631393139.roa (raw, json)
Hash identifier:          0aw0NVTADez6z6kQQXpzHv0Ob4zjSj428617qbnXbrg=
Subject key identifier:   E3:D0:14:6D:0A:37:AD:B2:DE:31:B4:6B:11:0A:10:3C:48:3A:89:A6
Certificate issuer:       /CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82
Certificate serial:       215EF69BE90EA8CD14896E21791056D0F15C32ED
Authority key identifier: A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa
Signing time:             Thu 19 Dec 2024 18:06:24 +0000
ROA not before:           Thu 19 Dec 2024 18:01:24 +0000
ROA not after:            Thu 18 Dec 2025 18:06:24 +0000
asID:                     61919
IP address blocks:        2804:17d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl
                          rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:f6:9b:e9:0e:a8:cd:14:89:6e:21:79:10:56:d0:f1:5c:32:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D3FFAF243378899C8E9EEDD7F6F846604CB82
        Validity
            Not Before: Dec 19 18:01:24 2024 GMT
            Not After : Dec 18 18:06:24 2025 GMT
        Subject: CN=E3D0146D0A37ADB2DE31B46B110A103C483A89A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:44:40:80:a5:d1:45:d9:36:8e:78:e2:16:
                    aa:56:f8:e4:fa:03:98:92:bc:49:34:c2:a7:ea:9c:
                    7a:be:f5:2c:5b:6e:5e:e1:5f:76:1d:5e:d6:4f:d5:
                    21:a6:8d:c8:15:b1:f9:69:85:92:0d:20:5a:06:46:
                    fe:6f:0e:19:7f:8e:bc:c5:b7:0e:dc:71:89:fe:fa:
                    8d:e3:5f:e3:d0:3f:d4:ae:0d:a0:9a:7b:25:fb:a0:
                    d8:8d:7d:d0:65:3c:ac:4a:f9:85:1b:4d:53:e3:4e:
                    a1:b8:a5:ab:e6:34:67:52:75:44:59:65:09:41:77:
                    d2:84:d2:a4:b8:5b:07:69:39:d9:26:79:82:49:93:
                    32:24:ef:d2:1a:7d:23:83:4f:c7:b6:81:6d:ce:b3:
                    93:e5:a8:47:cc:4a:ee:04:84:a9:97:d0:b0:83:3a:
                    79:79:e9:d7:a9:2e:3b:20:6e:63:c7:9c:ef:8f:ad:
                    ae:a8:aa:a0:5e:14:33:80:8b:fc:3e:ab:cd:98:72:
                    fb:12:65:cf:af:ae:0a:16:00:ee:22:f5:f9:d5:aa:
                    1c:d2:63:44:a4:f7:32:fe:52:4e:51:58:ab:22:65:
                    e7:c5:b4:43:18:3d:e1:62:13:9a:6d:d3:e9:b6:f3:
                    fe:3d:2f:02:9c:4d:33:e2:4e:10:0f:bf:b5:57:10:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:14:6D:0A:37:AD:B2:DE:31:B4:6B:11:0A:10:3C:48:3A:89:A6
            X509v3 Authority Key Identifier:
                keyid:A9:0D:3F:FA:F2:43:37:88:99:C8:E9:EE:DD:7F:6F:84:66:04:CB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D3FFAF243378899C8E9EEDD7F6F846604CB82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/323830343a313764383a3a2f33322d3438203d3e203631393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:1b:05:25:00:9c:37:0c:45:6f:16:93:d0:08:38:f9:cf:
         54:0c:cb:84:d5:a6:24:60:05:2d:67:3e:d0:5c:ed:62:be:58:
         08:27:c4:48:6f:17:d7:b9:9e:01:ee:c2:73:eb:af:f8:a0:08:
         ef:3b:79:36:53:2b:08:26:c5:03:b7:16:e6:f9:86:82:e6:a4:
         fc:6e:1a:2c:51:80:7c:ca:5a:17:65:57:9b:88:71:27:b7:69:
         40:a9:86:e0:17:05:62:5b:70:fd:a9:a5:89:9a:5e:cf:bf:e9:
         c6:00:e9:16:89:03:cc:c7:4f:3b:d6:a6:e4:04:26:54:43:db:
         24:98:7f:df:36:bd:42:54:ee:79:3f:d2:3b:98:94:1d:b1:f0:
         5d:55:d5:36:8b:b8:cc:cc:d2:4f:e2:bc:23:6b:6e:2b:ec:f8:
         26:ca:08:f0:fa:9f:15:22:40:3f:b8:70:cb:41:1f:87:7d:4b:
         ab:4b:53:60:c2:dd:b8:f2:61:3f:0e:78:a0:73:7e:bc:ef:d8:
         be:c3:d9:18:22:b7:45:d5:35:96:55:e6:98:62:14:aa:6f:3a:
         fa:d6:67:f5:a4:d7:58:8b:6e:c0:0f:fb:01:12:7b:24:5e:e9:
         f5:0b:8e:dd:b0:d2:9a:0c:ed:22:bf:eb:19:ee:f0:75:f4:71:
         57:35:3f:22
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIV72m+kOqM0UiW4heRBW0PFcMu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwRDNGRkFGMjQzMzc4ODk5QzhFOUVFREQ3RjZGODQ2
NjA0Q0I4MjAeFw0yNDEyMTkxODAxMjRaFw0yNTEyMTgxODA2MjRaMDMxMTAvBgNV
BAMTKEUzRDAxNDZEMEEzN0FEQjJERTMxQjQ2QjExMEExMDNDNDgzQTg5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlURAgKXRRdk2jnjiFqpW+OT6
A5iSvEk0wqfqnHq+9Sxbbl7hX3YdXtZP1SGmjcgVsflphZINIFoGRv5vDhl/jrzF
tw7ccYn++o3jX+PQP9SuDaCaeyX7oNiNfdBlPKxK+YUbTVPjTqG4pavmNGdSdURZ
ZQlBd9KE0qS4WwdpOdkmeYJJkzIk79IafSODT8e2gW3Os5PlqEfMSu4EhKmX0LCD
Onl56depLjsgbmPHnO+Pra6oqqBeFDOAi/w+q82YcvsSZc+vrgoWAO4i9fnVqhzS
Y0Sk9zL+Uk5RWKsiZefFtEMYPeFiE5pt0+m28/49LwKcTTPiThAPv7VXEFknAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU49AUbQo3rbLeMbRrEQoQPEg6iaYwHwYDVR0j
BBgwFoAUqQ0/+vJDN4iZyOnu3X9vhGYEy4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEs0b2RuYTdHVFc2ZlU5cEdHUzVNVHFORmg0Y3VTZXpaSzh2QkFSNkhC
NXEvMC9BOTBEM0ZGQUYyNDMzNzg4OTlDOEU5RUVERDdGNkY4NDY2MDRDQjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MEQzRkZBRjI0MzM3ODg5
OUM4RTlFRUREN0Y2Rjg0NjYwNENCODIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLNG9kbmE3R1RXNmZVOXBHR1M1TVRxTkZoNGN1U2V6Wks4dkJBUjZIQjVxLzAv
MzIzODMwMzQzYTMxMzc2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM5
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEF9gwDQYJKoZIhvcNAQELBQADggEBAIz2GwUlAJw3
DEVvFpPQCDj5z1QMy4TVpiRgBS1nPtBc7WK+WAgnxEhvF9e5ngHuwnPrr/igCO87
eTZTKwgmxQO3Fub5hoLmpPxuGixRgHzKWhdlV5uIcSe3aUCphuAXBWJbcP2ppYma
Xs+/6cYA6RaJA8zHTzvWpuQEJlRD2ySYf982vUJU7nk/0juYlB2x8F1V1TaLuMzM
0k/ivCNrbivs+CbKCPD6nxUiQD+4cMtBH4d9S6tLU2DC3bjyYT8OeKBzfrzv2L7D
2Rgit0XVNZZV5phiFKpvOvrWZ/Wk11iLbsAP+wESeyRe6fULjt2w0poM7SK/6xnu
8HX0cVc1PyI=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:48 2025 by rpki-client