Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa
File:                     323830343a323966343a3a2f33322d3332203d3e20323634303437.roa (raw, json)
Hash identifier:          Ssi1giKOSJeIzntLewhFmgG7iaoTRWGpW6whNrDBKr8=
Subject key identifier:   D8:C1:96:8C:4F:CB:F6:40:F3:33:D6:77:4D:72:FC:B5:09:E3:49:ED
Certificate issuer:       /CN=132DCDB6019382C752C71B103893EAC01BCC5512
Certificate serial:       1D162BAE57C75FC2B8E0FFECA2ADBCD547E651A9
Authority key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa
Signing time:             Tue 12 Nov 2024 18:14:17 +0000
ROA not before:           Tue 12 Nov 2024 18:09:17 +0000
ROA not after:            Tue 11 Nov 2025 18:14:17 +0000
asID:                     264047
IP address blocks:        2804:29f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:16:2b:ae:57:c7:5f:c2:b8:e0:ff:ec:a2:ad:bc:d5:47:e6:51:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132DCDB6019382C752C71B103893EAC01BCC5512
        Validity
            Not Before: Nov 12 18:09:17 2024 GMT
            Not After : Nov 11 18:14:17 2025 GMT
        Subject: CN=D8C1968C4FCBF640F333D6774D72FCB509E349ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:88:1e:ea:e7:8e:7b:c1:92:0c:d4:02:37:
                    e7:12:04:03:99:2b:5e:13:35:ff:f0:65:04:36:7b:
                    46:51:c1:b5:51:9e:d4:96:f2:a7:cc:54:23:cc:51:
                    97:08:ab:f6:82:e2:bb:0e:c5:90:50:97:57:06:57:
                    97:26:8f:53:c9:a8:33:d0:22:9e:52:13:da:36:7d:
                    70:c9:ad:a3:bd:e6:d4:db:cd:98:1b:7f:d0:95:2f:
                    26:86:ed:e6:8a:1a:f1:49:84:de:44:5e:d7:93:1d:
                    26:49:97:ee:fa:db:cc:84:0c:db:9a:19:3d:a9:3f:
                    58:c9:74:28:59:33:22:ee:f0:6e:52:a5:4b:ff:b0:
                    3b:f4:c5:a2:f5:a3:92:b0:2f:3c:17:82:d4:09:0e:
                    79:f4:f8:83:33:5d:4c:10:c8:5a:29:c3:4e:e0:b9:
                    18:71:72:be:23:4b:6e:a7:9e:bb:cd:02:b3:b5:51:
                    d8:4a:43:77:c7:0a:61:79:59:c1:2d:0a:2b:57:21:
                    ba:a2:76:38:d2:fa:70:ac:8f:05:54:00:dd:3a:c0:
                    91:75:e7:3f:eb:b6:96:07:fc:5c:b8:5b:11:cb:26:
                    78:a1:70:fa:eb:47:85:9a:46:c4:ab:77:ed:44:67:
                    a2:6a:14:90:37:80:20:78:c4:ee:50:00:70:a1:68:
                    4e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:96:8C:4F:CB:F6:40:F3:33:D6:77:4D:72:FC:B5:09:E3:49:ED
            X509v3 Authority Key Identifier:
                keyid:13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/323830343a323966343a3a2f33322d3332203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:18:a3:dd:b3:74:c7:06:10:2a:24:9d:fe:42:f6:9d:3b:
         78:6d:01:60:f5:49:55:d5:37:0b:27:96:ff:ef:60:28:9a:c6:
         58:c6:b4:aa:3b:74:fd:1a:d4:70:49:c5:49:da:8f:e3:6b:84:
         64:98:ee:19:99:b8:1a:e4:3f:fc:1c:ca:c7:7c:8c:7a:7c:db:
         0e:59:9c:29:24:95:99:e5:b4:93:50:a4:da:e1:a1:29:02:61:
         b5:ea:f4:a7:aa:4d:43:26:6e:92:58:c9:4e:32:66:4e:c1:7b:
         eb:9b:8c:79:24:b2:dd:ca:e1:2f:2c:41:33:9b:7e:16:60:92:
         1a:8b:b9:6a:42:1f:9e:a1:72:45:26:ac:cd:c3:9b:55:12:59:
         3d:f4:cc:f7:27:05:61:d4:aa:5b:f4:63:e5:00:af:6b:43:2f:
         be:a6:df:21:9e:60:38:61:c1:8c:cc:c2:a8:c3:80:e2:fc:b0:
         1c:09:ef:28:81:41:5f:24:15:68:b4:97:bc:ca:0a:39:d6:3f:
         00:4e:56:ce:57:ab:1d:01:5e:01:84:e9:3d:80:45:95:f0:96:
         87:6a:ff:74:71:4c:4a:05:f4:c7:48:67:06:e4:4c:dd:52:e5:
         f8:40:d5:89:b8:c3:de:da:9a:e6:81:02:72:cb:09:3d:59:bc:
         3d:6a:ee:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHRYrrlfHX8K44P/soq281UfmUakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMyRENEQjYwMTkzODJDNzUyQzcxQjEwMzg5M0VBQzAx
QkNDNTUxMjAeFw0yNDExMTIxODA5MTdaFw0yNTExMTExODE0MTdaMDMxMTAvBgNV
BAMTKEQ4QzE5NjhDNEZDQkY2NDBGMzMzRDY3NzRENzJGQ0I1MDlFMzQ5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPYge6ueOe8GSDNQCN+cSBAOZ
K14TNf/wZQQ2e0ZRwbVRntSW8qfMVCPMUZcIq/aC4rsOxZBQl1cGV5cmj1PJqDPQ
Ip5SE9o2fXDJraO95tTbzZgbf9CVLyaG7eaKGvFJhN5EXteTHSZJl+7628yEDNua
GT2pP1jJdChZMyLu8G5SpUv/sDv0xaL1o5KwLzwXgtQJDnn0+IMzXUwQyFopw07g
uRhxcr4jS26nnrvNArO1UdhKQ3fHCmF5WcEtCitXIbqidjjS+nCsjwVUAN06wJF1
5z/rtpYH/Fy4WxHLJnihcPrrR4WaRsSrd+1EZ6JqFJA3gCB4xO5QAHChaE6nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2MGWjE/L9kDzM9Z3TXL8tQnjSe0wHwYDVR0j
BBgwFoAUEy3NtgGTgsdSxxsQOJPqwBvMVRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdFakF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hW
b2UvMC8xMzJEQ0RCNjAxOTM4MkM3NTJDNzFCMTAzODkzRUFDMDFCQ0M1NTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMkRDREI2MDE5MzgyQzc1
MkM3MUIxMDM4OTNFQUMwMUJDQzU1MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3RWpBd1VmOUtQblg0RVJ5MUJYRUJVc2VjZDN1WTNqSDVCMkNxM1d4Vm9lLzAv
MzIzODMwMzQzYTMyMzk2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQp9DANBgkqhkiG9w0BAQsFAAOCAQEAXOEYo92z
dMcGECoknf5C9p07eG0BYPVJVdU3CyeW/+9gKJrGWMa0qjt0/RrUcEnFSdqP42uE
ZJjuGZm4GuQ//BzKx3yMenzbDlmcKSSVmeW0k1Ck2uGhKQJhter0p6pNQyZukljJ
TjJmTsF765uMeSSy3crhLyxBM5t+FmCSGou5akIfnqFyRSaszcObVRJZPfTM9ycF
YdSqW/Rj5QCva0MvvqbfIZ5gOGHBjMzCqMOA4vywHAnvKIFBXyQVaLSXvMoKOdY/
AE5WzlerHQFeAYTpPYBFlfCWh2r/dHFMSgX0x0hnBuRM3VLl+EDVibjD3tqa5oEC
cssJPVm8PWruyw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:40 2025 by rpki-client