Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
File:                     323830343a6431303a3a2f33322d3438203d3e203532353933.roa (raw, json)
Hash identifier:          nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=
Subject key identifier:   45:08:8C:8D:E8:BA:A3:85:D5:74:96:6C:A9:FB:5E:99:BF:2E:26:89
Certificate issuer:       /CN=5429A630D95311C5AADAF5AC62BF18BF86863194
Certificate serial:       75CB288495CDC5E00B36572980402BD95F57B999
Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa
Signing time:             Thu 19 Dec 2024 19:44:04 +0000
ROA not before:           Thu 19 Dec 2024 19:39:04 +0000
ROA not after:            Thu 18 Dec 2025 19:44:04 +0000
asID:                     52593
IP address blocks:        2804:d10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 20:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cb:28:84:95:cd:c5:e0:0b:36:57:29:80:40:2b:d9:5f:57:b9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194
        Validity
            Not Before: Dec 19 19:39:04 2024 GMT
            Not After : Dec 18 19:44:04 2025 GMT
        Subject: CN=45088C8DE8BAA385D574966CA9FB5E99BF2E2689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:f1:5b:8a:56:70:32:a9:9c:dc:74:ea:e3:
                    88:4c:1e:d7:b6:c1:e7:2e:ff:bb:c0:66:23:46:88:
                    4f:73:17:d8:b6:c5:bc:07:e1:5e:59:55:b8:a2:2d:
                    14:9e:84:7f:07:85:2b:03:af:b0:c5:70:40:4b:32:
                    fd:7e:37:f5:5f:f2:70:15:57:d9:5d:69:02:85:fa:
                    dd:f6:a2:43:79:71:f2:f2:1b:e7:64:92:49:2f:fd:
                    e6:93:5b:59:0d:90:3c:cd:89:5c:6a:d5:6e:3d:e3:
                    a9:07:d1:28:d1:2e:79:80:b2:a2:97:74:25:61:23:
                    88:c1:a2:9f:eb:94:2b:42:4b:f7:a9:a8:83:69:ef:
                    af:83:4a:d9:c3:f9:be:5b:83:5c:93:52:98:e9:59:
                    c1:dd:20:b4:45:7b:b0:5a:74:8d:a1:1d:4f:79:64:
                    20:42:76:78:2c:dd:c2:90:8c:6e:25:48:ac:65:ec:
                    72:2b:3b:66:b6:73:68:4c:35:78:b7:6d:59:c0:fe:
                    7f:34:ce:2f:7a:91:2f:a4:86:dc:3e:ea:b7:25:76:
                    d0:7e:2f:57:8c:16:76:b3:8d:04:7e:7c:5a:91:fa:
                    fd:59:5a:a5:b5:92:2a:31:1e:59:6f:ec:18:a3:af:
                    d1:a4:6c:7c:d1:68:ec:e1:b9:e8:6c:50:fe:75:53:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:8C:8D:E8:BA:A3:85:D5:74:96:6C:A9:FB:5E:99:BF:2E:26:89
            X509v3 Authority Key Identifier:
                keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/323830343a6431303a3a2f33322d3438203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:f8:fa:6c:13:df:b7:8a:ed:93:e5:8d:c4:a5:ca:df:6b:6e:
         4b:91:c3:10:da:6f:cb:9a:37:b8:aa:da:8c:6a:c9:fd:72:f3:
         70:e3:f0:35:7e:a2:8f:02:20:a2:e4:f2:16:76:b5:8e:3e:1c:
         62:65:9e:a7:03:b8:b7:2c:5d:88:f3:17:10:b8:dd:99:a2:05:
         eb:59:14:86:65:bd:49:fd:2c:9f:85:fd:d3:1b:bd:6b:2a:76:
         c8:fa:50:95:be:05:10:91:30:63:ad:95:87:c5:3f:f2:bf:a3:
         41:61:5c:86:5b:cd:55:3c:c8:3b:2d:e8:a1:cf:60:27:da:9a:
         42:0b:25:3f:6e:fb:27:93:64:a1:9d:25:6e:98:49:50:7e:24:
         23:09:57:4e:6d:ef:30:92:5c:db:90:a9:d0:54:4b:ae:5b:e7:
         2f:67:8a:86:27:8d:09:ee:4d:fb:b3:a9:e7:e5:eb:79:f2:ff:
         61:cc:f2:c4:92:5a:97:cf:90:b6:e7:04:df:3e:ec:37:50:94:
         16:43:8c:ba:bf:17:14:6a:bd:c1:ca:c2:f5:4d:5f:81:b5:6e:
         b3:f4:7d:0d:2c:2d:20:d9:70:6c:c1:89:9a:e9:99:c5:00:26:
         82:ef:55:e7:27:a8:a3:18:c7:b6:05:f4:79:a2:5e:94:9c:f7:
         54:93:2d:14
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUdcsohJXNxeALNlcpgEAr2V9XuZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4
Njg2MzE5NDAeFw0yNDEyMTkxOTM5MDRaFw0yNTEyMTgxOTQ0MDRaMDMxMTAvBgNV
BAMTKDQ1MDg4QzhERThCQUEzODVENTc0OTY2Q0E5RkI1RTk5QkYyRTI2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqvFbilZwMqmc3HTq44hMHte2
wecu/7vAZiNGiE9zF9i2xbwH4V5ZVbiiLRSehH8HhSsDr7DFcEBLMv1+N/Vf8nAV
V9ldaQKF+t32okN5cfLyG+dkkkkv/eaTW1kNkDzNiVxq1W4946kH0SjRLnmAsqKX
dCVhI4jBop/rlCtCS/epqINp76+DStnD+b5bg1yTUpjpWcHdILRFe7BadI2hHU95
ZCBCdngs3cKQjG4lSKxl7HIrO2a2c2hMNXi3bVnA/n80zi96kS+khtw+6rcldtB+
L1eMFnazjQR+fFqR+v1ZWqW1kioxHllv7Bijr9GkbHzRaOzhuehsUP51U8hxAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQURQiMjei6o4XVdJZsqftemb8uJokwHwYDVR0j
BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN
SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB
QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNU1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAv
MzIzODMwMzQzYTY0MzEzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTM5
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA0QMA0GCSqGSIb3DQEBCwUAA4IBAQBE+PpsE9+3iu2T
5Y3Epcrfa25LkcMQ2m/Lmje4qtqMasn9cvNw4/A1fqKPAiCi5PIWdrWOPhxiZZ6n
A7i3LF2I8xcQuN2ZogXrWRSGZb1J/Syfhf3TG71rKnbI+lCVvgUQkTBjrZWHxT/y
v6NBYVyGW81VPMg7Leihz2An2ppCCyU/bvsnk2ShnSVumElQfiQjCVdObe8wklzb
kKnQVEuuW+cvZ4qGJ40J7k37s6nn5et58v9hzPLEklqXz5C25wTfPuw3UJQWQ4y6
vxcUar3BysL1TV+BtW6z9H0NLC0g2XBswYma6ZnFACaC71XnJ6ijGMe2BfR5ol6U
nPdUky0U
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:18 2025 by rpki-client